Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/_nQlYC_Qi3nMNSMias9VtZvBN30.roa
File:                     _nQlYC_Qi3nMNSMias9VtZvBN30.roa (raw, json)
Hash identifier:          9o9NlUy5Qw2V7vpe/U1EDzuEAuJRAI+4u2LC2e/ioew=
Subject key identifier:   FE:74:25:60:2F:D0:8B:79:CC:35:23:22:6A:CF:55:B5:9B:C1:37:7D
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0965
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/_nQlYC_Qi3nMNSMias9VtZvBN30.roa
Signing time:             Sun 30 Jun 2024 01:33:33 +0000
ROA not before:           Sun 30 Jun 2024 01:33:33 +0000
ROA not after:            Tue 24 Jun 2025 10:46:45 +0000
asID:                     9605
IP address blocks:        61.195.220.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Dec 2024 00:11:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2405 (0x965)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun 30 01:33:33 2024 GMT
            Not After : Jun 24 10:46:45 2025 GMT
        Subject: CN=FE7425602FD08B79CC3523226ACF55B59BC1377D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:d2:8f:f2:fe:83:83:18:4f:50:3b:a2:2c:45:
                    ab:a6:7e:2a:8f:fc:53:40:2c:a1:e6:7a:c0:9f:6a:
                    91:17:c4:1c:27:80:bb:bf:fd:77:f4:8c:93:39:e3:
                    8d:e7:a9:bd:23:54:f0:e2:4c:3d:cd:68:a2:0a:4c:
                    22:9f:4f:28:4c:6c:91:a9:fd:01:1c:86:a9:78:37:
                    b4:b9:4d:d5:0d:50:52:27:c3:d9:86:3c:da:77:f1:
                    2c:46:cf:61:05:38:5b:e0:f4:69:10:c6:9d:b5:a6:
                    1e:f2:eb:bb:97:47:10:78:4a:17:04:f1:4a:c9:d6:
                    c6:95:88:30:ba:d1:4a:20:ab:27:8d:fe:55:17:2c:
                    07:7f:f2:9b:53:02:29:8d:5f:83:ad:30:12:a9:bc:
                    40:d4:30:29:53:c3:80:8d:2b:e3:ce:06:b8:27:aa:
                    27:42:d7:88:3c:e2:82:77:3b:b5:f1:65:c0:b8:92:
                    33:33:e1:06:dd:6d:79:7a:20:15:32:5f:e7:79:5c:
                    b4:9b:c1:9c:51:62:64:9c:18:1b:2a:87:ed:a9:5b:
                    4b:ae:30:a1:f7:f1:fe:39:8f:98:f3:7c:36:5b:36:
                    65:2c:60:f4:42:41:3e:69:a6:bb:13:81:d1:4f:68:
                    58:5c:1f:4f:9b:ae:6c:10:a6:bc:a1:eb:7a:39:d1:
                    09:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:74:25:60:2F:D0:8B:79:CC:35:23:22:6A:CF:55:B5:9B:C1:37:7D
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/_nQlYC_Qi3nMNSMias9VtZvBN30.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.195.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         71:42:dc:fe:80:2b:0f:19:d6:ac:1e:78:d9:53:a3:e7:2f:a2:
         a5:a0:12:d4:25:d4:b8:d2:21:3e:51:e8:29:2e:c1:c8:5e:f7:
         56:20:0c:12:68:a3:7c:70:3d:f4:44:13:c8:98:4c:ba:2a:7c:
         f0:ad:60:36:da:83:f0:a4:7f:95:12:59:6a:32:6f:9e:1e:af:
         47:c5:46:00:52:2c:b6:e7:61:6d:b4:3f:22:3f:5f:81:ad:e7:
         db:6d:56:a8:d0:d5:03:eb:56:a0:ea:f5:ef:2a:11:53:19:6e:
         3b:0b:39:cf:8e:c8:b8:88:19:5c:60:ef:43:e2:b9:7f:28:b4:
         27:de:ca:ab:35:64:af:e2:a6:f9:31:24:c9:ed:a0:9b:12:1e:
         4d:bb:a6:00:fd:f4:2c:ae:f0:40:6e:5b:55:99:03:73:17:98:
         a1:52:90:d6:fd:49:ca:93:7d:97:90:e3:ba:47:c1:72:85:9a:
         30:bb:e0:d0:e7:45:d3:8b:e7:08:57:e9:1e:8c:97:27:45:79:
         83:7e:17:a7:05:cb:14:9d:bd:1d:2e:f5:9b:99:d3:82:bd:7c:
         4b:07:c2:61:63:1c:c2:61:2a:4d:8e:ed:ec:81:44:4a:5b:b6:
         85:9b:84:94:24:10:c2:37:0f:3f:5c:42:8f:a2:f5:b6:7b:a5:
         11:ce:07:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 02:27:15 2024 by rpki-client on console-ams.rpki-client.org