Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/wYm6SLLaKahXJu6qnRhnWgjgJno.roa
File:                     wYm6SLLaKahXJu6qnRhnWgjgJno.roa (raw, json)
Hash identifier:          gzjdJ//5klovYQcAhYhAQGEj53KliqD8gmx/zPlCza4=
Subject key identifier:   C1:89:BA:48:B2:DA:29:A8:57:26:EE:AA:9D:18:67:5A:08:E0:26:7A
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0809
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/wYm6SLLaKahXJu6qnRhnWgjgJno.roa
Signing time:             Tue 30 Apr 2024 02:12:23 +0000
ROA not before:           Tue 30 Apr 2024 02:12:23 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        220.210.96.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2057 (0x809)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr 30 02:12:23 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=C189BA48B2DA29A85726EEAA9D18675A08E0267A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:2b:ee:d2:14:e6:3d:6a:93:0c:e3:1a:8e:fc:
                    9a:07:30:81:0d:e9:09:c2:f4:df:4e:ce:e1:d3:84:
                    f8:91:d0:55:ad:6d:c6:ba:dd:cd:be:02:70:6b:01:
                    9a:1f:89:8f:94:0a:3d:d1:88:62:53:8c:04:19:2e:
                    6a:3a:67:06:10:71:5a:e1:28:67:82:c1:98:62:41:
                    66:29:ee:df:08:44:8e:5c:50:8e:69:ac:dc:96:1e:
                    e8:e3:17:3f:00:56:c8:57:dc:de:b6:c7:24:9c:00:
                    3f:e6:df:4a:db:b9:85:8b:fd:ba:69:f4:1c:6a:26:
                    08:98:b1:e9:90:3c:4c:dd:08:10:70:c4:73:60:7f:
                    45:0b:6a:1e:31:d0:42:bc:96:34:76:36:c3:8d:55:
                    b8:63:85:57:f8:22:fa:49:c0:ee:54:21:c1:c0:54:
                    ea:32:95:94:10:49:0a:4e:06:0e:14:a9:15:b5:96:
                    b7:f3:ba:6a:27:0e:e4:24:45:51:ad:63:ca:c4:f0:
                    fe:e9:dd:1c:46:2b:87:8a:10:94:50:9f:c5:99:aa:
                    5a:75:bf:92:c5:83:bc:85:d8:05:4a:40:0b:8c:ea:
                    02:2b:4c:21:b7:7a:33:bc:2d:59:1a:b5:bb:58:d5:
                    71:56:c7:dd:bc:73:dc:3c:c2:65:b4:5c:f7:c9:36:
                    48:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:89:BA:48:B2:DA:29:A8:57:26:EE:AA:9D:18:67:5A:08:E0:26:7A
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/wYm6SLLaKahXJu6qnRhnWgjgJno.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.210.96.0/21

    Signature Algorithm: sha256WithRSAEncryption
         e6:94:af:42:67:ce:54:b4:e1:a9:09:d7:62:fb:74:ec:9e:9c:
         83:fb:1a:8c:16:35:64:b3:22:e1:d2:ef:26:f0:93:87:be:ae:
         f1:ae:4f:d9:fb:7c:58:f1:e9:48:dd:e8:39:cf:93:a2:1d:1d:
         41:97:94:01:4b:66:a1:40:af:91:b6:05:32:67:37:24:b7:e6:
         d3:42:32:ba:39:1f:64:93:53:16:63:2d:f4:d8:75:f7:ef:80:
         7e:b2:7c:e7:b9:9f:d7:fa:bc:8e:7e:80:a2:80:dc:d0:24:76:
         34:d4:cd:9f:b9:17:05:9e:75:a2:09:19:7d:78:33:9d:a7:89:
         c5:c6:d0:dc:44:54:34:d7:d4:60:74:18:53:1c:4c:5f:7a:62:
         fc:a5:4c:7f:50:c4:b8:26:37:5e:03:b2:fb:f7:bf:5f:1d:42:
         32:aa:34:da:67:2c:cc:95:d2:0b:6d:29:d6:f3:85:17:00:29:
         c1:70:0b:4c:46:ab:dc:1e:41:77:89:e9:12:7e:66:67:a1:ca:
         95:8c:33:21:e3:eb:6e:42:c1:b5:b5:af:29:b5:33:df:d4:9b:
         57:c5:c0:ee:f2:9a:f8:20:22:c1:d3:3f:36:40:cf:a7:39:f4:
         98:0c:64:8f:c0:6e:44:3f:a9:b7:08:ab:20:d1:e8:d4:e2:df:
         72:d0:24:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 15:54:38 2024 by rpki-client on console-ams.rpki-client.org