Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/p-RxNYhQP5aUYLxVXkJJqV_oAF4.roa
File:                     p-RxNYhQP5aUYLxVXkJJqV_oAF4.roa (raw, json)
Hash identifier:          wdH/qSMUPFETzYquMOvgwtDgrr9TlxaGhwfNXAO0fmg=
Subject key identifier:   A7:E4:71:35:88:50:3F:96:94:60:BC:55:5E:42:49:A9:5F:E8:00:5E
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       015E
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/p-RxNYhQP5aUYLxVXkJJqV_oAF4.roa
Signing time:             Wed 24 May 2023 16:31:23 +0000
ROA not before:           Wed 24 May 2023 16:31:23 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        110.163.21.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 May 2024 13:36:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 350 (0x15e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: May 24 16:31:23 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=A7E4713588503F969460BC555E4249A95FE8005E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:7b:2b:1d:57:f9:04:da:5b:4b:7a:81:63:9f:
                    ca:6d:68:ad:1f:96:be:c7:23:3f:d1:d4:3b:23:43:
                    d6:00:43:50:7b:c9:57:00:b8:28:8d:36:38:76:95:
                    31:83:9c:30:7b:4b:b7:41:62:ad:d4:39:b4:d5:fc:
                    9c:d8:45:17:0e:c3:75:f0:b0:86:b0:7d:b7:b3:ea:
                    cd:46:ed:9b:21:f7:0a:78:b6:35:1e:42:ad:62:5c:
                    c1:0b:a4:38:b3:80:bc:3c:13:8a:02:97:52:c3:03:
                    14:69:96:0a:69:da:ac:03:a5:bc:a9:a0:cc:2d:72:
                    a8:ac:a1:9e:3d:b9:3f:bc:b2:0d:81:0f:fb:8b:e7:
                    81:60:f5:32:ed:26:b1:e5:24:d3:6f:12:09:0d:4c:
                    72:80:44:c7:95:b1:2b:44:09:25:50:df:c5:f3:e7:
                    96:06:cf:32:e2:71:4d:6f:7a:b6:07:79:b2:e4:d0:
                    27:49:2c:16:ba:21:a2:7d:36:c2:44:69:73:da:dc:
                    e2:d0:56:5f:c7:77:b4:29:43:79:fc:73:2d:9c:6d:
                    7c:f0:f7:5e:96:3b:a2:9f:07:88:78:bd:73:12:c4:
                    01:e8:b5:f5:c5:32:3e:ce:32:fc:01:19:73:41:5f:
                    98:ed:10:1c:0b:51:c3:58:1d:d8:f2:fe:17:5a:26:
                    45:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:E4:71:35:88:50:3F:96:94:60:BC:55:5E:42:49:A9:5F:E8:00:5E
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/p-RxNYhQP5aUYLxVXkJJqV_oAF4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.163.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:17:a2:d5:ce:4b:a1:42:91:6e:1a:9f:0a:26:fc:0f:58:d8:
         68:10:fd:53:09:9f:5f:4e:8b:8a:20:00:7e:0f:0b:ed:d5:f2:
         f2:80:88:40:19:88:f3:3d:a4:80:64:c9:f9:7d:4f:ba:10:ed:
         7b:2d:85:9b:b4:cd:e8:80:c3:3b:b7:00:73:21:e1:97:0e:d5:
         5a:48:2e:7a:13:09:95:9c:e2:ec:60:26:d4:22:cf:76:f9:6e:
         96:17:b6:72:9e:f9:a1:98:14:ed:40:17:a5:83:87:86:6e:1a:
         92:ca:97:32:e6:b3:19:fa:27:31:db:e7:a2:fc:f0:91:66:0f:
         5d:3a:a5:7c:6f:49:01:26:d8:10:82:c4:60:98:af:07:07:70:
         6d:67:4b:7d:ff:a7:76:5d:68:f9:bc:db:76:64:48:54:37:c5:
         32:dd:3b:50:da:28:d9:da:c7:71:19:ea:7e:be:72:c3:a2:ac:
         bf:4e:be:bd:81:70:bb:e4:ea:05:25:01:77:22:57:27:37:1d:
         4e:76:e2:bd:e8:93:4e:72:4c:6c:86:5a:f2:5b:d0:a8:49:1a:
         36:6b:10:18:65:f4:ce:e2:e1:a0:c3:f1:eb:73:6d:b6:3d:1e:
         e3:bc:72:cb:0b:f6:26:b8:cc:81:7f:cf:2d:9c:25:8d:e9:b8:
         a8:31:f3:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:15:57 2024 by rpki-client on console-ams.rpki-client.org