Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/eWq0TTYjjQlS1D8CnVYX2RDRebg.roa
File:                     eWq0TTYjjQlS1D8CnVYX2RDRebg.roa (raw, json)
Hash identifier:          jj3KYivw2ke1m60ordqnwzSGBDS8Tugc2wcY+ntR6zs=
Subject key identifier:   79:6A:B4:4D:36:23:8D:09:52:D4:3F:02:9D:56:17:D9:10:D1:79:B8
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       049E
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/eWq0TTYjjQlS1D8CnVYX2RDRebg.roa
Signing time:             Thu 27 Jul 2023 16:46:11 +0000
ROA not before:           Thu 27 Jul 2023 16:46:11 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     9605
IP address blocks:        110.160.128.0/17 maxlen: 17

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 23 Jun 2024 14:09:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1182 (0x49e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jul 27 16:46:11 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=796AB44D36238D0952D43F029D5617D910D179B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a1:dd:d7:d7:28:6a:c4:c6:07:f4:e7:57:98:
                    13:c9:fc:82:d9:18:30:da:ab:c7:66:dc:e9:38:2c:
                    25:40:6a:74:64:c7:3e:84:d5:4b:40:76:73:3f:1c:
                    cf:35:53:cd:40:9e:42:be:af:c8:66:a1:5d:c5:e0:
                    19:68:38:09:a8:41:09:42:9b:1a:f6:b7:c8:81:3d:
                    a7:fa:95:2e:2b:58:c7:74:c8:a3:80:34:7a:50:de:
                    28:e4:f6:85:ad:cc:ed:47:32:0e:72:45:e5:8e:79:
                    1b:d7:96:c1:6f:80:5c:ae:7c:ca:ca:25:a6:6a:67:
                    8e:af:b0:14:ed:ae:db:fc:e3:37:af:d5:56:2d:fd:
                    43:1e:36:a2:b8:e2:7e:90:79:f6:c9:65:4b:e4:aa:
                    96:86:4c:23:a7:8a:87:6d:0f:19:5d:66:46:a4:0f:
                    98:51:39:f1:98:61:4c:ec:1e:4c:71:bb:9e:f7:56:
                    50:c1:49:1b:72:7e:c8:ea:49:6e:e7:f5:f5:bf:ed:
                    56:8e:76:ce:28:df:90:fe:9e:15:60:55:13:64:fa:
                    53:3b:77:80:e4:03:35:5c:a4:24:4a:ac:cf:fc:ae:
                    6d:9d:82:cd:36:26:39:e6:39:3b:38:79:56:c0:c0:
                    82:b7:5a:01:35:2b:73:a5:83:7d:65:17:35:d5:bb:
                    5f:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:6A:B4:4D:36:23:8D:09:52:D4:3F:02:9D:56:17:D9:10:D1:79:B8
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/eWq0TTYjjQlS1D8CnVYX2RDRebg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.160.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         a5:03:af:23:f9:49:94:77:99:58:c6:89:72:5e:00:33:4e:48:
         c6:49:4d:41:7b:ab:c6:bf:65:8a:48:57:9d:19:c7:5d:07:57:
         14:f2:a1:a0:b1:4b:70:34:26:c1:1f:43:0c:4e:32:be:56:28:
         28:72:d3:18:99:73:29:8e:f2:90:d8:45:65:43:5d:61:b3:9e:
         9d:b7:8f:8b:cc:bd:ff:10:41:ae:57:75:2e:a9:7e:7f:8f:b5:
         67:8b:8c:62:90:d4:de:85:30:06:4e:c8:08:94:34:5c:72:44:
         43:30:26:e1:1c:8f:45:43:c9:e7:87:a2:26:4d:de:0f:61:32:
         29:08:c2:46:90:56:ac:65:40:3c:f0:23:06:53:fa:e7:aa:8b:
         11:37:f4:67:42:79:aa:b9:97:e8:5e:12:a4:61:78:41:e6:98:
         a8:0d:45:8d:f3:59:d0:bd:02:12:07:08:48:6d:69:a5:75:90:
         41:0c:a9:4e:41:ab:1c:40:29:9c:49:2d:61:a7:60:3a:d9:79:
         ce:a5:ac:e4:3c:44:1e:ee:76:48:10:67:37:c9:ad:4f:6d:a3:
         3a:c7:3f:df:15:5f:c9:3c:b7:23:1f:d4:87:22:51:63:8e:c7:
         a9:8a:3c:c7:10:8a:69:d1:58:cd:99:14:c3:45:6b:9f:b2:76:
         e7:81:48:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 11:39:12 2024 by rpki-client on console-fra.rpki-client.org