Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/u_cw01_adnciUM5NhsOJn_QyAa4.roa
File:                     u_cw01_adnciUM5NhsOJn_QyAa4.roa (raw, json)
Hash identifier:          68LDIyZoeVTti4H8uIHXkVu/Mli1MuMq12odCqREYVo=
Subject key identifier:   BB:F7:30:D3:5F:DA:76:77:22:50:CE:4D:86:C3:89:9F:F4:32:01:AE
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0886
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/u_cw01_adnciUM5NhsOJn_QyAa4.roa
Signing time:             Tue 30 Apr 2024 02:20:30 +0000
ROA not before:           Tue 30 Apr 2024 02:20:30 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        110.161.128.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2182 (0x886)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr 30 02:20:30 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=BBF730D35FDA76772250CE4D86C3899FF43201AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:29:21:84:56:4a:f1:5b:cd:db:21:b3:e0:ce:
                    72:6f:98:4b:6c:57:7e:89:ac:3d:79:6a:9e:7f:0e:
                    51:7b:8c:00:8f:b2:11:df:13:88:47:ca:43:19:82:
                    c1:4b:f8:ab:ae:d5:69:50:a3:38:5c:a2:bf:cc:ee:
                    ee:8a:de:3c:ec:e0:1b:0d:c1:9c:4a:74:2b:af:33:
                    a0:8f:12:8a:0b:88:d2:33:9d:95:74:3b:7b:f4:c3:
                    f8:6c:40:f4:a3:d0:7b:d8:83:55:ad:a5:97:5d:56:
                    bf:40:f5:b3:d8:a1:ea:16:2f:cd:88:71:26:78:d3:
                    fa:ae:0b:62:91:14:24:97:48:45:d0:d8:f9:36:0d:
                    4a:c6:d8:0e:6b:cc:02:a8:50:63:61:3b:14:89:4e:
                    e3:39:32:47:5a:f3:58:7f:fd:5f:41:1c:d5:d0:7f:
                    07:c1:72:18:cd:7b:b8:95:43:f6:f9:88:a8:ec:19:
                    6f:8a:5d:08:68:47:0c:12:25:95:84:0e:ba:08:d9:
                    ae:fe:c5:50:d9:86:6b:dd:5c:d6:20:a6:41:e1:54:
                    dc:fa:69:5d:30:e1:fc:fc:16:85:d0:b5:f8:7f:a6:
                    21:77:d0:ea:22:ef:3e:0a:db:b4:08:74:e3:41:2d:
                    42:ac:54:95:4d:94:46:47:16:13:cd:d2:20:f7:71:
                    0e:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:F7:30:D3:5F:DA:76:77:22:50:CE:4D:86:C3:89:9F:F4:32:01:AE
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/u_cw01_adnciUM5NhsOJn_QyAa4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.161.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         0a:36:22:5f:a6:cd:7d:ea:56:81:36:f6:30:14:a0:d5:61:93:
         dc:87:e6:dc:59:90:ea:2c:e9:a1:2b:19:cc:de:ae:f9:bf:24:
         1a:b5:55:a8:68:a5:92:1f:5d:2d:50:cc:5b:d9:65:39:5c:60:
         ff:78:8f:5d:7d:06:fc:28:a3:2c:1e:70:0b:91:95:30:37:32:
         83:35:17:0a:17:ad:c3:2e:d2:f3:ad:b0:59:92:d4:c5:37:64:
         58:1a:70:2d:10:a5:11:dc:8b:63:a5:a7:a1:d1:fe:ed:6c:2d:
         1a:54:c2:66:91:b4:da:b6:ac:f0:09:fe:f2:5f:f3:f1:3b:cf:
         60:e2:f2:6c:d2:01:42:f4:87:c2:c0:24:38:ec:62:c8:48:94:
         e8:85:dc:e9:b5:b7:94:73:bc:c0:b0:8a:04:7a:0f:ac:59:77:
         64:75:aa:bd:ea:b7:8c:db:45:42:d0:52:11:89:0b:b0:58:a9:
         1e:f8:79:eb:c4:9c:8b:12:bb:bc:bb:78:d3:bc:96:45:b3:45:
         7b:72:6e:74:76:cf:d2:13:2b:86:94:c3:10:c1:b7:64:d7:8a:
         e0:39:2f:bd:b5:18:ab:60:38:4c:41:18:7a:e3:54:1b:d8:bf:
         81:33:a1:18:1e:70:bb:5f:a6:dd:8e:b9:1a:83:44:bf:0f:4d:
         d2:bb:7c:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 15:54:37 2024 by rpki-client on console-ams.rpki-client.org