Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/469/ppaUHJRuY8dV-iG8sterKNiNG_c.roa
File:                     ppaUHJRuY8dV-iG8sterKNiNG_c.roa (raw, json)
Hash identifier:          UgF5CAi8066Ry+tVcpxnvs7Um9aaxKsE7tMxS4XhGac=
Subject key identifier:   A6:96:94:1C:94:6E:63:C7:55:FA:21:BC:B2:D7:AB:28:D8:8D:1B:F7
Certificate issuer:       /CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Certificate serial:       F5
Authority key identifier: 40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/ppaUHJRuY8dV-iG8sterKNiNG_c.roa
Signing time:             Fri 01 Dec 2023 01:29:45 +0000
ROA not before:           Fri 01 Dec 2023 01:29:45 +0000
ROA not after:            Thu 14 Nov 2024 01:30:03 +0000
asID:                     10021
IP address blocks:        110.50.64.0/21 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 245 (0xf5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40610DA68E93ED538A48A46C5214024ED54D07F6
        Validity
            Not Before: Dec  1 01:29:45 2023 GMT
            Not After : Nov 14 01:30:03 2024 GMT
        Subject: CN=A696941C946E63C755FA21BCB2D7AB28D88D1BF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:38:99:6f:63:99:2c:94:24:54:5d:08:2e:ec:
                    7f:9c:e4:f8:ba:60:70:e9:c3:a5:d3:05:7c:04:53:
                    9f:6a:25:bd:0e:d5:30:90:21:86:b7:97:f0:92:29:
                    2b:7a:96:2c:19:a9:c4:6d:05:12:ab:3f:97:62:65:
                    0a:a5:ab:be:14:92:a7:66:fc:2d:d0:e1:68:d1:70:
                    ac:d3:da:00:57:42:7d:5c:fc:03:48:9b:08:60:47:
                    17:96:c5:4f:b9:b4:de:6c:9e:a4:ea:68:d8:42:1d:
                    92:ef:30:4b:4f:26:28:ac:06:d9:37:4e:a5:65:f5:
                    b4:f2:64:6d:52:79:56:d0:5b:87:a0:c7:74:e9:15:
                    8b:dd:2c:2a:06:35:9d:8c:2d:a4:ab:36:95:c0:83:
                    7c:f6:a1:e9:11:9d:82:93:c5:c3:3c:d6:fd:e1:cd:
                    39:b9:d4:94:e8:61:e8:20:a8:fd:5b:90:7e:3d:cd:
                    9b:c7:0c:56:b4:53:f2:a2:9a:82:2b:8c:8e:60:96:
                    cc:43:63:8e:9f:3c:00:81:e4:fe:4b:6e:0b:08:63:
                    57:03:de:23:c0:a9:e7:ea:8c:22:6f:e3:bd:16:8d:
                    22:c0:2d:ca:0f:dc:27:cb:d1:e6:71:ba:55:35:bc:
                    23:29:56:2b:85:7e:89:1f:a1:d2:bd:ee:14:3f:bc:
                    c2:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:96:94:1C:94:6E:63:C7:55:FA:21:BC:B2:D7:AB:28:D8:8D:1B:F7
            X509v3 Authority Key Identifier:
                keyid:40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/ppaUHJRuY8dV-iG8sterKNiNG_c.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.50.64.0/21

    Signature Algorithm: sha256WithRSAEncryption
         2f:ad:2f:1a:2b:ea:f5:36:27:8f:54:14:da:bc:11:09:4a:b5:
         2e:75:2d:45:1e:33:f8:76:5a:19:54:cd:98:2f:b1:ab:11:72:
         56:a7:58:0e:bf:f6:de:4b:1b:38:04:3c:e4:03:cc:99:6c:b9:
         e1:99:a3:c7:b7:78:c7:3d:0b:3f:4e:7f:3f:df:6c:82:7f:0e:
         47:ce:76:c4:15:a7:cc:3d:5c:7b:26:49:d2:d6:f4:9d:ba:0c:
         31:0f:22:bf:25:ab:b9:14:11:76:b9:55:82:5c:56:75:5a:d1:
         86:19:46:35:ed:24:96:21:12:91:e1:97:2a:40:1c:af:d6:31:
         9a:69:52:fb:f6:16:aa:a9:67:33:3f:c7:44:8b:fb:df:90:f2:
         95:71:0a:69:2f:6c:6c:ef:2e:10:ce:95:8b:6c:40:22:d0:c8:
         bc:28:36:a6:5c:a4:f6:17:b1:c6:63:ea:ac:68:27:e2:d4:84:
         41:77:36:f1:64:19:38:84:b2:c3:6e:d0:0e:45:0b:31:71:54:
         0e:7c:06:f5:33:4a:9b:e0:4f:c7:e3:31:04:98:9d:c2:f8:57:
         20:30:ec:34:6a:50:7b:79:e5:33:a0:cc:9a:59:29:98:55:22:
         31:06:db:c7:18:19:27:f0:6f:49:88:86:87:47:95:d6:04:af:
         0b:53:ad:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 03:14:27 2024 by rpki-client on console-ams.rpki-client.org