Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/sCfFnzSD0BkAXtYQhB_rtRn_afk.roa
File:                     sCfFnzSD0BkAXtYQhB_rtRn_afk.roa (raw, json)
Hash identifier:          6lCm4prSLi02G24/Zebrf+BdeoxyFCdiyg/xgmLm3mE=
Subject key identifier:   B0:27:C5:9F:34:83:D0:19:00:5E:D6:10:84:1F:EB:B5:19:FF:69:F9
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0597
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/sCfFnzSD0BkAXtYQhB_rtRn_afk.roa
Signing time:             Thu 27 Jul 2023 17:00:11 +0000
ROA not before:           Thu 27 Jul 2023 17:00:11 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     9605
IP address blocks:        220.210.28.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1431 (0x597)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jul 27 17:00:11 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=B027C59F3483D019005ED610841FEBB519FF69F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:1a:96:2c:7c:b8:3a:73:45:4f:e1:9d:cb:d5:
                    b9:b3:a5:bd:bf:63:61:82:d9:63:4b:a2:bb:86:4d:
                    e2:54:6a:1f:11:2d:d0:88:5b:63:d8:52:47:c7:79:
                    b1:55:3d:f6:ef:de:5d:5a:db:12:3a:bf:f5:c6:f0:
                    5c:e3:52:15:14:ae:7e:42:a9:f3:b7:fa:20:ea:67:
                    c5:66:4d:ec:5e:f8:17:ef:ca:e2:ce:d3:45:e9:ec:
                    90:2c:4c:35:b2:22:7b:92:30:5f:f0:4d:ee:23:22:
                    7d:14:2a:f6:ac:cd:4b:d7:6c:8e:c3:5d:4c:f3:6c:
                    f0:08:47:23:9f:68:74:0f:57:cb:e5:95:2f:ef:2b:
                    cb:c6:33:13:4e:18:01:94:9c:fe:ce:85:e5:64:71:
                    68:e8:49:87:46:7a:95:e6:47:6a:33:a3:1e:e9:a8:
                    bb:05:52:02:9f:0e:f3:20:3e:42:00:cf:2f:e1:d7:
                    e3:c9:d3:bd:31:e0:ae:1c:bd:72:22:9d:29:25:95:
                    ca:b1:5a:c9:04:37:be:44:be:75:97:d2:40:15:40:
                    7b:47:69:0b:0f:de:09:c5:f6:b8:e9:2e:ee:43:1c:
                    3c:2b:14:78:c7:73:62:f7:16:74:11:ca:8f:26:b0:
                    1e:e9:62:88:6d:8b:c0:a2:55:9f:69:33:05:0b:2e:
                    cd:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:27:C5:9F:34:83:D0:19:00:5E:D6:10:84:1F:EB:B5:19:FF:69:F9
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/sCfFnzSD0BkAXtYQhB_rtRn_afk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.210.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:05:46:12:ce:6c:5d:c6:6a:61:25:da:9b:a0:84:e3:10:10:
         97:79:3b:66:7a:01:d5:3f:7e:bc:65:c7:1d:a4:52:eb:0d:ee:
         5c:88:45:03:d0:6b:09:82:7c:5f:a9:a2:05:89:e3:45:ee:c1:
         1e:2f:db:36:06:53:24:08:5c:98:14:2e:62:0d:0e:0b:3b:af:
         54:1e:90:ad:79:a8:6a:53:fe:78:3d:e6:2a:b3:29:3a:6b:c9:
         89:18:ba:0a:28:e2:7c:7a:ba:04:39:a4:79:8f:08:13:e1:bc:
         4b:65:25:75:cc:df:f0:ab:6e:e1:eb:7a:ca:a2:ca:9c:eb:8a:
         08:5f:de:89:4b:83:ea:9f:a7:e0:0d:d4:ef:d7:30:71:ae:a0:
         6f:0e:9d:ca:3e:bb:a6:75:68:41:69:24:ba:d0:90:2d:eb:2f:
         3d:7a:b6:ca:63:f7:cf:df:ca:45:e1:41:e7:92:73:40:d8:bd:
         19:01:2d:a8:d5:b9:ac:e5:a2:48:62:cd:f0:82:45:8a:23:1c:
         c2:6b:5d:e7:4b:19:c8:d2:55:b9:b6:a6:97:9b:80:cf:df:4f:
         f3:7f:db:9c:98:1e:fe:3b:0c:62:1d:98:04:e5:49:33:3e:28:
         69:bc:b7:83:48:c7:f9:44:fd:f6:20:45:4b:56:ea:5f:a8:8e:
         86:cb:e3:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:38:48 2024 by rpki-client on console-fra.rpki-client.org