Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/DtBmK4mrnWfX_h_9cz8qMIHdrME.roa
File:                     DtBmK4mrnWfX_h_9cz8qMIHdrME.roa (raw, json)
Hash identifier:          /XIAcQmyAzBaa4bomcnjlDkQhRpsDYs8nr51FU4yU70=
Subject key identifier:   0E:D0:66:2B:89:AB:9D:67:D7:FE:1F:FD:73:3F:2A:30:81:DD:AC:C1
Certificate issuer:       /CN=F89E0F15C1E20E191AAF17288F6E30FF01869A6E
Certificate serial:       4B
Authority key identifier: F8:9E:0F:15:C1:E2:0E:19:1A:AF:17:28:8F:6E:30:FF:01:86:9A:6E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/DtBmK4mrnWfX_h_9cz8qMIHdrME.roa
Signing time:             Sun 30 Jun 2024 01:42:17 +0000
ROA not before:           Sun 30 Jun 2024 01:42:17 +0000
ROA not after:            Tue 24 Jun 2025 10:46:45 +0000
asID:                     9605
IP address blocks:        148.67.0.0/17 maxlen: 17

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:50:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 75 (0x4b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F89E0F15C1E20E191AAF17288F6E30FF01869A6E
        Validity
            Not Before: Jun 30 01:42:17 2024 GMT
            Not After : Jun 24 10:46:45 2025 GMT
        Subject: CN=0ED0662B89AB9D67D7FE1FFD733F2A3081DDACC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:71:56:99:cf:b3:b6:9a:21:2a:fc:b5:a9:11:
                    64:c4:8c:ec:62:b2:8c:98:36:75:b6:e8:7a:ab:43:
                    5b:d2:89:e5:fa:42:5b:a8:24:fa:cf:8f:f0:e6:6b:
                    f3:59:f5:10:f2:1b:34:64:78:43:02:60:3e:a5:2f:
                    56:43:f9:a7:5e:62:51:3a:09:a8:75:de:18:34:3f:
                    3e:90:53:d0:11:df:c7:23:e8:65:3c:99:bc:fb:65:
                    07:f1:b2:91:ca:12:0e:ba:2e:c0:2e:0b:c6:21:81:
                    21:7f:c4:56:69:a5:c0:75:4f:58:ed:8d:e4:0a:9a:
                    fc:f2:8d:a2:fa:59:77:03:00:4f:be:8a:37:cb:8b:
                    8a:15:8f:c7:67:c2:68:a5:81:e2:e9:8c:db:de:bf:
                    28:53:b4:73:18:51:19:3e:6c:6f:11:e7:5d:41:46:
                    8e:73:1b:02:3f:c6:5a:c5:05:ad:3d:2a:6d:03:9a:
                    ee:ce:ae:d6:22:db:4f:0f:ca:c4:8e:49:80:b6:46:
                    db:81:51:60:01:f2:23:6d:38:a7:17:f4:01:99:db:
                    8d:36:d4:18:ee:6e:77:a8:02:04:5a:5e:6e:b8:65:
                    9d:1b:b0:28:49:66:1b:d0:3b:bd:0f:9a:d8:8b:aa:
                    31:90:f4:e3:51:35:96:55:23:a9:f5:b4:9a:c3:07:
                    6c:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:D0:66:2B:89:AB:9D:67:D7:FE:1F:FD:73:3F:2A:30:81:DD:AC:C1
            X509v3 Authority Key Identifier:
                keyid:F8:9E:0F:15:C1:E2:0E:19:1A:AF:17:28:8F:6E:30:FF:01:86:9A:6E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/DtBmK4mrnWfX_h_9cz8qMIHdrME.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.67.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         18:8a:51:39:a6:89:80:7a:89:98:76:28:3c:7f:62:14:75:c2:
         21:b9:94:14:45:c0:58:76:9d:8c:a0:db:c6:40:11:2e:91:bc:
         c7:93:6a:20:ce:0f:e3:68:3b:64:c0:8f:c6:70:27:45:c0:cd:
         79:5e:72:80:55:83:07:38:e5:0b:83:a9:44:cc:da:93:34:2e:
         c0:33:7d:2e:d7:60:03:3d:eb:0b:96:8c:8c:73:35:6f:be:4d:
         4c:a2:37:e9:cf:58:78:e1:e7:04:d5:bf:8d:f7:88:8b:a0:da:
         22:7e:24:c6:8d:75:ec:82:07:ad:1b:a9:07:63:48:86:d1:96:
         b8:bd:d7:53:54:f9:a1:1c:7b:06:28:29:a2:81:e0:07:fc:f7:
         e9:63:99:58:8f:14:1d:b9:89:c6:7b:9f:7a:f5:ce:41:7a:19:
         85:7b:d4:c6:27:72:77:44:84:a7:33:77:e3:d9:ac:44:8b:22:
         f3:aa:49:85:88:fd:b5:a3:d2:5a:62:a7:9a:dd:dd:ad:9a:e7:
         0a:60:77:97:5f:e7:57:1e:7f:33:66:5e:ee:59:c6:96:36:26:
         8e:d0:5f:48:78:30:2f:4a:88:52:49:df:a7:c8:f1:8e:4c:a0:
         3b:43:e6:f7:27:a4:3d:74:de:84:dd:7c:e7:48:33:2c:51:e5:
         13:e7:06:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:45:39 2024 by rpki-client on console-ams.rpki-client.org