Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/iU5jt8K4JX1WSopKBCLbnUoipoU.roa
File:                     iU5jt8K4JX1WSopKBCLbnUoipoU.roa (raw, json)
Hash identifier:          j39I6wNQ3NlfIrxHsSbjdXEQZ8S/nYU8+bcZ8vzRBpQ=
Subject key identifier:   89:4E:63:B7:C2:B8:25:7D:56:4A:8A:4A:04:22:DB:9D:4A:22:A6:85
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       082E
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/iU5jt8K4JX1WSopKBCLbnUoipoU.roa
Signing time:             Tue 30 Apr 2024 02:14:25 +0000
ROA not before:           Tue 30 Apr 2024 02:14:25 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        110.162.128.0/17 maxlen: 17

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 23 Jun 2024 11:53:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2094 (0x82e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr 30 02:14:25 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=894E63B7C2B8257D564A8A4A0422DB9D4A22A685
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b5:c2:72:bc:04:83:4c:06:40:92:bc:73:48:
                    23:28:1f:f1:5d:1b:61:8a:1a:c9:f5:98:a6:a9:f8:
                    a8:a3:00:b9:f1:c9:f1:e1:9e:a6:b6:ee:51:26:ae:
                    84:eb:b9:93:ca:a3:fe:bb:f7:f3:b4:04:28:97:b4:
                    b9:c6:89:44:34:a3:25:66:a3:55:c2:a9:b5:5e:39:
                    68:a9:f7:09:29:a6:ce:08:46:8c:f6:d4:e6:24:1b:
                    bc:d4:c0:e9:39:92:89:26:17:06:31:f1:81:15:8c:
                    4f:a3:f2:ab:49:ee:5d:4b:73:85:ce:60:36:85:a4:
                    32:8f:02:48:13:cd:8e:f6:52:60:c4:8d:8f:de:74:
                    02:83:6b:6e:b6:c0:5c:91:2d:b3:c7:b8:9e:dd:a7:
                    6c:95:92:09:35:62:eb:21:d1:39:24:bf:15:77:bc:
                    f1:18:6c:ce:4d:88:7e:86:6c:7f:01:9d:b9:bf:5b:
                    2b:26:4a:c8:66:92:54:e5:ec:49:60:7b:83:12:66:
                    8d:d1:a1:f0:b8:83:f3:64:9e:7d:2b:31:30:19:4a:
                    ee:11:b6:a9:f6:a1:17:cc:c2:53:0c:44:2f:e5:8f:
                    aa:68:d3:d2:e1:97:fa:60:11:3f:17:99:08:04:f8:
                    ab:72:43:79:80:eb:50:ef:59:66:23:9a:2b:f2:66:
                    01:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:4E:63:B7:C2:B8:25:7D:56:4A:8A:4A:04:22:DB:9D:4A:22:A6:85
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/iU5jt8K4JX1WSopKBCLbnUoipoU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.162.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         37:91:0a:9b:d8:e8:b9:4d:9c:85:7c:0e:0b:e2:c2:c9:0d:c9:
         d5:4f:8d:c1:24:7b:e0:82:0c:41:13:65:82:fc:21:53:cb:19:
         18:ef:cc:d1:f0:76:77:56:5a:db:1a:7c:04:52:04:1e:74:8a:
         98:f4:cb:82:c6:e2:53:33:81:04:ad:d9:ab:af:be:63:c9:ba:
         a5:44:c4:bc:59:61:5f:b2:cb:88:5d:ff:ae:c2:60:fa:89:74:
         ae:7b:db:79:1a:0c:ff:58:f8:57:6a:2b:5b:df:c2:33:0c:90:
         4c:97:9e:0d:fa:c7:c2:ea:27:83:a7:35:49:a7:e3:cc:8f:ac:
         0c:f6:0d:54:30:ab:b5:55:85:85:42:e4:a3:a0:69:22:1d:a9:
         5d:13:07:eb:10:2d:9d:db:44:d6:ec:0d:a2:0f:8a:5f:f5:ba:
         00:ad:d0:5f:4e:dd:59:1d:81:ca:4c:f7:6b:3a:66:0a:65:f5:
         f2:7d:ef:9c:5d:5c:52:49:50:44:07:06:32:8e:71:bb:ce:dd:
         86:47:64:88:d6:a2:85:17:55:ae:ed:5e:5e:75:1e:b4:87:ae:
         e0:0a:d5:aa:46:c2:f1:fe:d2:26:c2:51:f5:a7:23:9d:51:cd:
         34:cb:b0:dd:f6:4f:d4:7e:9e:7f:0e:ed:f8:df:b6:9f:82:62:
         e7:78:ab:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 12:57:22 2024 by rpki-client on console-fra.rpki-client.org