Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/peXlkkykaHNsItj5pqnl3jpIb-w.roa
File:                     peXlkkykaHNsItj5pqnl3jpIb-w.roa (raw, json)
Hash identifier:          cr0BXJV2trgqo7ScQ8hp9gOLy1mE/kBj9mqxrts3jKA=
Subject key identifier:   A5:E5:E5:92:4C:A4:68:73:6C:22:D8:F9:A6:A9:E5:DE:3A:48:6F:EC
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       022C
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/peXlkkykaHNsItj5pqnl3jpIb-w.roa
Signing time:             Tue 30 May 2023 16:30:34 +0000
ROA not before:           Tue 30 May 2023 16:30:34 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        110.161.192.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 May 2024 13:36:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 556 (0x22c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: May 30 16:30:34 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=A5E5E5924CA468736C22D8F9A6A9E5DE3A486FEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:84:1e:97:7d:cb:7d:ec:e4:7a:10:44:37:c1:
                    1f:63:52:41:11:78:6f:3e:a7:bb:65:a5:31:d2:c2:
                    93:36:95:7d:75:36:d4:f7:58:2a:b1:20:70:8d:90:
                    46:b7:94:88:45:f4:05:8a:e7:70:fd:a6:ad:eb:4a:
                    08:6e:76:92:de:de:b7:dc:fe:04:b3:6c:5b:ef:13:
                    4c:59:da:d7:df:dc:c6:d1:5c:96:2e:7d:29:77:0c:
                    27:ca:b6:d7:5c:ef:b7:8d:72:9f:cc:b4:0c:ba:7f:
                    1c:77:cf:f2:94:43:8c:0d:08:43:a7:60:25:f5:2b:
                    36:04:f2:ff:13:a9:b2:82:5c:2d:79:15:f0:39:20:
                    48:ab:92:91:e6:ea:fd:d5:51:88:96:ad:88:53:7e:
                    fc:29:92:9f:de:6b:67:33:f5:6e:f1:15:ee:e7:6c:
                    e6:fb:fc:c4:d4:74:65:17:ec:e4:a8:de:5b:51:61:
                    e0:f0:7c:a4:9e:ec:1a:ac:48:87:15:31:1d:53:a5:
                    45:3e:97:d5:23:9b:91:cd:f8:21:98:9b:7d:a0:31:
                    57:7c:87:cf:7c:38:b6:41:86:7a:fe:1f:89:fa:8d:
                    23:5c:e3:64:6a:d0:4c:ca:fb:0c:6d:c4:1e:61:10:
                    91:c1:9a:dd:1f:89:e1:4b:d9:84:54:a3:0b:fc:3e:
                    33:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:E5:E5:92:4C:A4:68:73:6C:22:D8:F9:A6:A9:E5:DE:3A:48:6F:EC
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/peXlkkykaHNsItj5pqnl3jpIb-w.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.161.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8d:00:d5:af:2e:1b:f0:1d:98:37:f4:8d:d0:ad:63:9d:0e:63:
         0b:6e:1a:f9:35:a0:b5:0a:7a:5e:37:47:62:e9:4a:eb:13:26:
         74:34:22:95:b3:5b:61:15:45:1a:b9:fa:00:39:3a:a4:3f:d8:
         99:ae:fc:75:7b:3e:65:41:3d:b2:a5:f0:47:40:a8:6d:3e:ec:
         70:52:21:a5:53:05:5e:8b:62:21:c0:a0:2b:d8:94:5d:c2:49:
         cc:40:b9:33:bf:5a:86:e2:e2:a6:1c:bf:37:eb:59:d3:e5:4d:
         af:38:c0:f2:d2:28:ba:17:ee:2e:65:10:5e:45:d5:7b:f3:ae:
         51:14:61:09:a8:e1:11:c3:a2:26:9b:45:5d:f8:52:23:67:d0:
         15:ce:98:a0:99:dd:ef:ab:80:94:b6:e3:cc:61:77:bb:88:40:
         3a:f2:b5:ee:8c:7f:34:d0:e7:0b:b2:f9:21:36:85:1e:16:ea:
         29:9d:b5:5c:cf:38:ac:5f:42:f6:79:82:ff:af:74:f3:79:26:
         12:c9:be:ab:0f:9a:84:c7:e6:8d:1d:36:e1:15:c3:08:02:4c:
         8d:f5:ce:e8:ee:a9:d2:2b:63:db:c4:0a:b6:87:ea:74:2d:ec:
         9e:ba:b7:98:fa:41:ea:cd:6e:9e:3f:7c:c1:05:1f:6d:65:b9:
         5e:64:61:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:15:57 2024 by rpki-client on console-ams.rpki-client.org