Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/oLUxwP5na1d79BWVwUS2730Aeu0.roa
File:                     oLUxwP5na1d79BWVwUS2730Aeu0.roa (raw, json)
Hash identifier:          VG98XEoQpssZD4KKXlgA3znCD993pYV8K8E75JkpkNM=
Subject key identifier:   A0:B5:31:C0:FE:67:6B:57:7B:F4:15:95:C1:44:B6:EF:7D:00:7A:ED
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0449
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/oLUxwP5na1d79BWVwUS2730Aeu0.roa
Signing time:             Thu 27 Jul 2023 16:43:11 +0000
ROA not before:           Thu 27 Jul 2023 16:43:11 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     9605
IP address blocks:        110.161.160.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 23 Jun 2024 11:53:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1097 (0x449)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jul 27 16:43:11 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=A0B531C0FE676B577BF41595C144B6EF7D007AED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:7b:59:e9:2a:0b:90:68:4d:8f:c7:77:6f:9d:
                    83:9b:60:55:d1:f4:ee:76:5a:cc:bf:66:10:a6:2d:
                    3d:3b:e4:22:78:d1:7c:fb:aa:5c:3d:56:69:95:e6:
                    8e:69:0e:c0:84:14:87:d1:b5:cf:75:06:73:a5:02:
                    46:5d:92:9a:ef:f3:7f:bc:f1:df:91:f2:cb:a1:f3:
                    70:c9:16:83:58:48:cd:a2:70:65:1c:bc:c9:80:61:
                    2d:1b:66:3f:9b:dc:68:61:10:df:fe:5f:62:3e:01:
                    b2:8d:d7:1f:43:a2:e9:a9:89:db:93:27:4a:cc:dc:
                    4d:f1:ea:ed:af:6f:34:17:9e:5e:32:19:97:8f:86:
                    19:6b:e5:c8:e9:22:0c:df:a4:f8:ed:a7:cd:a5:df:
                    c9:6f:1e:0a:8a:a1:57:1b:0a:ce:04:16:42:af:2e:
                    ac:91:69:c8:b5:e2:dc:74:06:e5:02:54:cf:cd:4d:
                    b9:3a:ab:1d:18:ca:9b:b3:a9:57:01:c6:01:15:b1:
                    d1:f7:08:77:5e:0d:31:1d:f5:86:2a:2b:1e:98:9c:
                    8b:c8:61:22:bb:d4:fa:74:8b:f8:dc:ce:59:5b:47:
                    ee:dc:32:dc:57:34:6d:c0:47:c9:ce:e2:76:2d:cc:
                    49:83:e1:62:0f:45:6a:c4:5a:8d:0e:60:15:d8:42:
                    f9:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:B5:31:C0:FE:67:6B:57:7B:F4:15:95:C1:44:B6:EF:7D:00:7A:ED
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/oLUxwP5na1d79BWVwUS2730Aeu0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.161.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         97:47:dc:2d:16:c5:93:ca:a6:36:3a:c7:78:55:1c:1a:25:bd:
         ad:42:2b:c7:f6:a1:01:1c:a4:18:44:44:ba:c8:1b:6c:d7:11:
         cf:87:40:d2:71:e6:41:92:b8:69:c9:30:84:ec:f2:1c:4b:3e:
         ae:d1:75:2f:e7:b6:6c:cc:ff:84:7b:0a:53:30:ff:b4:84:9d:
         3a:ad:11:1e:a4:0f:30:24:c9:4f:48:0c:4b:ea:38:96:09:3c:
         e8:96:c6:37:d5:28:3a:c5:16:aa:bc:f3:43:a6:a9:6b:d2:0b:
         65:1a:61:d6:00:ea:a0:81:2e:5e:33:21:03:30:7b:f6:f7:e3:
         e4:dd:51:e2:90:7e:0a:db:fd:93:95:82:b9:47:f7:27:2b:b9:
         46:28:8d:4b:21:92:ad:94:28:db:50:89:7c:99:f1:16:98:a3:
         33:52:9a:78:5f:11:e1:28:7a:fc:bf:6c:22:5e:4b:cd:1b:85:
         0a:2b:b6:a6:4e:cc:09:fc:9c:cd:0a:9c:82:9a:22:9f:08:22:
         51:27:e6:c0:59:c0:42:9c:a1:6a:52:1f:3a:0a:bb:ba:7a:10:
         5b:44:3d:4f:32:5b:e3:cf:8b:c6:33:c9:e7:53:f9:8f:84:00:
         0c:ac:d7:5e:fd:55:01:0b:e8:e7:a0:bb:d3:7d:06:aa:dd:12:
         ed:b5:68:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 14:31:54 2024 by rpki-client on console-ams.rpki-client.org