Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/2YztVBVtAFrGjlrBjnjbGauDgcY.roa
File:                     2YztVBVtAFrGjlrBjnjbGauDgcY.roa (raw, json)
Hash identifier:          2PUmIm+UyssT/6SkAKB4EPUHsKICzZbJVdhrK84gAJA=
Subject key identifier:   D9:8C:ED:54:15:6D:00:5A:C6:8E:5A:C1:8E:78:DB:19:AB:83:81:C6
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0604
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/2YztVBVtAFrGjlrBjnjbGauDgcY.roa
Signing time:             Thu 29 Feb 2024 01:35:49 +0000
ROA not before:           Thu 29 Feb 2024 01:35:49 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     9605
IP address blocks:        1.75.229.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Dec 2024 00:11:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1540 (0x604)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Feb 29 01:35:49 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=D98CED54156D005AC68E5AC18E78DB19AB8381C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:20:a1:eb:67:c4:5d:90:01:c6:1c:7c:0a:b1:
                    74:da:a7:15:91:82:86:70:ee:84:40:7c:19:06:20:
                    fc:3a:67:0b:fc:a0:08:68:41:88:7f:11:9b:ee:6d:
                    97:21:7c:ea:fb:32:96:6c:97:ce:e8:6f:f1:6d:3e:
                    97:84:fe:89:2e:10:12:84:55:02:52:b0:7a:82:b2:
                    7b:c4:3e:27:5d:f9:a9:70:97:27:09:d2:e8:eb:13:
                    9f:43:f8:0d:1f:15:4e:4f:ee:91:c0:0e:09:42:29:
                    db:ca:5c:38:e0:21:7d:b4:39:a6:68:22:55:19:94:
                    3a:4d:05:87:a8:aa:9f:f6:6e:1c:c9:9b:ed:15:06:
                    df:d4:a0:0f:56:c3:95:20:33:b1:81:a4:61:3b:c0:
                    7f:e3:4c:71:fa:df:86:f0:76:a1:a8:d5:8d:21:af:
                    6e:6a:79:5d:e3:59:8d:3c:1b:27:2d:65:57:d4:33:
                    4e:eb:84:b8:f2:65:37:e3:bb:c0:49:40:36:80:58:
                    7a:5e:55:cc:0b:44:70:2c:8e:5f:76:7b:50:e3:2a:
                    3f:06:1e:c4:27:54:82:dd:2f:c4:83:3b:e2:49:f6:
                    0a:6d:b3:b3:bd:8e:24:f9:ab:b8:8e:2b:67:8b:8c:
                    c6:0b:4f:89:ab:d6:cf:83:4b:4a:db:17:64:db:0d:
                    3b:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:8C:ED:54:15:6D:00:5A:C6:8E:5A:C1:8E:78:DB:19:AB:83:81:C6
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/2YztVBVtAFrGjlrBjnjbGauDgcY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.75.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:62:2d:57:5d:a1:87:77:0c:b8:50:46:c7:45:cf:54:ab:6c:
         1c:27:7e:81:a4:5e:34:88:fe:6d:34:14:77:ab:cb:ff:3a:a9:
         7b:54:6a:6c:36:0f:63:57:14:09:40:cf:74:f8:b9:ba:6f:44:
         44:b9:0a:1f:bb:8b:18:20:e9:04:ca:81:ab:7d:ba:47:8d:18:
         47:27:28:c8:1e:79:fb:df:d8:a0:9a:f1:b7:fd:de:cc:ca:96:
         d9:77:9f:de:74:97:78:b4:88:dc:d4:2c:81:b1:20:ae:54:15:
         98:7b:fb:42:8b:c6:b0:fb:e2:d5:bd:06:9d:8f:3a:83:8f:52:
         a1:bb:eb:43:a8:99:78:0d:b4:f4:91:4f:aa:10:e0:16:b4:1c:
         2f:77:68:5a:af:ec:7c:c6:95:16:f5:e6:06:c0:92:08:ad:33:
         35:04:63:c0:3e:0d:5d:60:1e:18:58:d3:38:16:cc:4c:de:cd:
         4f:44:cd:9a:b4:01:aa:2a:4f:ab:a6:08:7d:f7:9f:9d:e8:5c:
         de:97:c6:25:8a:dc:81:6f:e7:ed:af:74:35:cf:7f:94:8d:0e:
         d3:c3:6b:27:14:9e:b7:f6:0f:9d:0a:ce:4a:a1:22:88:e6:dd:
         60:07:f3:8f:a1:b5:92:0d:57:ea:98:3f:02:2c:90:b4:63:5c:
         71:c3:08:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 02:17:08 2024 by rpki-client on console-fra.rpki-client.org