Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/ABRVlA3vsODLVdYNd_ruoJopyug.roa
File:                     ABRVlA3vsODLVdYNd_ruoJopyug.roa (raw, json)
Hash identifier:          pPQfrPJiYZae/YsDZhk14IpZ4fFgJO6zsW+k2scdWlk=
Subject key identifier:   00:14:55:94:0D:EF:B0:E0:CB:55:D6:0D:77:FA:EE:A0:9A:29:CA:E8
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0287
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ABRVlA3vsODLVdYNd_ruoJopyug.roa
Signing time:             Tue 30 May 2023 16:36:25 +0000
ROA not before:           Tue 30 May 2023 16:36:25 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        183.75.192.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 May 2024 13:36:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 647 (0x287)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: May 30 16:36:25 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=001455940DEFB0E0CB55D60D77FAEEA09A29CAE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:84:24:85:69:c2:2b:1d:f7:bc:0e:1f:f7:ed:
                    26:bc:a2:88:df:de:18:76:fe:54:42:42:eb:ad:b8:
                    3a:39:4b:aa:0d:cc:e2:95:50:0e:b9:14:8a:4d:2c:
                    80:15:60:6b:86:a9:c7:e2:a2:99:f9:d7:13:cd:a9:
                    fc:f3:47:f4:3a:67:be:57:79:96:53:c6:f2:9b:84:
                    c2:d0:50:21:d1:8a:3d:48:d4:93:45:07:3d:46:e0:
                    25:ea:c6:b7:b4:a3:fd:c4:cc:1b:c2:67:f0:76:cb:
                    a8:d6:32:09:34:95:82:89:4b:4d:ca:07:6a:51:6c:
                    89:cb:65:b4:57:8c:59:65:41:22:91:8e:c6:c3:05:
                    ae:ce:59:79:9e:e5:e8:ce:08:13:cd:1e:7c:18:7d:
                    ca:a4:2e:04:8a:68:b3:6e:da:bb:42:1c:ad:9a:18:
                    98:d2:53:36:39:00:a9:af:fb:05:f1:52:7f:99:b3:
                    ac:c7:8e:36:44:02:6d:c4:d7:16:e9:8a:c2:9d:d3:
                    83:6a:2b:9f:f8:4c:ad:2c:53:7f:d0:ae:47:40:82:
                    78:f4:92:32:1b:82:54:7b:5a:5d:ef:60:b0:b6:49:
                    30:e9:40:7e:05:07:f0:d7:55:ad:ca:10:a6:c1:02:
                    11:9c:14:fa:32:39:fb:40:7b:97:e7:c0:31:37:8e:
                    7f:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:14:55:94:0D:EF:B0:E0:CB:55:D6:0D:77:FA:EE:A0:9A:29:CA:E8
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ABRVlA3vsODLVdYNd_ruoJopyug.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.75.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         e4:fe:58:c9:3d:d5:4a:03:ab:f0:59:aa:01:f8:aa:6b:94:e0:
         c8:08:0d:91:e3:51:61:7d:7d:f0:85:3a:3c:54:ba:25:db:9a:
         3a:09:9a:d4:94:bd:8c:81:0a:d7:2c:7c:1f:5f:97:d1:31:97:
         fe:55:60:fd:0f:18:10:df:22:f7:32:b6:4c:11:0c:ea:ae:ef:
         f1:50:38:eb:3c:3d:d7:af:b6:76:73:cd:38:85:3b:92:87:c4:
         18:59:ed:8b:ea:98:71:28:9d:e1:62:41:67:9f:73:90:e1:b5:
         15:3a:b1:db:f9:be:02:bb:d6:6d:b9:55:c0:9d:8a:de:5f:7d:
         a4:a3:1e:69:2e:5c:10:a7:b3:57:91:6b:4f:a7:58:c6:45:81:
         aa:2d:c2:99:42:10:9b:87:05:07:e4:22:bd:2e:14:ca:55:f6:
         dc:59:1d:f9:0a:af:ca:19:53:fa:69:2e:00:bc:15:1a:3b:d2:
         a4:ac:11:d2:4e:9f:d0:a3:08:c9:5f:ea:7c:19:a1:6c:9d:6c:
         c3:f7:54:14:0d:13:6a:77:1a:03:81:06:dc:55:0c:bb:94:12:
         04:b3:f6:41:48:a0:1d:69:07:8b:16:ac:29:5b:8e:12:06:1a:
         80:24:4e:e9:d2:7c:3b:ea:80:3c:78:e1:9b:51:a1:25:23:24:
         c6:1d:af:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:15:55 2024 by rpki-client on console-ams.rpki-client.org