Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/EMNJxo7VtZjJv4j7qLexVXRT5AI.roa
File:                     EMNJxo7VtZjJv4j7qLexVXRT5AI.roa (raw, json)
Hash identifier:          ypHjbMqZkeyZ1Hce1uke4WLR5PnaiURyfjPGZXwNZro=
Subject key identifier:   10:C3:49:C6:8E:D5:B5:98:C9:BF:88:FB:A8:B7:B1:55:74:53:E4:02
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0738
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/EMNJxo7VtZjJv4j7qLexVXRT5AI.roa
Signing time:             Tue 30 Apr 2024 01:56:02 +0000
ROA not before:           Tue 30 Apr 2024 01:56:02 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        183.73.32.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:41:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1848 (0x738)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr 30 01:56:02 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=10C349C68ED5B598C9BF88FBA8B7B1557453E402
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:7d:43:19:bf:86:dd:71:85:61:dd:be:c9:6f:
                    32:12:33:7c:ef:04:b6:87:68:0b:6d:78:db:ad:d1:
                    5e:0f:e5:1e:5b:8a:d3:57:61:0e:b3:82:e5:47:2f:
                    c7:3e:fe:ef:a6:f3:d8:45:84:dd:55:28:ec:98:ca:
                    24:e6:81:e0:47:53:71:bf:67:aa:03:36:17:89:93:
                    08:ae:ca:8a:15:9c:c6:1c:5c:2c:20:22:dd:7a:4f:
                    65:1b:6e:1d:49:2d:73:4d:da:aa:40:be:98:91:d9:
                    1a:66:1a:72:9e:4a:7a:ae:89:57:76:ac:9b:73:be:
                    34:27:68:49:40:e6:a3:0c:f5:0c:4e:73:7e:28:eb:
                    d4:3f:4a:7e:8d:23:c7:1f:da:4d:41:87:6b:c1:2b:
                    f9:fb:1e:a5:77:15:e5:7f:2c:34:6f:59:16:29:a3:
                    b3:3c:38:8e:62:d8:5d:e7:b2:2d:8d:a8:e2:af:60:
                    1d:ab:22:30:53:95:4d:42:05:99:54:3f:52:70:cd:
                    bf:1f:ab:6a:5c:4a:02:17:86:4c:98:b2:e8:45:d6:
                    f5:f4:44:f8:5e:b4:11:1a:ea:88:40:63:14:4d:50:
                    6e:a1:40:12:92:38:54:84:58:2b:a5:35:df:2e:7e:
                    d2:3b:2f:79:e3:dd:7b:c0:46:bc:54:08:e5:6b:b4:
                    40:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:C3:49:C6:8E:D5:B5:98:C9:BF:88:FB:A8:B7:B1:55:74:53:E4:02
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/EMNJxo7VtZjJv4j7qLexVXRT5AI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.73.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         73:ba:02:53:42:d3:62:69:ac:72:c2:cd:34:84:0f:41:17:48:
         c8:cc:9e:13:42:88:2d:64:25:2e:a5:0b:55:5a:e8:5c:50:2a:
         d5:21:22:57:d7:fd:f4:fe:7e:53:63:a2:ed:b4:16:f8:3e:a0:
         d5:ea:13:39:3a:95:dc:52:22:63:7a:04:6f:ce:01:92:3a:9a:
         5a:a1:82:71:52:b0:96:34:18:58:14:23:e9:7d:c3:f3:ed:58:
         3d:71:f0:d0:8f:81:41:9a:16:0b:28:9d:28:9e:64:8d:bf:d3:
         d0:b4:78:5e:b9:f0:87:3f:44:2a:ec:6d:dc:ca:dd:22:97:fb:
         4e:1d:4a:78:0a:21:2e:bc:57:42:27:90:92:c7:f8:a5:38:59:
         a9:eb:6a:50:8b:c7:26:24:b0:1c:cc:8a:4d:d1:84:62:d0:cc:
         37:2c:ef:ee:60:7b:9d:bf:ed:64:82:87:9c:04:ab:f8:4c:89:
         24:d8:ec:91:86:bd:0e:d9:82:40:b6:ba:33:78:0e:6a:e4:2c:
         18:3b:cf:72:6f:26:de:19:ae:fc:87:78:a7:2d:e5:c8:0f:2a:
         95:73:dd:ff:64:48:b9:a1:ca:2b:f0:4c:23:d1:20:f3:fb:08:
         1d:d1:7a:85:51:cf:d3:94:4a:f2:e0:76:a3:e0:ad:fe:69:e7:
         71:ee:19:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:23:59 2024 by rpki-client on console-fra.rpki-client.org