Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/kc0utLeowUcnBnhV-r_fkTc29kI.roa
File:                     kc0utLeowUcnBnhV-r_fkTc29kI.roa (raw, json)
Hash identifier:          4DbG6YzfIgQXQruW42wCwRvJU8X3JebpGcMx5MASU/0=
Subject key identifier:   91:CD:2E:B4:B7:A8:C1:47:27:06:78:55:FA:BF:DF:91:37:36:F6:42
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0887
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/kc0utLeowUcnBnhV-r_fkTc29kI.roa
Signing time:             Tue 30 Apr 2024 02:20:31 +0000
ROA not before:           Tue 30 Apr 2024 02:20:31 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        220.210.25.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2183 (0x887)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr 30 02:20:31 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=91CD2EB4B7A8C14727067855FABFDF913736F642
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:88:ab:00:8a:d6:64:c6:48:27:67:ed:2f:0a:
                    ca:6e:5d:c6:01:48:a5:a4:04:cc:30:0b:e5:32:05:
                    9e:00:d9:af:e2:cd:1e:38:a4:5c:c7:8a:8c:80:e4:
                    67:ac:98:d2:3b:27:9f:a1:83:e8:0f:93:57:4c:f0:
                    ab:2f:5c:63:dc:1c:b0:a0:54:68:4e:3e:9b:23:f8:
                    a1:92:68:63:e9:c8:53:7c:8b:8f:fd:b9:27:64:31:
                    88:50:e0:13:f5:6b:15:ea:0d:55:ae:ee:02:4e:a6:
                    e6:18:7d:37:8b:fe:b5:c2:35:11:d1:79:4a:a4:ef:
                    71:f0:be:99:10:72:8c:c2:2a:c3:4f:82:1c:ad:70:
                    ee:ef:a7:5b:43:26:0d:ef:9d:90:97:0e:9b:be:48:
                    a3:80:f5:28:d1:b6:bd:c9:6a:dc:6b:c3:99:fc:00:
                    66:d2:31:0a:94:31:f1:e2:51:03:96:4a:a9:00:7a:
                    8a:c5:ed:80:7b:ef:13:7d:03:76:39:06:aa:92:bd:
                    42:2b:e3:ab:0d:84:72:79:71:ee:82:bc:e2:58:80:
                    0d:ef:30:47:43:27:b2:de:8b:b0:ff:56:17:57:02:
                    61:ca:87:3b:a3:4f:58:62:d5:41:27:db:7c:d1:da:
                    5f:10:f0:48:3c:3e:7a:eb:21:02:59:a7:5a:fc:65:
                    26:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:CD:2E:B4:B7:A8:C1:47:27:06:78:55:FA:BF:DF:91:37:36:F6:42
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/kc0utLeowUcnBnhV-r_fkTc29kI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.210.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:df:bf:ac:dc:9e:8b:40:78:09:27:ce:ee:9e:e4:88:f5:e2:
         b0:50:d3:66:3d:ec:60:50:cd:77:3e:70:cc:12:0e:5b:37:68:
         b9:50:40:0a:c0:6e:af:ec:e0:de:2b:cd:5c:c3:ff:de:1f:26:
         f1:8e:38:29:b5:27:e9:0e:35:f0:21:2e:01:5a:7a:b0:80:28:
         9a:80:5f:7c:93:ca:dc:be:e1:d1:01:52:0c:bf:13:a8:78:c4:
         48:05:07:b5:36:c5:c3:1e:aa:82:f6:63:bb:71:a1:d2:fd:91:
         b1:f2:42:fe:cd:d7:af:44:de:d5:54:49:6e:7f:4a:11:c9:0f:
         d2:de:4e:93:69:9e:8d:e6:ef:76:53:cf:fd:d2:79:e4:38:2c:
         2e:a7:ad:cd:54:ea:a0:ab:74:62:39:e9:40:7a:c9:fa:8e:b9:
         0e:83:c1:1e:75:26:99:61:f3:ec:4d:06:0f:01:60:2d:92:d0:
         82:2b:ab:12:8b:20:b4:e5:18:09:ca:a7:ef:b5:26:09:44:1b:
         07:f2:bb:d4:10:2a:bc:d6:f6:d9:a0:82:56:db:8b:4f:70:26:
         be:8f:9a:f5:52:a9:c6:22:90:e6:45:d3:df:02:ab:90:88:1e:
         1e:d7:3a:00:de:b7:5b:7a:8b:bb:f1:23:c3:0f:9d:b2:d7:80:
         9a:4b:1b:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:59:11 2024 by rpki-client on console-fra.rpki-client.org