Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/8fkcE4mIod9KGSzUTbh_ECUA6s0.roa
File:                     8fkcE4mIod9KGSzUTbh_ECUA6s0.roa (raw, json)
Hash identifier:          PDs21Eb10wUKcqJLM97Zf9GWQ3/mLGGOM7TjtXkFyZs=
Subject key identifier:   F1:F9:1C:13:89:88:A1:DF:4A:19:2C:D4:4D:B8:7F:10:25:00:EA:CD
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       052A
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/8fkcE4mIod9KGSzUTbh_ECUA6s0.roa
Signing time:             Thu 27 Jul 2023 16:54:12 +0000
ROA not before:           Thu 27 Jul 2023 16:54:12 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     9605
IP address blocks:        183.72.128.0/17 maxlen: 17

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1322 (0x52a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jul 27 16:54:12 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=F1F91C138988A1DF4A192CD44DB87F102500EACD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:70:47:82:ec:fe:c8:72:69:aa:81:bb:65:5b:
                    e2:ab:9c:7f:50:d2:ff:f0:a3:42:9d:c7:86:10:5f:
                    b5:dc:d5:93:7a:cf:1b:c0:8e:ee:17:53:1a:45:6f:
                    12:6c:84:69:23:82:45:9b:84:06:48:c6:28:cd:a6:
                    55:8c:f2:7c:7e:c7:c0:05:e8:9c:93:c4:36:22:6f:
                    b8:b6:ea:ac:6a:e1:da:6f:e8:61:44:94:3e:d8:c0:
                    b5:06:d7:30:0e:fb:8b:82:16:00:ac:ac:0b:d2:e5:
                    d1:f2:3c:86:4a:83:0f:ec:d8:16:64:38:f0:3f:46:
                    19:19:45:aa:90:94:30:7e:99:39:1a:41:ba:0e:10:
                    93:fb:f4:88:cc:0b:e7:55:c8:3d:06:ee:b7:f8:a7:
                    60:a9:44:9a:8e:21:b4:78:51:77:02:fe:22:34:34:
                    66:c6:77:61:64:87:98:aa:70:ce:00:86:3c:5b:82:
                    2f:8b:a9:93:c8:ba:49:1d:ea:53:96:3c:bb:d6:c9:
                    9f:8d:0e:22:51:8e:2c:89:bd:2f:77:cd:a1:b4:42:
                    10:95:b4:16:d9:b4:ac:13:42:c3:bd:44:14:0d:c2:
                    0f:5d:bf:77:5f:a2:8d:d1:ca:90:de:fe:2c:23:8d:
                    cf:43:e9:b4:a2:4d:1b:01:49:69:4a:e6:b4:2b:35:
                    4a:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:F9:1C:13:89:88:A1:DF:4A:19:2C:D4:4D:B8:7F:10:25:00:EA:CD
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/8fkcE4mIod9KGSzUTbh_ECUA6s0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.72.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         95:83:34:4a:b6:0e:fd:18:c4:3c:37:c8:3b:0a:27:ff:95:18:
         11:2e:02:a4:91:e2:c4:95:1d:89:bd:fb:e3:c2:40:8d:22:df:
         bd:10:15:43:52:a3:c7:45:30:e3:2e:27:b9:a6:f6:e3:a0:bc:
         1c:5e:7e:a5:a1:e0:5b:d8:80:08:29:e9:5c:20:89:b1:ea:af:
         1b:a8:1f:a8:2b:18:41:9b:4a:1d:d5:da:76:0c:d2:50:22:a7:
         7b:ae:db:9d:50:3c:ae:98:0d:d3:34:71:98:de:f6:2b:77:a5:
         d7:9d:fd:0d:3e:3d:7e:9e:0c:94:4a:93:f8:a8:be:e3:53:b7:
         0b:dc:65:a1:c2:34:01:19:6e:8f:67:5c:9f:6c:bd:b6:af:e3:
         e2:78:d5:05:e5:f2:31:b1:5e:9d:17:95:97:8c:d7:e3:a6:b6:
         72:f7:ab:19:0a:7e:b6:6f:3c:b3:ac:88:1f:7d:30:ca:96:10:
         56:9d:a1:06:9f:be:f0:a3:6c:9f:99:44:76:4c:bb:e1:e7:c1:
         de:36:f5:e2:e7:4e:88:67:0d:e3:45:ae:e2:3f:5f:7a:1a:d0:
         dc:5b:c4:cb:3e:bc:e5:5c:f3:f9:9b:47:2a:21:04:16:1d:40:
         dd:e3:a7:3a:83:90:ae:82:6c:66:9c:c1:0c:d1:ce:e4:fb:c1:
         c8:8c:0b:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 15:54:29 2024 by rpki-client on console-ams.rpki-client.org