Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/cMD6OWgCK8F4Xj2Go7dVfR9W7zE.roa
File:                     cMD6OWgCK8F4Xj2Go7dVfR9W7zE.roa (raw, json)
Hash identifier:          WU+ccm3eJKqMFC632iDLUVZQeYqPv4RG0LOQm+pKVOY=
Subject key identifier:   70:C0:FA:39:68:02:2B:C1:78:5E:3D:86:A3:B7:55:7D:1F:56:EF:31
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       01F9
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/cMD6OWgCK8F4Xj2Go7dVfR9W7zE.roa
Signing time:             Tue 30 May 2023 16:29:23 +0000
ROA not before:           Tue 30 May 2023 16:29:23 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        110.160.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 May 2024 13:36:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 505 (0x1f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: May 30 16:29:23 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=70C0FA3968022BC1785E3D86A3B7557D1F56EF31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:20:12:91:3f:8e:f8:41:f1:41:ff:36:8e:95:
                    f5:82:38:18:7e:9d:ef:0e:d1:64:c0:6a:84:33:d7:
                    d7:7c:c5:4e:ba:21:fe:ac:5d:f0:2e:e6:15:fd:39:
                    9d:ad:87:0f:9b:1c:1e:e0:96:9b:1a:05:fa:6f:a4:
                    b9:5a:44:74:9f:1e:e6:bb:48:96:63:92:bc:70:bc:
                    dc:59:39:e9:d8:fa:a7:f8:c0:71:b8:81:48:76:01:
                    66:57:38:13:23:b2:7f:0f:7a:f8:16:ea:ad:a2:3a:
                    18:4c:24:ed:59:ac:5c:ef:18:64:18:8b:04:6e:9f:
                    fb:de:90:e7:6a:53:9d:4a:92:cc:98:0b:46:59:56:
                    46:a3:cc:e7:85:4e:60:ea:68:6e:69:ac:64:60:1f:
                    40:31:b1:03:07:8e:20:0c:d9:df:08:4b:ca:c7:42:
                    38:66:96:1e:f5:b7:47:a0:db:a4:f4:ba:cb:09:d3:
                    ff:e8:ea:c9:cb:01:45:fb:7b:15:e4:40:48:87:af:
                    30:68:be:ee:17:16:87:d3:0e:9d:98:8e:a7:27:0b:
                    12:a4:b1:76:86:83:69:8d:85:af:cf:2c:f3:af:e5:
                    c7:72:d4:b9:65:15:c8:ec:e5:17:ea:23:d0:7c:cc:
                    60:52:a4:d5:82:b7:d5:87:e4:b8:dd:77:80:4e:21:
                    bf:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:C0:FA:39:68:02:2B:C1:78:5E:3D:86:A3:B7:55:7D:1F:56:EF:31
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/cMD6OWgCK8F4Xj2Go7dVfR9W7zE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.160.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         e2:8c:96:f2:cd:df:ea:9a:10:c8:49:91:46:e4:0b:5c:b5:16:
         12:d9:95:3e:63:77:a9:07:71:37:81:36:02:43:17:f2:e6:50:
         79:31:f1:75:17:77:70:67:86:19:03:14:17:fc:a8:b9:ba:b3:
         e2:f9:73:84:c5:32:c4:68:78:28:86:39:f7:a5:58:69:ba:e4:
         78:00:13:31:39:53:01:10:04:33:10:0c:fa:d0:ee:4f:34:fc:
         9c:ab:8c:0d:12:8d:b4:d3:72:ca:88:3a:0f:d1:fa:8a:4a:73:
         8c:ca:73:d4:8d:ab:59:db:79:da:50:bd:9c:09:f9:d4:c8:49:
         dc:57:ae:da:11:05:5f:13:bd:24:24:71:54:82:08:0d:70:2a:
         5b:bb:ee:c7:d2:97:c1:de:1f:8a:b9:0b:9a:66:2f:09:dc:3f:
         42:d5:8f:60:27:b2:ad:f9:b1:57:b2:0b:f8:d0:4b:94:ec:ab:
         85:6a:5b:07:12:23:0d:6f:a4:c6:9d:a4:5e:ae:11:80:24:91:
         7b:44:88:b7:38:63:77:cb:88:92:c8:ee:e8:3c:d5:27:12:cb:
         6c:54:56:43:ba:bf:af:67:07:17:a7:c5:fe:21:90:76:e0:9d:
         b5:dd:1a:50:78:91:e0:6b:9c:74:cc:6c:6c:13:57:06:83:80:
         8b:c7:6d:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:15:57 2024 by rpki-client on console-ams.rpki-client.org