Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/kjqkeJDCsnMgMwxgR_a7bFVNM54.roa
File:                     kjqkeJDCsnMgMwxgR_a7bFVNM54.roa (raw, json)
Hash identifier:          kC0HGMSNVblRSnfH2VPs5H6pzTbcTGDjVhlH3j4j0AE=
Subject key identifier:   92:3A:A4:78:90:C2:B2:73:20:33:0C:60:47:F6:BB:6C:55:4D:33:9E
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       04C2
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/kjqkeJDCsnMgMwxgR_a7bFVNM54.roa
Signing time:             Thu 27 Jul 2023 16:48:15 +0000
ROA not before:           Thu 27 Jul 2023 16:48:15 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     9605
IP address blocks:        110.161.0.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 22 Jun 2024 01:30:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1218 (0x4c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jul 27 16:48:15 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=923AA47890C2B27320330C6047F6BB6C554D339E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a4:cb:be:7b:5a:ac:a6:a1:96:19:7f:24:0d:
                    db:69:83:05:31:d0:ec:93:db:31:1c:32:a3:ff:2a:
                    87:9f:27:22:f5:40:cf:56:97:9e:9d:6e:71:5d:bd:
                    81:2a:9c:b3:65:9c:7c:14:47:6e:98:4a:33:cd:01:
                    c3:10:0d:c0:98:fd:cc:4c:14:18:89:14:6d:02:3a:
                    a2:54:c8:5d:b8:60:73:02:09:6f:7d:ae:b4:ef:bd:
                    13:f9:d5:a9:5a:54:13:51:72:fc:48:83:34:19:63:
                    cd:d5:82:53:ae:58:4e:66:f7:4b:00:7c:02:c9:2f:
                    b7:5b:e9:04:b2:a6:0e:f4:11:d2:4a:9b:83:79:09:
                    10:f9:ed:92:f0:c9:e4:aa:a8:66:72:ab:6a:90:5e:
                    f0:11:0b:8d:16:e0:bf:e7:1a:80:11:66:8d:d1:90:
                    14:ac:c8:3c:47:d9:4e:fa:09:3a:79:13:2d:0a:16:
                    f4:e8:f8:0e:30:a3:57:a7:ca:0e:91:73:cc:eb:ea:
                    6a:10:f4:37:05:08:a0:f0:88:c4:d9:23:fe:fd:a7:
                    c9:82:83:b8:e6:1f:3a:f5:93:be:ce:ba:47:fc:88:
                    3a:b9:a9:b6:af:cf:f1:26:8f:89:97:20:26:f0:c5:
                    f1:fa:33:19:00:fb:c3:2f:bc:5d:1b:12:42:8d:83:
                    e7:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:3A:A4:78:90:C2:B2:73:20:33:0C:60:47:F6:BB:6C:55:4D:33:9E
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/kjqkeJDCsnMgMwxgR_a7bFVNM54.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.161.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         6b:7a:72:ea:f9:b1:a3:32:de:d2:ee:e5:06:b9:a1:9b:07:62:
         67:7d:1d:ed:fb:20:ac:ae:b8:1d:5d:dc:a1:6c:bd:65:fc:2a:
         58:96:3c:56:c9:09:de:bd:66:92:17:5e:9a:85:2f:95:e1:81:
         bf:39:f2:8b:bf:aa:5f:cb:27:23:b7:07:b6:41:e6:a6:e8:75:
         f5:5a:60:45:b4:9a:f8:70:31:c6:f2:65:bc:2a:17:8b:a5:48:
         94:2a:3b:43:96:33:bb:af:09:f9:f9:d7:81:56:c3:31:99:45:
         fe:40:d0:68:e9:6a:d1:ea:b0:2f:c2:9e:fc:5a:41:fd:c4:82:
         aa:d8:e6:9d:59:7f:e1:11:76:7f:67:0c:fb:7d:0b:04:4a:cf:
         ad:c7:2b:64:ea:b1:66:56:81:6d:1c:bc:20:87:d1:4c:79:73:
         ca:bf:1a:e2:73:8c:11:0c:93:86:0f:a8:4f:3d:f8:1a:2b:f6:
         0a:d3:42:3f:fd:55:e7:68:fd:16:cc:25:08:d1:44:04:96:37:
         60:c4:c6:64:7e:03:94:64:e6:c6:a1:97:29:38:fd:96:11:94:
         5b:49:7b:89:21:92:29:c8:67:e8:d8:66:45:07:57:8c:72:09:
         2c:fa:14:49:9d:1a:cc:73:20:3a:4d:c6:05:16:24:97:11:d8:
         23:f4:08:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 02:01:42 2024 by rpki-client on console-fra.rpki-client.org