Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/73TiWcW_jsh5H-k3Z28-9OBON-w.roa
File:                     73TiWcW_jsh5H-k3Z28-9OBON-w.roa (raw, json)
Hash identifier:          ddTiVMNtpy6LyeWaBQc6wwVSdrqha2tBAd0m7RYuuIM=
Subject key identifier:   EF:74:E2:59:C5:BF:8E:C8:79:1F:E9:37:67:6F:3E:F4:E0:4E:37:EC
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       032E
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/73TiWcW_jsh5H-k3Z28-9OBON-w.roa
Signing time:             Thu 01 Jun 2023 16:07:30 +0000
ROA not before:           Thu 01 Jun 2023 16:07:30 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.97.36.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 May 2024 13:36:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 814 (0x32e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun  1 16:07:30 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=EF74E259C5BF8EC8791FE937676F3EF4E04E37EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d1:a2:5e:f0:89:28:01:da:4b:95:ca:d9:c9:
                    a7:0e:08:1c:28:61:6f:b1:f3:38:11:59:e2:b8:59:
                    15:3e:5e:93:36:4c:f1:ac:05:f1:d1:26:5c:ff:31:
                    41:a6:94:fd:45:3b:49:53:27:79:3f:e2:95:98:5c:
                    f8:58:f6:dc:ff:17:49:1e:44:0d:86:f3:a7:f0:08:
                    2a:2a:f2:d1:23:e4:d3:e3:c7:ff:78:68:c1:2a:68:
                    e6:07:7e:69:a3:cd:8f:db:69:28:78:32:d2:49:ba:
                    a9:bf:03:89:30:3d:37:36:d3:17:28:db:95:d1:58:
                    cb:1e:c9:e7:c4:b5:19:b3:49:24:bd:0a:ba:c4:ec:
                    a8:5a:30:79:78:89:ac:33:a0:2d:49:5e:26:f7:8a:
                    0d:d5:d7:08:c5:c2:8d:b5:b9:85:33:3b:f2:38:0f:
                    51:68:76:d0:82:0d:2f:ec:da:23:67:dc:42:e2:69:
                    1b:5c:55:22:0d:c3:f7:d4:60:3a:0d:ee:84:de:59:
                    75:e9:10:6c:a3:8f:f9:2d:b1:d2:d9:01:98:17:a5:
                    cd:21:0b:68:75:b1:1f:ff:94:d4:2e:95:70:d3:55:
                    90:25:61:6a:84:54:c4:64:cb:dd:5c:90:df:d6:7a:
                    92:ce:9e:fc:91:a6:2e:77:d7:ee:b3:55:dc:a2:c1:
                    36:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:74:E2:59:C5:BF:8E:C8:79:1F:E9:37:67:6F:3E:F4:E0:4E:37:EC
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/73TiWcW_jsh5H-k3Z28-9OBON-w.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.97.36.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d0:4e:8a:c5:f7:be:79:de:da:81:69:52:7b:61:5d:f4:11:88:
         5a:37:fc:30:c8:e5:8e:30:d9:2f:0c:9a:36:2b:fc:a6:52:20:
         f2:08:6c:c2:3d:05:7d:49:fa:99:58:ad:01:4a:4a:47:7d:66:
         be:63:bd:37:c7:31:d4:ac:8d:7f:36:e1:22:5a:f4:c0:de:db:
         da:83:93:0f:2c:c3:91:ab:86:4e:73:84:da:5a:00:79:7a:84:
         9f:e9:ea:6c:7a:d9:ae:dd:f1:12:f1:d0:ea:3a:e9:bc:31:e8:
         73:97:50:95:83:f6:2a:9c:33:7d:3a:9a:56:30:62:82:ea:3a:
         3d:8e:fd:61:46:05:8f:e4:3d:0d:25:93:76:dd:aa:34:b8:b1:
         17:2e:f9:42:31:45:ed:58:ed:b9:23:ec:54:94:f6:b6:b4:95:
         0a:58:e4:d0:83:b0:d9:b7:d6:cb:02:fb:f3:ff:72:71:67:d5:
         db:4c:d5:32:c0:25:b2:af:bd:8c:67:f6:28:7a:82:ed:09:08:
         5d:ba:53:81:d1:09:b3:02:52:ff:50:c6:f2:59:4b:c7:7e:26:
         7c:09:b7:0a:7e:8c:e6:87:ed:0d:0a:fd:19:56:bc:a8:43:07:
         2a:fe:8c:69:91:a2:67:24:24:fe:40:09:ad:4b:69:fa:a8:44:
         06:f1:59:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:15:55 2024 by rpki-client on console-ams.rpki-client.org