Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/w7dfmOeDHaAB39DES8CLzc7ei1c.roa
File:                     w7dfmOeDHaAB39DES8CLzc7ei1c.roa (raw, json)
Hash identifier:          BUvvYkoreKBQlDOYkAjXf5oYChbgdMSuwZKY0NP/OCA=
Subject key identifier:   C3:B7:5F:98:E7:83:1D:A0:01:DF:D0:C4:4B:C0:8B:CD:CE:DE:8B:57
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0480
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/w7dfmOeDHaAB39DES8CLzc7ei1c.roa
Signing time:             Thu 27 Jul 2023 16:44:11 +0000
ROA not before:           Thu 27 Jul 2023 16:44:11 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     9605
IP address blocks:        110.161.224.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 23 Jun 2024 11:53:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1152 (0x480)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jul 27 16:44:11 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=C3B75F98E7831DA001DFD0C44BC08BCDCEDE8B57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:11:08:d7:3d:e4:a8:be:52:5f:01:77:e8:e9:
                    d4:e1:5e:e8:a9:9e:17:78:26:0f:c4:b1:76:dd:99:
                    f9:8e:65:6b:7c:e9:33:05:26:cc:dd:14:d6:85:13:
                    40:e2:86:19:d7:e9:e7:95:44:3f:61:35:d7:91:db:
                    b8:43:ae:d2:57:f0:86:1a:06:94:9d:b3:44:b6:ba:
                    78:4d:49:40:6b:71:af:3b:3f:65:98:cc:59:fc:cc:
                    0f:fd:d5:b3:30:2b:dd:74:7b:1e:fe:0e:00:3a:d8:
                    e6:9d:0d:37:d0:f5:13:65:63:a6:67:3f:82:6f:09:
                    97:60:dc:a9:e5:92:3e:af:0e:b7:b0:c3:83:20:66:
                    35:24:1b:b2:ab:64:68:db:dc:3f:9f:c2:3a:a7:90:
                    3e:37:58:03:2e:39:33:a7:9e:26:ac:ab:1b:22:b5:
                    c6:57:8d:25:50:b4:29:dd:f0:1b:70:7c:35:a8:73:
                    21:30:3a:db:4e:de:07:ce:17:cd:f3:e5:4c:d6:85:
                    2f:62:13:96:85:b6:90:23:46:1d:38:91:4c:a6:08:
                    8d:56:bb:ad:db:9d:81:51:14:2b:5a:d6:57:7a:bf:
                    bd:68:80:99:74:e4:42:7f:10:92:88:08:04:79:9f:
                    53:c6:35:6d:0b:ff:e1:17:fe:21:14:a6:8d:d8:d9:
                    fc:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:B7:5F:98:E7:83:1D:A0:01:DF:D0:C4:4B:C0:8B:CD:CE:DE:8B:57
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/w7dfmOeDHaAB39DES8CLzc7ei1c.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.161.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         86:4a:bd:73:af:94:ae:fa:3d:a8:47:69:c9:fb:11:f1:cb:94:
         15:4f:b3:af:77:0e:8f:a0:6e:58:84:91:ad:72:52:cf:1c:d0:
         c9:95:bd:4d:1b:aa:5a:85:c2:0d:b5:da:01:f5:a3:8c:ad:31:
         2d:cb:be:aa:9d:46:d2:be:86:d3:3c:a2:bc:e6:17:87:ac:a0:
         88:f4:cf:17:00:fa:f4:9e:f7:8c:ab:4d:dc:f5:83:0b:56:ec:
         84:ac:10:06:9a:a9:a6:9d:7d:bc:bb:3e:b3:1e:eb:83:0b:2b:
         e9:4b:12:96:5a:d2:33:1f:b7:89:fe:63:72:69:6f:8d:bf:8b:
         39:00:58:7f:b3:e8:f5:37:4e:7e:91:72:90:a9:37:e7:9d:45:
         b4:5f:c0:d3:1e:40:c3:27:03:29:c4:3c:56:4e:dd:00:86:0f:
         a1:07:5f:9f:20:9f:99:ed:86:77:14:89:9a:78:9c:0a:3e:1d:
         8c:81:62:e4:6e:10:01:fd:d7:58:9e:b8:95:0a:5c:a8:b1:f3:
         68:cf:be:11:28:5d:db:72:64:ce:01:53:32:e7:ff:4b:40:0e:
         3a:0d:71:cc:3b:7f:d1:07:3b:18:63:23:e2:56:0c:55:d5:89:
         fd:c4:06:d9:d2:5f:8a:65:dd:f8:d8:e1:ce:13:f7:53:7f:3a:
         58:61:22:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 12:57:23 2024 by rpki-client on console-fra.rpki-client.org