Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/FkdrB079XS09a1BR51tw9K3jJJ0.roa
File:                     FkdrB079XS09a1BR51tw9K3jJJ0.roa (raw, json)
Hash identifier:          5KQgrhobmnxUe+xFvS/r7Dc30LrePPj6URTPqCemjg4=
Subject key identifier:   16:47:6B:07:4E:FD:5D:2D:3D:6B:50:51:E7:5B:70:F4:AD:E3:24:9D
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       09D6
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/FkdrB079XS09a1BR51tw9K3jJJ0.roa
Signing time:             Sun 30 Jun 2024 01:40:32 +0000
ROA not before:           Sun 30 Jun 2024 01:40:32 +0000
ROA not after:            Tue 24 Jun 2025 10:46:45 +0000
asID:                     9605
IP address blocks:        1.76.176.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2518 (0x9d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun 30 01:40:32 2024 GMT
            Not After : Jun 24 10:46:45 2025 GMT
        Subject: CN=16476B074EFD5D2D3D6B5051E75B70F4ADE3249D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fd:c0:a4:be:bd:00:ed:a3:ba:6e:8a:c6:58:d3:
                    8b:8e:c1:42:46:c9:7f:e3:ba:d1:70:27:01:fd:29:
                    db:0a:96:8e:eb:57:f9:5a:ef:76:13:8b:a8:66:cd:
                    0f:b9:ee:bf:fd:78:88:36:61:87:9a:47:30:b7:90:
                    90:5e:7f:02:6e:4e:c6:a8:3c:5a:ec:46:e9:34:63:
                    61:54:93:e7:aa:40:96:4a:c0:ac:20:f4:e1:c7:cd:
                    60:26:6e:52:c8:c9:0c:6b:11:3c:75:ef:6d:c1:6e:
                    d2:35:03:2b:9b:8c:a5:ac:87:02:4a:52:f0:0c:de:
                    9f:f9:83:cc:22:5c:be:58:e3:03:3d:24:41:82:f9:
                    e6:9c:03:ad:20:06:c6:cc:bd:21:a3:a0:7e:32:9b:
                    98:d4:df:8a:cd:85:8e:4c:5c:71:81:f2:ec:8f:96:
                    cd:0c:94:90:83:64:b9:06:ec:2a:4d:a5:78:ac:08:
                    ca:18:1a:c4:8e:66:ca:33:bb:a7:9a:76:7a:04:6a:
                    71:30:03:45:c7:d7:97:b6:92:b4:10:6b:33:14:d7:
                    35:95:d6:c9:3e:05:5b:e4:6c:c7:90:a7:12:d9:e3:
                    c9:cf:3c:2c:dd:90:74:94:ad:ba:93:4b:ef:e8:6a:
                    a4:73:a5:13:dd:78:b1:7d:35:0f:6f:60:6a:bb:7f:
                    ff:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:47:6B:07:4E:FD:5D:2D:3D:6B:50:51:E7:5B:70:F4:AD:E3:24:9D
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/FkdrB079XS09a1BR51tw9K3jJJ0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.76.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         9c:44:75:fe:2c:38:f5:d9:91:b0:42:a7:2e:33:a1:45:e8:eb:
         0c:f8:9c:fa:e8:3a:f4:25:da:22:6e:4a:86:04:6d:5c:c1:13:
         2b:76:d3:8c:69:f4:7f:16:e6:98:7f:ce:02:e4:f3:ab:bf:1e:
         9b:5e:81:ac:69:72:35:ff:8b:03:c6:8d:b0:ce:af:f2:5a:a2:
         5c:f9:83:ff:a2:2a:f3:bd:94:8f:af:9d:21:06:8a:28:ff:9c:
         27:a2:4f:e8:16:a7:d6:28:a5:2d:7e:51:2b:71:01:bc:46:05:
         f8:69:24:a3:df:e9:78:3c:7c:5f:75:9b:c6:ac:c5:be:08:96:
         38:ec:f3:73:c4:db:aa:88:2c:a9:c2:ed:5a:80:4b:bb:20:1f:
         91:78:08:ce:98:c0:da:60:75:8e:07:c4:e8:7d:71:4f:5d:c6:
         bf:87:30:1c:5d:a2:69:66:2c:49:cb:12:fe:b0:62:81:01:b1:
         6d:ab:ac:8a:12:81:f3:a5:ab:80:50:09:c7:0f:b4:a1:0c:79:
         49:b5:fd:f5:3a:46:fc:bc:b5:39:54:c4:da:10:d7:38:b8:42:
         b1:e6:e8:ae:cb:54:92:5e:e7:2f:4e:35:07:7f:4d:98:46:cc:
         1e:27:eb:a5:85:0f:99:78:91:de:6c:48:4c:18:2b:e3:b4:0b:
         b9:70:e0:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:45:39 2024 by rpki-client on console-ams.rpki-client.org