Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/FkueXH25xMNvi4_r9aVWim_gzHY.roa
File:                     FkueXH25xMNvi4_r9aVWim_gzHY.roa (raw, json)
Hash identifier:          isGkm6IfmczAvptaa08lnT9GgjQSOlTJJwr+mjpK1sM=
Subject key identifier:   16:4B:9E:5C:7D:B9:C4:C3:6F:8B:8F:EB:F5:A5:56:8A:6F:E0:CC:76
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0207
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/FkueXH25xMNvi4_r9aVWim_gzHY.roa
Signing time:             Tue 30 May 2023 16:29:28 +0000
ROA not before:           Tue 30 May 2023 16:29:28 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        183.75.232.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 May 2024 13:36:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 519 (0x207)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: May 30 16:29:28 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=164B9E5C7DB9C4C36F8B8FEBF5A5568A6FE0CC76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:28:88:e8:41:2e:e5:fd:06:32:20:54:27:99:
                    e6:ce:59:93:56:36:56:d8:30:b2:99:e0:a2:fc:9d:
                    2c:42:1e:40:86:6f:69:47:61:d8:2e:88:42:74:c2:
                    8d:b7:2f:f6:99:32:69:cc:20:b9:0b:cd:58:7e:00:
                    4f:ee:d3:a1:44:00:14:c6:89:dd:9e:0b:08:e4:66:
                    53:02:95:c5:40:7e:83:7e:6e:71:05:67:64:8c:d7:
                    43:54:2a:5c:84:5b:66:b4:fd:f8:15:7b:83:21:c2:
                    4b:2f:e6:62:44:48:55:90:aa:af:2c:be:6f:23:70:
                    b9:12:66:d4:41:5c:76:7c:df:fd:02:06:0b:c9:3c:
                    f5:2c:cc:ce:62:ec:76:56:d3:76:f2:39:5a:b1:c3:
                    87:71:43:49:a7:8a:e9:80:93:f7:b7:49:b0:d7:d5:
                    9a:87:1e:49:36:85:41:8d:f5:01:cd:7a:85:b9:77:
                    8d:c8:15:ca:36:1c:af:b5:b7:68:b2:39:b5:dc:ef:
                    67:e1:a1:bd:77:46:aa:31:48:a5:8f:db:8d:22:b9:
                    e2:bc:44:71:60:5f:d7:ae:30:ba:9e:3f:84:90:7c:
                    bf:b2:f4:27:46:de:75:0d:f1:8d:2a:82:42:0b:e9:
                    e0:14:ba:7e:ce:05:54:d6:af:81:c3:bc:04:ba:03:
                    8d:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:4B:9E:5C:7D:B9:C4:C3:6F:8B:8F:EB:F5:A5:56:8A:6F:E0:CC:76
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/FkueXH25xMNvi4_r9aVWim_gzHY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.75.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         dc:04:a7:93:2a:20:a3:f2:59:5a:de:73:12:e8:73:4d:49:a1:
         29:8b:0b:d1:f2:af:7c:42:45:08:66:e5:7a:f5:d9:fe:b7:f2:
         82:d9:88:32:28:21:29:c8:0c:18:49:f6:9a:75:b0:76:7f:4c:
         0e:71:1b:af:56:ec:85:85:31:5d:9c:c5:71:50:30:e8:c7:e3:
         b9:93:96:b3:47:5e:41:eb:bc:f9:af:6f:53:5a:7f:0b:64:ce:
         f6:1f:42:8e:11:56:0b:b0:c8:8a:8d:c1:37:78:2c:8f:cc:f6:
         8f:0b:ad:54:8e:8e:bc:08:bf:2e:3f:a8:b1:36:c5:58:4c:09:
         4f:e2:88:a0:f0:24:3a:71:e6:d1:d8:07:ae:b2:5e:4c:05:37:
         20:2a:45:4d:8d:2a:9b:b1:24:24:9a:e9:0d:44:e7:6b:c0:c6:
         51:92:42:12:7c:5f:64:a5:c1:02:27:f6:f4:cc:f3:7a:30:76:
         a9:7e:6a:1c:aa:8c:48:43:0b:44:2e:a6:10:f4:20:66:c4:fe:
         ce:c6:0b:f8:d9:68:47:ab:0c:c4:37:94:ab:b2:f3:5e:50:9c:
         78:81:38:6b:1e:6c:f7:f2:9b:8e:32:54:e4:4d:db:2b:91:0a:
         17:97:7b:2d:86:f6:0d:bd:41:1a:d5:b8:25:d6:74:a6:e6:fb:
         47:e0:53:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:15:56 2024 by rpki-client on console-ams.rpki-client.org