Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/EngMYBQxqeyT75oZF64MoNnYBYo.roa
File:                     EngMYBQxqeyT75oZF64MoNnYBYo.roa (raw, json)
Hash identifier:          Syg6R/+r+Ly9E5ne7y/8U7PLq1pRowkq2ys/6Jhlrxk=
Subject key identifier:   12:78:0C:60:14:31:A9:EC:93:EF:9A:19:17:AE:0C:A0:D9:D8:05:8A
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       045C
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/EngMYBQxqeyT75oZF64MoNnYBYo.roa
Signing time:             Thu 27 Jul 2023 16:43:18 +0000
ROA not before:           Thu 27 Jul 2023 16:43:18 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     9605
IP address blocks:        211.14.82.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1116 (0x45c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jul 27 16:43:18 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=12780C601431A9EC93EF9A1917AE0CA0D9D8058A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f4:55:78:ac:5f:12:c4:23:58:55:9f:8d:73:
                    d0:1a:be:d4:65:21:78:ce:2b:2a:68:9f:ec:d5:4b:
                    8d:6a:3e:9a:76:83:b5:bf:55:66:77:58:e5:60:03:
                    da:a3:24:55:84:dd:80:54:0e:79:51:72:fd:7a:b1:
                    10:32:e8:59:77:31:4f:e8:b8:03:97:a8:70:42:e2:
                    9e:f0:28:dc:46:da:c4:0b:84:3e:49:a6:62:e5:f4:
                    5b:0a:31:88:c7:ce:47:d0:c7:9d:33:9d:07:04:20:
                    3a:cb:41:fe:c5:70:03:8e:ea:40:dd:f6:24:42:a0:
                    24:70:67:4e:37:35:48:db:b9:6e:07:94:c9:1c:eb:
                    d9:21:95:b8:c9:14:b3:c3:9c:f0:d5:3a:a5:f5:d3:
                    22:38:72:18:be:04:7f:91:43:39:59:0a:b2:66:99:
                    d7:4f:3b:01:da:d5:e3:b5:21:31:de:5e:56:ff:48:
                    ee:f3:3b:72:f8:81:0b:6a:2e:de:b3:1f:4c:6c:f2:
                    43:da:0f:89:39:1c:34:70:4c:47:b4:cc:b8:88:5d:
                    9a:f8:f0:2b:f2:74:4c:2f:6a:87:a5:07:d9:1d:91:
                    66:b4:31:9d:ee:1d:13:a9:5f:4b:c9:69:15:d2:70:
                    15:01:11:45:1d:93:c8:67:77:0e:f1:58:10:3b:1e:
                    cc:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:78:0C:60:14:31:A9:EC:93:EF:9A:19:17:AE:0C:A0:D9:D8:05:8A
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/EngMYBQxqeyT75oZF64MoNnYBYo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.14.82.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c2:ee:3a:70:9d:c4:13:36:a4:ca:ac:db:e7:1e:05:97:fb:43:
         75:81:e3:4c:d3:cb:01:de:50:00:45:55:8c:40:bc:b7:bf:4e:
         29:4d:8d:06:8a:01:8e:4b:36:9f:8e:1b:3b:c8:a5:84:7e:df:
         75:95:24:f2:15:51:7b:fe:f2:a6:87:2d:86:42:83:f4:5f:40:
         61:e5:97:2b:66:cc:8c:26:ea:66:04:a9:28:1d:cc:0a:d1:f9:
         4b:af:ba:dc:98:0b:8d:ca:7a:ac:ba:79:be:2f:71:db:9f:05:
         44:74:17:3b:12:97:39:4e:aa:3c:dd:80:7b:0f:04:af:24:10:
         8f:b1:fe:2d:93:dc:8b:ef:cc:e6:eb:c1:b2:4d:01:5f:67:51:
         1d:cc:b3:26:38:b9:7f:07:3b:5f:79:3b:cb:d9:37:1f:ad:d2:
         1a:f2:a5:7a:4e:04:7a:d4:59:34:bf:34:34:33:40:69:d9:68:
         79:b9:d4:4b:7e:22:58:aa:d1:94:08:48:34:1a:fa:93:2f:fe:
         2f:88:90:2e:50:11:49:8d:a6:27:a1:81:91:29:f7:a6:8a:94:
         dd:b4:05:61:05:04:12:30:69:90:d9:02:bb:47:cc:b8:a5:7e:
         af:39:bd:d3:e4:04:9d:24:a6:c0:ea:3a:52:ce:88:f8:80:0c:
         c6:13:44:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:38:46 2024 by rpki-client on console-fra.rpki-client.org