Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/4v-8TJ_UFUR5SzmgJdvOzkTSYjw.roa
File:                     4v-8TJ_UFUR5SzmgJdvOzkTSYjw.roa (raw, json)
Hash identifier:          ILlqEZpjhvikEsXdbUfGzltIeGG28lPG/ZLJ7oRMmow=
Subject key identifier:   E2:FF:BC:4C:9F:D4:15:44:79:4B:39:A0:25:DB:CE:CE:44:D2:62:3C
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       057E
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/4v-8TJ_UFUR5SzmgJdvOzkTSYjw.roa
Signing time:             Thu 27 Jul 2023 16:58:10 +0000
ROA not before:           Thu 27 Jul 2023 16:58:10 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     9605
IP address blocks:        1.66.128.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 23 Jun 2024 11:53:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1406 (0x57e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jul 27 16:58:10 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=E2FFBC4C9FD41544794B39A025DBCECE44D2623C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:85:3a:91:8d:93:8f:5c:89:4f:3c:8a:81:1b:
                    d4:a4:a2:36:2e:d6:ad:5b:63:49:c0:5d:92:9c:7c:
                    77:f5:85:1f:57:b5:49:48:b4:fb:31:b6:c9:da:18:
                    b2:a4:a1:5c:8b:0a:59:15:ac:e4:fc:bc:16:9b:59:
                    c3:cb:91:ee:b1:e1:77:9e:14:d6:3a:4c:84:c5:d7:
                    0c:99:b3:b3:00:e4:ab:a9:9d:9b:03:16:4b:9e:8c:
                    f9:2c:97:64:bd:c8:4f:2f:a9:ff:85:c5:a0:b8:f5:
                    f3:b9:92:65:a5:ba:1a:31:ef:c0:3b:bb:b0:04:76:
                    61:b5:c2:58:18:d5:32:59:3e:d4:48:b6:01:0c:4f:
                    37:04:44:31:6e:c8:fd:dd:b5:fd:ee:3b:f4:31:a8:
                    8d:cf:4a:14:91:24:85:0b:93:ca:58:40:9c:4e:d5:
                    81:38:b3:ac:39:53:fe:8a:c8:80:72:6c:20:c1:ea:
                    ff:8f:bf:eb:ec:22:8b:3f:83:e9:9b:2d:c1:af:2c:
                    bd:5b:de:5b:e4:39:44:af:1e:87:4b:b0:4e:c3:82:
                    e4:fd:47:38:01:e3:c4:6b:d0:2b:01:23:e1:f9:51:
                    e7:9c:32:54:83:84:9e:3d:32:6c:eb:79:29:d0:cb:
                    66:06:4c:a2:2b:66:8a:ff:70:85:30:76:a1:2d:8e:
                    0d:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:FF:BC:4C:9F:D4:15:44:79:4B:39:A0:25:DB:CE:CE:44:D2:62:3C
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/4v-8TJ_UFUR5SzmgJdvOzkTSYjw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.66.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         d6:c6:77:31:29:64:c7:ea:11:8b:4b:75:53:6d:ea:72:fd:96:
         7b:5a:10:c2:39:f2:91:5f:6e:83:be:18:22:cc:2c:f5:65:5b:
         df:d1:bb:2e:d7:13:ae:ba:6c:a8:23:59:77:50:f5:ce:e9:82:
         f9:e0:df:80:c7:f2:d8:4c:d4:13:dc:e0:c8:5e:f2:9b:3b:4d:
         a8:02:22:80:55:6b:fd:51:36:e3:af:e5:62:47:8d:76:22:8f:
         e2:43:e9:7e:09:18:70:9b:79:e2:fc:45:8e:74:f8:f8:0c:ea:
         d1:1a:93:b2:c4:e2:55:bb:d5:32:b2:9b:2c:2a:35:4e:c6:80:
         2a:dd:21:57:bf:4d:c3:0f:46:35:38:a1:d6:ac:59:3e:94:be:
         29:1a:74:86:82:f1:7c:e3:9c:3d:42:63:1f:c1:4c:ae:c5:8d:
         75:c0:c3:5c:92:b0:70:81:45:eb:25:f7:bc:25:97:87:63:43:
         24:2a:40:f3:90:35:f9:9b:3d:c3:09:d9:19:81:3e:8e:3d:49:
         f1:fd:33:7a:7a:69:7b:58:f4:b7:37:36:f1:40:f9:9d:26:2f:
         66:a7:92:85:90:ee:3d:ff:cd:10:c8:44:a8:fb:f5:c8:d0:2a:
         01:12:8e:21:d5:9a:f7:12:c7:5f:81:ff:c8:cd:d5:92:f6:c8:
         bb:2d:96:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 14:31:52 2024 by rpki-client on console-ams.rpki-client.org