Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/469/7Y9VqxYXJwD8PNIGpb5XE-EJEhA.roa
File:                     7Y9VqxYXJwD8PNIGpb5XE-EJEhA.roa (raw, json)
Hash identifier:          XgyTmne6Gr7IfQ6+j0Hwfpow0WKHju+vVnDCh9jAAE0=
Subject key identifier:   ED:8F:55:AB:16:17:27:00:FC:3C:D2:06:A5:BE:57:13:E1:09:12:10
Certificate issuer:       /CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Certificate serial:       010D
Authority key identifier: 40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/7Y9VqxYXJwD8PNIGpb5XE-EJEhA.roa
Signing time:             Sat 31 Aug 2024 01:29:22 +0000
ROA not before:           Sat 31 Aug 2024 01:29:22 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     8220
IP address blocks:        110.50.64.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 18:36:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 269 (0x10d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40610DA68E93ED538A48A46C5214024ED54D07F6
        Validity
            Not Before: Aug 31 01:29:22 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=ED8F55AB16172700FC3CD206A5BE5713E1091210
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:11:7d:e2:2e:6e:34:de:19:89:47:bc:03:08:
                    1b:c5:3f:90:6e:27:2b:a6:1f:bf:c5:99:34:ac:d4:
                    09:57:32:83:8e:cb:0d:48:b8:bf:86:12:e8:b5:51:
                    ac:1b:45:53:ca:25:06:aa:99:a0:d0:a9:9d:94:fd:
                    a2:0a:5c:2b:10:f3:d0:55:b0:50:74:81:c6:2a:06:
                    06:12:64:27:77:cf:4e:b3:d5:29:cc:ee:2d:46:7f:
                    79:20:6a:6e:ba:4f:59:d0:c6:12:6e:35:4a:7b:2b:
                    b9:42:e7:dc:ee:c0:15:77:c8:e1:ba:3f:cf:3c:06:
                    eb:83:18:63:13:92:64:5d:e3:06:e7:ba:27:1b:a7:
                    e7:14:ef:78:75:2c:54:f5:bd:72:52:05:1f:b2:5c:
                    b4:d3:71:96:39:08:c2:97:3b:85:cc:0e:1c:13:99:
                    9a:0b:4e:f9:be:8b:10:42:5b:9f:c4:02:b6:ab:9e:
                    38:12:9b:e1:9b:64:cc:c1:28:12:5d:6d:c8:5d:8d:
                    96:ba:fb:4a:40:54:ec:89:45:0e:36:ed:8f:af:01:
                    d8:31:d3:25:56:06:90:2e:ca:02:ae:d9:db:61:23:
                    14:c4:4b:7c:09:95:98:3a:22:73:72:09:c3:1b:40:
                    69:55:bf:40:71:2d:6f:bb:1b:72:db:43:fa:d7:4f:
                    6b:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:8F:55:AB:16:17:27:00:FC:3C:D2:06:A5:BE:57:13:E1:09:12:10
            X509v3 Authority Key Identifier:
                keyid:40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/7Y9VqxYXJwD8PNIGpb5XE-EJEhA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.50.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         3f:2c:9c:01:9c:d8:7c:a6:60:d6:b8:25:af:1a:d1:ce:3d:11:
         5b:f0:58:fc:67:0c:57:de:c4:c7:a6:22:2e:6d:ec:de:e4:b5:
         05:7b:21:f2:50:f5:38:c3:e4:75:1a:75:eb:f6:96:f7:95:e4:
         2b:a0:bc:8e:bd:4c:d4:07:06:5f:9c:d3:18:31:ac:33:54:af:
         54:24:67:3d:d7:bd:38:cb:50:a1:6e:7b:ed:f1:e4:96:3f:53:
         19:b7:ab:5f:82:2d:f1:a3:10:d3:d8:0c:95:37:5e:97:0a:3d:
         b0:22:d4:2b:60:05:94:38:44:df:a2:ff:5a:ce:6b:5f:7f:1e:
         06:c8:c1:7d:f7:2c:01:85:54:68:c2:15:25:16:99:7d:13:0a:
         e5:98:32:d0:aa:5a:84:60:0f:c3:71:b8:f8:d2:e2:6d:07:f1:
         50:6c:fe:d8:dc:0d:42:12:43:ff:eb:55:7d:9e:9f:76:fd:ce:
         21:0b:f5:78:3e:14:fb:17:ad:58:23:84:17:7a:d8:12:b8:4d:
         76:65:96:c2:ce:a7:0b:bd:4e:5c:ae:fd:eb:e7:b0:fa:50:19:
         41:a8:ac:93:88:63:7c:ee:81:86:ea:0a:f7:c2:27:b6:89:78:
         20:ee:e8:b0:33:6f:fe:0b:9d:95:36:3d:14:f8:0e:a3:86:2e:
         6f:ca:e3:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 19:47:59 2024 by rpki-client on console-fra.rpki-client.org