Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/EgVn45fVhWIVGg180ZuSmdGttUA.roa
File:                     EgVn45fVhWIVGg180ZuSmdGttUA.roa (raw, json)
Hash identifier:          TRnI8GmxiILzMvrKUjKbtdYbhIEYfqbRzM9cw27L7as=
Subject key identifier:   12:05:67:E3:97:D5:85:62:15:1A:0D:7C:D1:9B:92:99:D1:AD:B5:40
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       06FD
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/EgVn45fVhWIVGg180ZuSmdGttUA.roa
Signing time:             Tue 30 Apr 2024 01:52:49 +0000
ROA not before:           Tue 30 Apr 2024 01:52:49 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        183.74.192.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1789 (0x6fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr 30 01:52:49 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=120567E397D58562151A0D7CD19B9299D1ADB540
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:2e:64:00:b4:a6:9e:b2:95:6d:c0:c7:c8:dd:
                    88:32:17:21:63:4d:38:43:19:2c:78:1c:06:69:94:
                    bd:c8:bc:34:2f:35:c2:a9:ca:4e:c9:90:4e:70:ef:
                    f7:10:0f:a1:b2:cb:19:89:16:23:19:b3:1e:e8:12:
                    53:69:f4:bf:ca:79:a1:6c:a9:77:d3:cb:8f:58:25:
                    c0:17:72:2f:21:42:ca:5d:73:46:93:05:68:ff:a5:
                    71:74:67:c8:2b:0a:a5:2a:a7:1e:0a:da:24:e7:47:
                    8b:00:fa:95:a1:f5:52:37:79:85:c5:27:ab:5c:6b:
                    8a:7b:1d:3d:1b:be:bf:90:aa:6f:d6:27:f5:0d:a7:
                    aa:b6:ad:38:4a:fc:6a:c1:08:3c:b9:4b:02:66:d1:
                    c8:b7:b7:00:7e:5c:7b:da:b2:23:d7:70:1c:e3:5e:
                    f7:15:fe:82:1a:cb:aa:36:71:5c:06:7d:a4:2b:fa:
                    04:a5:0e:53:b8:c7:ed:a3:ae:7c:aa:e5:12:95:19:
                    5f:04:40:f8:de:67:54:ea:ef:e9:f7:cc:66:3b:54:
                    4a:33:87:ed:8b:05:05:aa:a6:9c:72:60:bd:ca:1b:
                    35:1d:af:e5:d8:4a:a6:d6:cb:6f:11:bc:ed:b5:31:
                    74:0f:2b:ee:fc:af:4b:31:3d:5e:f3:ee:4d:78:ed:
                    79:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:05:67:E3:97:D5:85:62:15:1A:0D:7C:D1:9B:92:99:D1:AD:B5:40
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/EgVn45fVhWIVGg180ZuSmdGttUA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.74.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b9:9c:42:63:4b:d0:2a:ab:90:9a:00:76:a0:08:4d:61:77:5e:
         a2:74:6f:5a:e3:d8:03:0b:30:8f:1c:65:fc:bf:3c:f0:3b:de:
         15:14:90:d8:2d:80:99:dc:4e:23:f5:38:31:ef:70:26:4c:65:
         ed:ff:b0:91:f6:d1:c2:e0:3c:07:46:a2:07:10:e3:b8:52:ab:
         9c:81:d4:ac:60:78:14:98:fd:93:26:b2:4a:2a:c5:a5:a8:1a:
         6b:ba:b2:0f:ec:37:40:7d:5d:d2:4a:47:69:51:8e:4c:70:b6:
         49:9a:43:f2:c1:5c:86:0b:c0:30:2c:ad:d8:1c:37:a4:43:e4:
         7f:94:1b:87:6b:22:ce:a8:e3:2a:cc:89:4e:9d:a5:87:cd:c3:
         25:b8:52:77:21:2f:05:30:11:bd:6b:de:cf:45:5a:89:a9:59:
         0b:be:a3:bf:54:25:39:1e:84:b5:e0:69:0d:ea:fb:8d:d5:cc:
         d5:10:32:c7:46:6e:62:b0:f0:d3:b0:e1:94:b5:89:51:df:1a:
         c3:b0:d1:76:b9:2f:7c:0f:1e:3a:70:64:da:6b:9d:bf:04:bb:
         0b:a9:d7:b0:d7:a4:3b:f3:96:d7:d1:db:28:c4:c3:21:b8:73:
         33:c7:b5:80:38:9f:b4:f7:c3:8b:f7:f5:ca:e2:75:88:1a:7b:
         8f:a2:18:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:38:46 2024 by rpki-client on console-fra.rpki-client.org