Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/5_AdbcwcJRDKCcKGYIEJyb5Iouc.roa
File:                     5_AdbcwcJRDKCcKGYIEJyb5Iouc.roa (raw, json)
Hash identifier:          36GEn2x5euHDYsXUPn9rKMRSRlCianSDFM3CGwhg9Eo=
Subject key identifier:   E7:F0:1D:6D:CC:1C:25:10:CA:09:C2:86:60:81:09:C9:BE:48:A2:E7
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       07BA
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/5_AdbcwcJRDKCcKGYIEJyb5Iouc.roa
Signing time:             Tue 30 Apr 2024 02:06:40 +0000
ROA not before:           Tue 30 Apr 2024 02:06:40 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        1.75.244.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1978 (0x7ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr 30 02:06:40 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=E7F01D6DCC1C2510CA09C286608109C9BE48A2E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:b4:87:d1:53:01:6e:ec:c4:e6:81:56:a5:ca:
                    35:d2:cb:cc:1b:ec:0d:c1:c9:3d:51:3a:4d:cc:49:
                    6a:68:78:69:a9:9c:e8:40:7e:5d:56:38:f3:99:a5:
                    93:9a:df:de:ca:d7:c6:d8:27:fe:55:34:12:fc:ca:
                    a1:c5:94:a2:0e:7d:67:72:39:02:2b:2e:d1:3d:c8:
                    48:60:a0:35:35:50:ea:0c:6f:56:51:a1:83:89:c7:
                    33:8b:02:1c:7b:4d:ee:a5:4d:64:df:44:19:f6:fe:
                    1b:b3:b9:fa:e4:7b:86:33:58:0b:16:e7:d2:f2:31:
                    9a:15:85:c1:cd:bb:9e:6b:2f:38:4c:94:14:84:ba:
                    9e:74:46:4d:08:f9:0d:4b:86:12:e4:ae:08:a4:66:
                    86:ec:00:77:e4:5b:51:16:64:34:47:02:66:b8:4e:
                    47:c7:24:bd:07:b8:2f:2f:ac:f9:07:b9:99:f4:97:
                    c5:e1:24:44:ec:f9:87:75:11:f9:e5:8f:52:e3:82:
                    a0:83:7e:a6:1a:dc:8b:dd:4e:da:d1:93:80:8f:30:
                    06:35:5b:38:57:a7:b6:f3:0a:ca:03:3f:c9:57:77:
                    1d:ad:4e:04:f6:0f:95:64:20:03:90:34:8d:38:d0:
                    90:7e:e4:f4:a0:ec:70:a6:0d:a2:9c:4b:07:f2:f2:
                    94:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:F0:1D:6D:CC:1C:25:10:CA:09:C2:86:60:81:09:C9:BE:48:A2:E7
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/5_AdbcwcJRDKCcKGYIEJyb5Iouc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.75.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d7:78:d6:57:5b:d3:c5:36:cc:a1:a5:bb:7f:e1:28:0b:55:8c:
         a1:27:27:6f:32:e3:8b:e1:66:05:35:f7:83:5e:90:ca:55:92:
         e9:69:82:d4:2a:98:39:9f:b8:3c:64:b0:60:e7:e5:8c:c5:7e:
         6c:ee:6e:4f:d1:f5:15:ab:67:c0:e9:4a:80:5b:a3:0e:56:b4:
         8a:6a:ab:3e:48:85:8a:a2:c6:82:bf:2d:bc:19:bc:40:79:94:
         6b:a5:14:0b:bc:4c:81:18:fe:5b:e0:4e:b4:69:8e:71:bd:4c:
         20:c3:e5:24:2b:47:14:d5:20:c9:4a:ee:23:a5:84:3b:38:09:
         f0:a6:23:fc:32:04:d8:99:ef:91:32:69:43:81:4a:dd:fc:92:
         9c:01:6e:78:83:c9:b1:13:77:79:da:59:df:b9:bb:bb:09:68:
         b5:4f:f4:38:67:ee:e8:b6:37:c8:85:af:22:6d:2d:38:d7:91:
         35:7a:4b:fc:0e:13:9f:f2:f2:7f:b9:5e:c8:48:52:4d:50:a4:
         1b:67:19:6e:0b:67:0d:b9:9e:5b:78:cd:b0:96:bb:2a:51:45:
         27:a0:fe:55:e2:c2:ca:a8:9e:4d:86:90:ec:15:76:fa:7d:ed:
         fd:06:2e:cb:d1:b8:58:67:bb:4f:0f:f9:b3:ca:7e:15:18:3d:
         5f:dc:24:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:59:09 2024 by rpki-client on console-fra.rpki-client.org