Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/eBbOVuYRYMytmWodQJy_XKHxeQw.roa
File:                     eBbOVuYRYMytmWodQJy_XKHxeQw.roa (raw, json)
Hash identifier:          pVxo32mH6+fdVydh59RRXUlIyjF4OCzJHTwfYC8whY8=
Subject key identifier:   78:16:CE:56:E6:11:60:CC:AD:99:6A:1D:40:9C:BF:5C:A1:F1:79:0C
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       047C
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/eBbOVuYRYMytmWodQJy_XKHxeQw.roa
Signing time:             Thu 27 Jul 2023 16:44:10 +0000
ROA not before:           Thu 27 Jul 2023 16:44:10 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     9605
IP address blocks:        220.210.69.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 22 Jun 2024 01:30:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1148 (0x47c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jul 27 16:44:10 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=7816CE56E61160CCAD996A1D409CBF5CA1F1790C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:66:13:c1:a5:36:0e:7d:59:c7:36:4d:76:39:
                    a9:37:07:86:d6:4a:aa:1e:4f:2f:80:35:94:f6:5f:
                    65:be:f4:d3:67:39:b7:ef:c2:b6:8e:ea:c6:9c:06:
                    ae:cb:bf:3e:a3:77:14:c4:07:05:85:df:f5:1e:e2:
                    76:0d:24:14:ab:c2:ef:11:c0:3b:c5:94:b7:0d:6a:
                    90:8f:56:aa:d9:1b:13:6c:8b:62:45:f7:53:9a:cf:
                    56:93:d7:3e:d0:7b:fa:2d:c0:9b:bf:a6:34:18:fb:
                    4b:b7:e1:21:14:75:31:ea:95:4e:f0:82:71:c0:63:
                    c9:4f:d5:c5:df:55:3b:1e:4f:72:97:63:c2:05:71:
                    5c:50:2d:77:1f:bb:52:c4:a4:93:8b:7b:7e:22:a3:
                    6c:17:1f:9b:9a:7b:d2:73:64:09:5f:41:e7:73:0d:
                    7d:00:fa:5e:0b:53:7c:10:4d:df:0c:e4:63:fd:99:
                    1d:8f:ee:5e:80:a0:3e:08:20:dd:2b:8b:3b:87:b6:
                    26:40:09:dc:39:6f:f3:a1:d4:0d:72:0d:44:d1:4d:
                    9e:16:fe:29:5c:6f:5a:96:d7:00:62:1c:be:c0:28:
                    18:b6:1f:95:07:be:6d:cc:fe:a0:94:73:e2:87:fb:
                    19:be:41:fd:a1:0a:ce:4c:c6:72:23:e1:58:6a:5e:
                    5d:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:16:CE:56:E6:11:60:CC:AD:99:6A:1D:40:9C:BF:5C:A1:F1:79:0C
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/eBbOVuYRYMytmWodQJy_XKHxeQw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.210.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:35:0c:19:b1:fa:b8:62:d5:6b:5a:e3:74:e0:bd:f2:e7:4e:
         f6:e7:88:3c:08:fe:9d:aa:06:cb:20:0b:98:71:36:bf:70:40:
         c2:0c:42:c1:a5:5f:d8:db:e3:27:36:7a:3d:60:cb:94:80:73:
         4c:54:b1:28:23:99:9b:43:08:7a:9c:02:cc:c0:57:73:07:4a:
         9d:ab:1e:8f:9e:e3:fc:6f:73:4e:29:2d:ed:a2:1b:9b:3f:4d:
         61:d6:3e:c4:20:cc:5f:ea:51:49:70:c3:15:9a:08:43:dc:a2:
         fe:59:4b:a7:8d:6d:e8:e0:40:13:7c:41:d8:0e:41:53:1d:60:
         d3:de:9f:be:83:7b:ea:d4:59:b5:58:79:83:45:6f:80:c1:c2:
         36:4a:fa:bc:d3:01:63:33:9f:0f:da:47:9d:4a:a3:8a:5d:e3:
         24:85:de:dc:e0:ca:ad:ad:45:78:2a:fc:69:d7:88:14:fd:b5:
         d7:61:13:f4:91:07:53:88:ca:f9:e9:3e:f7:b4:49:65:0e:67:
         43:1a:16:0c:38:13:ca:4f:6e:2d:90:53:c7:39:80:73:28:dd:
         aa:64:ef:7a:59:02:cf:e5:71:ff:13:20:30:d2:3a:13:7b:46:
         e2:44:56:19:b5:47:6d:a2:cf:8c:a0:42:00:b3:41:19:d0:d0:
         87:a0:46:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 02:01:42 2024 by rpki-client on console-fra.rpki-client.org