Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/eQ3ktwBsR4i80JM7v_mdF9zQ4zk.roa
File:                     eQ3ktwBsR4i80JM7v_mdF9zQ4zk.roa (raw, json)
Hash identifier:          guqfDSlnYbfa0aXjwNWdB/NdUF2Pw16kGdpxueDZfz0=
Subject key identifier:   79:0D:E4:B7:00:6C:47:88:BC:D0:93:3B:BF:F9:9D:17:DC:D0:E3:39
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0509
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/eQ3ktwBsR4i80JM7v_mdF9zQ4zk.roa
Signing time:             Thu 27 Jul 2023 16:52:10 +0000
ROA not before:           Thu 27 Jul 2023 16:52:10 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     9605
IP address blocks:        220.210.80.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1289 (0x509)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jul 27 16:52:10 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=790DE4B7006C4788BCD0933BBFF99D17DCD0E339
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:87:1a:ac:32:05:32:ef:55:a4:f3:4a:a4:66:
                    65:4f:f0:49:46:03:c6:35:6c:22:c1:8f:29:b3:42:
                    40:f4:6c:30:d5:46:e5:81:4e:18:50:cb:50:32:de:
                    a3:58:c2:8d:eb:a2:60:8a:6f:ff:da:06:5e:73:a3:
                    08:d4:88:31:37:b0:e4:d3:48:d7:98:09:f7:59:90:
                    d6:cd:d8:09:24:18:5f:58:85:2f:5c:40:69:1d:85:
                    bb:d7:bc:35:31:a0:4a:1c:15:38:53:f9:9b:fa:77:
                    4a:7f:92:ce:a9:6d:8f:e9:82:fd:42:0a:b3:79:ed:
                    97:77:f9:88:a3:6a:f5:a2:37:57:4b:af:52:85:22:
                    59:83:73:fc:6f:c1:a4:30:58:3f:9b:8d:cc:13:5e:
                    a8:6b:82:cd:8f:89:f0:48:6b:0e:04:73:fa:6b:db:
                    4a:46:be:c5:3c:48:e8:46:93:ad:e2:55:a9:1d:67:
                    68:3a:1e:b0:91:e5:a6:21:7d:11:84:c9:3d:68:0e:
                    e5:d1:d1:09:be:99:1f:77:03:71:bb:71:47:8f:32:
                    38:b0:ea:4f:4e:df:5c:dc:66:e9:71:8b:31:26:48:
                    91:70:79:e5:65:9d:62:6f:5b:93:7a:f4:2d:41:91:
                    be:ec:4b:46:69:0c:6b:72:45:2a:b0:67:09:8e:ce:
                    74:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:0D:E4:B7:00:6C:47:88:BC:D0:93:3B:BF:F9:9D:17:DC:D0:E3:39
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/eQ3ktwBsR4i80JM7v_mdF9zQ4zk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.210.80.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2e:7c:65:b2:54:14:6d:21:50:e2:56:f0:88:f7:aa:ae:50:b1:
         b1:24:3e:8f:6e:04:57:83:37:7b:15:d5:42:2b:13:d7:80:ae:
         2b:fe:2b:b7:07:fe:ce:a4:b3:55:ca:be:d3:a4:1f:33:ad:e0:
         e1:98:83:29:3d:ad:b9:22:ca:e9:b7:0b:ae:03:af:6d:f9:33:
         ad:38:69:e7:43:89:97:73:19:8b:fe:45:64:c8:a6:fc:4c:df:
         ea:68:02:99:8e:d5:f3:fb:b0:87:20:56:40:0f:2b:a7:f9:d2:
         e9:cd:44:de:70:cb:64:07:13:41:1b:75:85:b4:d6:a5:c2:64:
         85:d4:e7:8f:16:3c:fb:9b:bd:23:32:1a:d4:c4:00:b2:3a:a7:
         47:e8:bc:c5:31:97:b0:57:df:ca:18:0b:9a:63:f9:8a:92:89:
         5f:0d:a2:e1:ec:7e:e5:67:11:d2:1c:d1:8f:ae:62:76:d4:ad:
         c5:bb:f9:df:c8:06:c7:6a:f4:85:51:bf:e3:6b:15:e9:3c:6c:
         df:8d:ad:49:d4:93:c3:d7:ee:5d:f2:63:0f:42:fd:27:03:7e:
         d7:45:03:16:51:bd:9f:38:0d:92:e4:0f:ec:2e:99:f2:b9:48:
         91:44:5e:8a:2e:b5:82:7e:6b:1c:98:16:e3:33:a0:d1:d2:37:
         85:a6:d4:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 15:54:31 2024 by rpki-client on console-ams.rpki-client.org