Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/AzWfeUtvjrZtPz8nnr02loPbKpI.roa
File:                     AzWfeUtvjrZtPz8nnr02loPbKpI.roa (raw, json)
Hash identifier:          oJIb0m8wHi40BAxUiVHQM96gjOHs94AMwEF/JIWgcH8=
Subject key identifier:   03:35:9F:79:4B:6F:8E:B6:6D:3F:3F:27:9E:BD:36:96:83:DB:2A:92
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0752
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/AzWfeUtvjrZtPz8nnr02loPbKpI.roa
Signing time:             Tue 30 Apr 2024 01:58:56 +0000
ROA not before:           Tue 30 Apr 2024 01:58:56 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        1.79.36.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1874 (0x752)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr 30 01:58:56 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=03359F794B6F8EB66D3F3F279EBD369683DB2A92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:02:ab:db:ae:83:d6:9d:c6:58:12:83:60:59:
                    c5:bc:0a:2a:ae:89:37:81:8e:22:d0:ca:89:95:18:
                    b4:ff:bc:d8:ca:4e:69:bb:27:ff:2d:62:f1:66:fc:
                    01:a0:96:a8:6a:ae:23:5c:94:fd:5f:f8:82:15:c1:
                    e2:ec:c9:3c:78:16:c2:42:60:9b:b1:33:9c:b3:a4:
                    63:77:91:02:cf:54:d7:73:1a:a2:56:d5:18:63:68:
                    56:b5:4b:5a:3a:db:ac:12:e1:93:51:ea:e6:a4:37:
                    d2:a6:e3:cf:67:45:84:89:e1:ab:34:5a:0d:5d:08:
                    9c:35:6f:13:14:62:4f:d6:b2:9b:b7:31:79:e6:95:
                    4a:bc:cb:e1:5c:76:a8:34:a9:56:eb:91:48:0d:c0:
                    d1:ac:5c:a8:05:9e:03:6d:f0:92:88:cd:70:dc:37:
                    54:32:b1:e7:76:87:3f:20:8d:e4:d2:27:c9:eb:a9:
                    f5:fc:5c:44:27:9d:bb:b5:cc:dc:4f:89:89:e0:79:
                    ef:85:94:d2:10:d6:22:e5:b0:8f:c1:59:c5:70:34:
                    80:a0:0b:f2:6e:89:be:06:94:ea:8b:57:88:c6:d7:
                    c7:b3:d1:9e:4a:5b:73:5d:e8:90:51:48:f0:ed:67:
                    e0:38:57:16:c8:d2:3e:87:31:8c:b5:32:f4:6a:9d:
                    93:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:35:9F:79:4B:6F:8E:B6:6D:3F:3F:27:9E:BD:36:96:83:DB:2A:92
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/AzWfeUtvjrZtPz8nnr02loPbKpI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.79.36.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1c:dc:6f:88:46:ef:da:5b:54:ce:34:12:3b:9f:a7:63:ff:29:
         2f:76:8d:be:a6:91:25:e8:2f:03:92:ae:a3:84:c3:90:fe:4f:
         1d:ef:0f:cb:16:e9:68:26:0d:2b:f2:64:9f:52:1d:b7:23:03:
         27:a2:c7:38:dc:03:54:ab:30:df:71:64:a7:65:26:ff:77:6d:
         1a:2e:96:1e:be:2e:95:37:91:6a:0f:86:ab:c3:3a:74:d4:ea:
         cb:14:ad:2a:14:b3:5a:22:8b:b1:0a:e0:69:bb:8d:f0:53:cc:
         40:e3:83:ab:72:f9:f9:26:e6:ab:3d:79:e7:54:7d:46:e1:ad:
         d6:9d:3e:1c:1e:d4:f8:cb:ae:67:df:6c:95:0e:73:af:07:2a:
         15:b2:f0:93:21:12:67:c9:6c:0d:62:a0:db:89:b6:00:c4:6e:
         5d:34:d8:b0:2e:a6:b0:9a:5a:3c:55:7b:b4:96:ea:e8:bf:88:
         bf:7a:94:e8:3d:dd:e4:b1:0f:2c:83:71:d5:59:af:55:ed:ed:
         4a:e6:3d:ba:09:bc:59:cb:70:6e:c2:28:b1:ef:25:60:f9:89:
         60:d6:40:08:99:bc:20:34:12:41:82:bd:25:37:e7:7d:32:18:
         73:df:22:ab:cb:5b:50:d1:aa:7b:c1:4d:c2:f6:98:e1:eb:1e:
         d9:f2:4e:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:45:39 2024 by rpki-client on console-ams.rpki-client.org