Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/pTgbr7SwpYQzmCOU2AEFouQIygw.roa
File:                     pTgbr7SwpYQzmCOU2AEFouQIygw.roa (raw, json)
Hash identifier:          HQEBfBwp+5ZHH2uyJKgOi8o+b09tsHFaMC2HmMCsCLA=
Subject key identifier:   A5:38:1B:AF:B4:B0:A5:84:33:98:23:94:D8:01:05:A2:E4:08:CA:0C
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       04BB
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/pTgbr7SwpYQzmCOU2AEFouQIygw.roa
Signing time:             Thu 27 Jul 2023 16:48:12 +0000
ROA not before:           Thu 27 Jul 2023 16:48:12 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     9605
IP address blocks:        110.158.0.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 23 Jun 2024 11:53:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1211 (0x4bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jul 27 16:48:12 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=A5381BAFB4B0A58433982394D80105A2E408CA0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:c0:07:a2:18:5d:94:ac:6c:6e:42:af:f1:79:
                    8f:46:55:39:90:61:a0:ff:5f:27:a2:58:a4:46:66:
                    4b:de:ad:b0:dc:ea:45:8c:b6:1b:71:7e:9d:84:13:
                    67:63:e2:47:da:6d:aa:5b:47:1a:d1:7e:fe:5a:bf:
                    09:02:29:e1:fc:9f:ae:53:ba:71:3a:ec:ba:de:2c:
                    23:cc:0c:95:47:d9:84:5d:a0:e0:f9:de:7d:51:8c:
                    9d:28:7b:00:42:cf:fa:fc:a7:10:1c:81:00:a4:d9:
                    3d:9e:3b:7b:be:e2:9f:be:48:2e:eb:97:ed:f3:61:
                    9e:db:b1:09:9e:25:37:8b:bf:05:53:9c:c9:e8:dc:
                    13:ad:1c:e2:5b:75:1d:ac:41:93:8a:37:c9:a1:8f:
                    d7:9c:e4:21:61:c9:a0:e2:ed:9a:e3:a9:8e:0d:b0:
                    37:1e:4e:58:31:db:33:ed:5c:55:0c:33:95:07:f8:
                    b3:14:62:e6:d8:4c:ac:13:27:3a:1a:69:b0:87:1f:
                    12:95:ba:1f:1a:45:1d:48:8e:30:87:c1:bc:a3:52:
                    c2:c6:e7:6e:93:a5:74:9d:a2:54:ce:a4:ba:8a:43:
                    59:1c:d3:74:11:f9:36:e0:05:51:47:e4:4c:83:82:
                    22:25:84:42:2f:aa:ab:d6:d6:23:be:d4:34:c3:18:
                    01:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:38:1B:AF:B4:B0:A5:84:33:98:23:94:D8:01:05:A2:E4:08:CA:0C
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/pTgbr7SwpYQzmCOU2AEFouQIygw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.158.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         ca:f9:1b:1e:cc:a6:43:97:23:e1:69:d1:d9:84:f9:7a:2f:b9:
         f3:84:a2:b1:c1:86:10:86:25:dc:f5:36:12:c8:66:b6:7e:dd:
         62:03:c0:33:bb:28:f4:d6:1c:57:27:4c:3b:97:42:ba:15:8a:
         53:e4:ef:50:e7:9a:bf:8d:d5:87:f0:24:28:43:f7:40:8c:09:
         61:a3:9b:98:0c:ab:d7:2c:af:39:ea:e3:6a:3e:e4:5a:5f:cd:
         a6:da:8c:b3:8e:2a:42:4e:24:34:27:73:6d:2f:28:63:b6:9e:
         83:af:80:02:28:04:bc:7b:86:70:c1:4b:1a:d6:47:5a:2d:15:
         d7:8c:f1:69:d7:3e:9d:f6:b1:55:68:dc:c8:25:2b:a6:c5:b3:
         dd:b8:d2:2a:20:aa:f3:93:42:8d:15:69:f6:28:ef:28:f9:e5:
         83:56:3c:d7:d3:fe:4e:d8:87:31:73:b3:01:f5:44:41:77:81:
         f4:8e:f1:a1:62:d4:50:02:ec:9f:9c:38:75:8c:de:d9:bb:9f:
         1d:9c:ce:7c:32:e4:20:19:17:d4:90:05:ae:64:4a:27:83:fc:
         70:21:c9:12:6c:ea:42:ac:9e:8c:17:a2:ad:aa:7b:e0:8a:8e:
         97:30:32:b9:7b:18:c3:53:f9:33:e0:f0:06:73:7d:53:50:89:
         a8:c9:94:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 12:57:22 2024 by rpki-client on console-fra.rpki-client.org