Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/8ByS8wl2V-qqYnhzwpkHlpFWFP0.roa
File:                     8ByS8wl2V-qqYnhzwpkHlpFWFP0.roa (raw, json)
Hash identifier:          Uv0Fw3/bt4eNoVv1TxeTnnmzqxOqXctoAYjjbC1aVHE=
Subject key identifier:   F0:1C:92:F3:09:76:57:EA:AA:62:78:73:C2:99:07:96:91:56:14:FD
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       01CB
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/8ByS8wl2V-qqYnhzwpkHlpFWFP0.roa
Signing time:             Wed 24 May 2023 16:40:32 +0000
ROA not before:           Wed 24 May 2023 16:40:32 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        1.79.22.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 May 2024 13:36:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 459 (0x1cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: May 24 16:40:32 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=F01C92F3097657EAAA627873C2990796915614FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:0c:81:18:da:18:0c:a9:9f:d2:9f:3e:8f:d3:
                    11:6f:ec:76:b4:f1:3a:7d:eb:0b:08:54:a8:4d:d4:
                    a6:a3:26:64:c9:a0:32:ea:2e:46:31:70:11:d5:3e:
                    79:f2:61:a3:a2:0a:2d:3e:a4:37:13:1f:eb:13:50:
                    29:20:ac:ef:be:a0:ae:29:c9:aa:f5:d5:43:1b:45:
                    5e:4b:ad:fb:42:b4:37:7f:0b:79:40:ed:2e:a5:3c:
                    58:34:c4:a3:5b:d0:79:d2:f3:d0:58:df:48:7e:0a:
                    75:33:94:54:38:c9:3b:29:7c:6f:37:cc:16:3f:f8:
                    53:12:1e:e0:34:02:21:b7:87:15:98:54:c3:99:4e:
                    fa:cf:4e:82:a7:55:dd:c0:78:73:01:6f:9c:f1:49:
                    a8:41:db:0e:53:2d:5b:9a:be:14:78:0f:b3:96:5d:
                    91:f0:5e:86:5a:5c:42:fc:ed:b2:ee:db:41:b7:a5:
                    fd:04:f5:39:aa:17:3b:98:a8:88:42:90:6a:8e:38:
                    10:62:28:02:02:2e:57:1a:1b:a1:91:2a:47:4a:8d:
                    51:fe:23:29:33:ce:72:c1:ee:53:f1:c6:e2:5e:00:
                    90:bd:18:b4:89:97:d2:68:f0:e6:50:42:c2:35:5c:
                    74:85:11:93:5c:d1:d5:99:b8:d4:18:a6:69:31:75:
                    1d:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:1C:92:F3:09:76:57:EA:AA:62:78:73:C2:99:07:96:91:56:14:FD
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/8ByS8wl2V-qqYnhzwpkHlpFWFP0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.79.22.0/23

    Signature Algorithm: sha256WithRSAEncryption
         30:63:49:52:c9:d2:f4:63:fa:cf:df:ea:4f:9a:e1:4e:18:5f:
         7b:da:b7:5e:66:b7:83:e3:3d:1a:fe:c6:e9:ac:f9:4e:8d:f0:
         54:6f:02:8f:e7:e9:ad:af:1b:52:08:8a:02:5e:87:e2:f7:08:
         24:30:87:0d:b0:9a:0c:ff:3e:fa:d5:29:09:52:6e:b8:35:5d:
         a1:a4:08:89:be:03:28:40:15:bb:1c:47:4f:08:85:bc:01:9a:
         d2:dd:23:4c:1e:2b:81:00:af:68:cf:c3:c8:51:ad:29:ae:33:
         b8:d0:89:fd:8a:f1:4a:b6:ff:1e:ae:89:cf:b3:2c:25:b6:51:
         6c:9f:e4:54:20:bf:d0:f1:8f:3a:0b:f9:df:ad:9e:1b:4b:99:
         9c:f6:6c:f4:84:41:29:72:0f:a2:45:76:93:e8:67:c0:b8:80:
         a7:19:e5:48:cc:d4:10:47:72:2b:6b:4d:03:2d:97:cb:4d:cd:
         a6:45:6a:c9:f8:19:74:28:10:e0:7f:b8:64:56:37:f9:4b:2e:
         7f:40:87:69:e1:17:07:c2:26:df:d5:94:84:68:87:2b:36:ef:
         84:28:9f:94:19:87:cb:33:63:18:e1:99:20:b2:13:84:0e:80:
         23:63:a8:3b:85:2f:e3:16:bc:9e:3c:ab:7f:e3:51:ef:dd:f0:
         35:73:53:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:15:55 2024 by rpki-client on console-ams.rpki-client.org