Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/ugiXulo8c4ab_AE7dK0C7vM3Bss.roa
File:                     ugiXulo8c4ab_AE7dK0C7vM3Bss.roa (raw, json)
Hash identifier:          HJej6au0hUMovKhuJAheLmXhA3FsMnYXJ+wqSWb1HBk=
Subject key identifier:   BA:08:97:BA:5A:3C:73:86:9B:FC:01:3B:74:AD:02:EE:F3:37:06:CB
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       04A2
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ugiXulo8c4ab_AE7dK0C7vM3Bss.roa
Signing time:             Thu 27 Jul 2023 16:46:12 +0000
ROA not before:           Thu 27 Jul 2023 16:46:12 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     9605
IP address blocks:        110.158.128.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1186 (0x4a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jul 27 16:46:12 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=BA0897BA5A3C73869BFC013B74AD02EEF33706CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:79:bc:33:48:21:69:c3:b7:9b:48:2d:31:43:
                    ad:4b:07:16:df:c7:be:4d:ed:46:d8:5f:4a:77:4f:
                    12:3d:56:91:aa:04:7f:65:8e:3c:3d:20:33:a9:f1:
                    ac:ca:10:6b:ce:42:43:22:64:5a:60:44:88:48:44:
                    de:d6:aa:e2:b3:f6:7b:e9:cc:c3:7b:14:d4:eb:ba:
                    59:c7:99:7f:e2:d6:be:bd:af:f5:e3:62:89:62:42:
                    40:bd:5f:ef:97:b9:81:a9:b4:64:a3:fe:f2:38:d2:
                    e5:3a:7a:13:d7:f8:26:e5:36:a0:02:98:54:07:ae:
                    4b:55:4d:d0:e0:2b:0b:72:b3:b0:3d:3a:8b:1a:73:
                    8b:24:f3:c3:27:33:d0:c6:4e:1c:f2:0c:e6:49:d8:
                    38:b3:b6:14:73:36:4e:61:53:53:bf:c2:29:00:8c:
                    96:37:2b:a5:d0:98:77:9d:c6:fc:5d:9a:19:37:db:
                    ff:7a:a8:11:36:9a:36:7c:2a:74:6a:87:79:2c:e3:
                    8b:5b:f3:11:b1:6d:c4:72:c4:77:14:70:f9:ab:d8:
                    3d:ab:d9:e0:8b:c8:cc:30:6a:6f:b0:08:bc:80:cf:
                    e2:7f:e3:be:28:30:16:fd:5c:f9:09:6d:4a:18:71:
                    d5:fb:15:a0:40:5d:0b:f3:3e:b2:83:8b:7b:e5:cc:
                    33:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:08:97:BA:5A:3C:73:86:9B:FC:01:3B:74:AD:02:EE:F3:37:06:CB
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ugiXulo8c4ab_AE7dK0C7vM3Bss.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.158.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:9e:8a:a1:8d:e0:31:c0:3d:95:46:1d:d1:65:10:14:da:aa:
         47:fe:89:18:6d:99:bc:80:ac:ab:32:5c:89:be:1f:17:a3:2d:
         64:fd:e3:3a:19:1f:cd:0f:6c:d2:f7:48:bd:ff:99:54:dd:ec:
         0b:cf:22:e8:2f:d8:35:79:b5:b3:6b:2b:66:1b:3d:91:1b:75:
         36:4a:2e:28:7c:79:c2:9c:28:8f:a5:40:e0:ba:06:25:1a:ce:
         c7:08:e9:d2:ee:cf:72:87:22:de:c2:ea:15:19:01:46:43:9a:
         ca:80:ac:49:f6:f6:5d:10:5f:ae:50:d1:dd:23:ae:3e:90:48:
         eb:7f:10:f5:1a:2a:02:2f:e0:c5:66:8d:09:b4:a2:fa:c0:89:
         cb:04:c4:e0:8f:71:08:b0:da:17:32:60:d7:72:79:b7:0e:8b:
         34:5b:c5:51:75:82:9b:f4:17:da:11:50:86:f0:3c:eb:b4:d5:
         94:01:66:d3:d5:7f:34:74:57:25:09:df:7c:94:c2:29:1b:32:
         a8:f7:aa:64:ce:2a:01:0d:79:5f:f3:b2:20:51:07:4a:3e:d8:
         5a:ab:10:4f:d4:65:a7:50:9e:c7:74:77:c4:46:51:5e:95:81:
         e3:59:a1:b7:af:eb:65:ed:6c:24:31:e7:fc:31:d4:2a:e9:fb:
         d6:9a:9e:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:38:48 2024 by rpki-client on console-fra.rpki-client.org