Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/j6sgqkwEwk78A1X_bsDmpLksrWA.roa
File:                     j6sgqkwEwk78A1X_bsDmpLksrWA.roa (raw, json)
Hash identifier:          hivbtOj3SOvqfw4cgyCThJal6q5fASvjMpS6OsumVpw=
Subject key identifier:   8F:AB:20:AA:4C:04:C2:4E:FC:03:55:FF:6E:C0:E6:A4:B9:2C:AD:60
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0542
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/j6sgqkwEwk78A1X_bsDmpLksrWA.roa
Signing time:             Thu 27 Jul 2023 16:56:08 +0000
ROA not before:           Thu 27 Jul 2023 16:56:08 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     9605
IP address blocks:        110.161.128.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1346 (0x542)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jul 27 16:56:08 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=8FAB20AA4C04C24EFC0355FF6EC0E6A4B92CAD60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:eb:d1:82:6f:27:25:41:c0:1d:0d:80:75:6e:
                    3b:86:62:96:c5:a8:59:92:ed:e6:c7:d0:e1:b3:b7:
                    83:45:0b:25:72:4a:fe:8c:b0:b3:ed:2e:1c:c7:62:
                    a3:50:fb:88:6f:3c:d8:01:14:c5:8e:37:1d:18:e4:
                    94:8a:3c:58:d8:84:47:ce:6a:bc:72:76:fd:24:c2:
                    50:b6:b1:9a:47:4c:95:db:49:35:2b:3d:c2:9e:04:
                    e5:a5:c3:8f:9a:fb:a8:69:55:db:9e:4b:5b:43:ee:
                    0e:cd:a8:04:cd:ee:b3:fd:9f:b0:02:e6:8f:0a:f0:
                    15:ab:f8:1d:9a:0b:50:ba:ee:64:42:de:a8:ae:f1:
                    c4:d7:7c:6b:b6:5a:c1:c0:ec:62:33:64:86:d8:24:
                    d9:59:ec:38:19:5b:86:9e:30:35:a8:a9:43:10:6b:
                    6b:a0:29:a0:53:05:a6:b8:bd:46:c8:aa:78:75:5e:
                    8e:98:08:23:48:fd:6c:76:ea:51:41:bf:bb:ca:36:
                    27:76:e2:28:a3:01:18:66:3c:96:01:e5:30:6e:c1:
                    23:04:9c:a2:9f:d4:f9:bd:09:07:3b:cb:fd:82:24:
                    23:59:66:4c:02:ff:79:35:7e:2b:fe:ad:06:92:50:
                    ae:13:2a:b7:c9:a8:d3:99:d8:cf:aa:52:9e:bd:61:
                    91:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:AB:20:AA:4C:04:C2:4E:FC:03:55:FF:6E:C0:E6:A4:B9:2C:AD:60
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/j6sgqkwEwk78A1X_bsDmpLksrWA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.161.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         4f:3e:a7:48:b9:09:9e:1d:b3:ec:29:97:1e:c6:0c:31:35:35:
         f0:90:f8:2d:3a:0f:61:77:17:0e:55:6f:a7:15:a1:a2:a1:1a:
         1a:ce:2c:8d:cb:2d:be:ce:33:25:87:54:76:05:89:b3:a8:d8:
         8f:04:58:67:64:b2:ea:bc:81:28:44:8a:03:5a:1b:5d:30:8b:
         69:d3:1e:7a:e9:8a:e4:88:a2:77:df:b7:e3:83:78:11:d4:28:
         a9:d4:4c:f0:49:b8:ed:26:40:2a:c3:fb:8b:72:41:e8:8c:8a:
         80:a2:86:3f:fd:cb:b3:44:d5:8e:02:94:93:76:ea:16:17:94:
         d1:c1:e9:72:ae:c5:b3:a0:b4:76:44:d5:17:f0:1e:4d:e0:10:
         22:bb:2a:4c:ca:39:35:93:aa:b0:94:da:13:a5:3f:32:d5:14:
         a0:4e:67:00:d9:fd:f3:d1:b0:86:34:ba:b9:4a:83:fd:0a:74:
         15:26:a0:eb:0d:95:b2:ba:d8:a3:73:e5:46:16:75:8d:7a:86:
         06:c0:ef:10:b6:22:8a:07:df:24:48:4b:b1:39:8a:9c:0e:f1:
         f0:42:87:d5:f3:28:6c:f3:65:85:6c:9c:27:f1:cb:f7:ab:9f:
         97:4e:85:f8:24:be:55:38:ee:cb:43:0c:60:69:06:ae:98:e6:
         8b:16:8f:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 15:54:32 2024 by rpki-client on console-ams.rpki-client.org