Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/6pIfOIulywE7YUXo_gJoE_0sZNc.roa
File:                     6pIfOIulywE7YUXo_gJoE_0sZNc.roa (raw, json)
Hash identifier:          5HPz7dtY8ypORZny1YMfYk0fRRX2ob7QehUHiQEsHfQ=
Subject key identifier:   EA:92:1F:38:8B:A5:CB:01:3B:61:45:E8:FE:02:68:13:FD:2C:64:D7
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0947
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/6pIfOIulywE7YUXo_gJoE_0sZNc.roa
Signing time:             Sun 30 Jun 2024 01:29:32 +0000
ROA not before:           Sun 30 Jun 2024 01:29:32 +0000
ROA not after:            Tue 24 Jun 2025 10:46:45 +0000
asID:                     9605
IP address blocks:        1.74.32.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:41:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2375 (0x947)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun 30 01:29:32 2024 GMT
            Not After : Jun 24 10:46:45 2025 GMT
        Subject: CN=EA921F388BA5CB013B6145E8FE026813FD2C64D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:19:82:46:bf:f8:5b:dc:2c:13:3b:ef:4d:a5:
                    c3:38:04:84:c5:23:32:bb:83:2b:eb:08:10:71:5a:
                    ea:dc:54:96:b9:f4:dd:a2:db:38:c1:25:07:a6:29:
                    8c:24:86:74:36:ec:1d:e8:e6:e4:f6:a5:1c:86:3d:
                    59:76:69:9f:80:0f:ae:4e:b4:54:41:c2:d0:6f:35:
                    9e:e5:27:b7:f9:86:db:37:4d:f5:ff:5a:16:e1:fc:
                    b3:f8:27:03:ff:17:68:a7:bc:9a:2f:a6:cf:b0:e9:
                    4c:48:d1:1d:9e:b9:94:b5:ae:04:0d:c5:46:bb:83:
                    d3:9f:d0:fe:3b:3e:2f:18:34:22:ff:72:57:3e:8e:
                    18:e9:c0:0d:48:0d:ca:c5:30:2c:0a:14:10:2d:86:
                    61:ee:06:13:d1:1a:ec:13:29:55:02:85:fe:b4:79:
                    a3:69:49:4e:f6:4a:d3:68:7f:92:1b:98:17:8d:fd:
                    3d:0f:0d:9e:c6:af:00:05:b3:87:cd:33:92:67:37:
                    df:1d:32:27:c6:1c:9a:98:b3:89:b8:9b:7b:24:ee:
                    6d:7c:b6:7c:7f:ac:cb:a1:da:51:b6:da:1f:83:99:
                    5c:ca:68:ff:a7:1e:10:20:ae:01:13:bf:cd:10:d9:
                    15:85:b1:cc:76:27:e6:90:0e:c1:45:e5:7d:07:2a:
                    2b:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:92:1F:38:8B:A5:CB:01:3B:61:45:E8:FE:02:68:13:FD:2C:64:D7
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/6pIfOIulywE7YUXo_gJoE_0sZNc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.74.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         ab:5b:0b:da:4b:86:0c:26:90:9a:f6:62:d8:22:d3:9e:f9:a2:
         ed:53:f3:23:95:ba:38:3c:c5:b2:d6:26:bd:3d:6d:83:1c:63:
         c4:af:d6:73:b1:c8:a4:f1:ed:22:6b:2c:de:99:7c:31:b7:c7:
         89:1e:11:81:c2:49:71:39:9b:02:3d:2e:bc:e8:b2:32:c0:5a:
         33:8c:e2:44:4c:68:ab:46:fe:a8:b9:a9:d9:a0:61:27:e8:db:
         e4:9d:76:f5:34:05:e9:c5:4d:71:a1:25:7d:f8:81:db:2c:2b:
         f8:eb:37:a0:80:0f:c0:57:71:a7:7a:f6:aa:b2:ee:a9:9e:fb:
         db:8a:ea:22:cb:b1:2d:6e:5c:9b:0a:00:7e:b0:43:f9:2d:2a:
         34:8f:4b:49:61:80:cf:ec:ac:10:e8:70:03:c1:d3:7c:37:f2:
         b2:ab:ca:55:3e:76:73:ac:95:d5:39:88:81:37:d3:d9:7f:16:
         8e:85:67:ce:f9:9a:e6:7b:82:59:c8:1e:5f:dc:84:fa:15:a3:
         4d:0c:2d:a5:02:48:82:7f:07:0b:f9:9b:97:c9:78:9f:a8:de:
         9b:1c:93:3c:7a:34:57:27:1f:e3:61:36:0d:33:08:a5:d1:31:
         82:5f:0a:d9:fd:45:37:3c:8e:12:c9:a0:8a:92:9e:ec:72:7c:
         23:e4:f3:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:23:59 2024 by rpki-client on console-fra.rpki-client.org