Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/FzsWudi7eKQw2aT88WjauY7cRXE.roa
File:                     FzsWudi7eKQw2aT88WjauY7cRXE.roa (raw, json)
Hash identifier:          9KauiuhdUoxFXM9kL3wGlkxm5u1iNCYZq5TCodEgttM=
Subject key identifier:   17:3B:16:B9:D8:BB:78:A4:30:D9:A4:FC:F1:68:DA:B9:8E:DC:45:71
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0179
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/FzsWudi7eKQw2aT88WjauY7cRXE.roa
Signing time:             Wed 24 May 2023 16:33:22 +0000
ROA not before:           Wed 24 May 2023 16:33:22 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        183.74.4.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 May 2024 13:36:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 377 (0x179)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: May 24 16:33:22 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=173B16B9D8BB78A430D9A4FCF168DAB98EDC4571
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:8a:4f:97:f3:52:e1:26:91:87:ae:d1:26:6f:
                    5a:05:32:82:6e:64:78:a0:13:23:67:0c:bc:47:31:
                    a7:95:ec:42:68:33:1c:b4:bd:5f:6d:8c:09:70:86:
                    ec:cc:cd:55:c2:5a:3f:f0:f7:66:27:b8:09:fe:fe:
                    9c:53:81:64:a7:c6:d9:12:5b:9b:83:b6:ab:0e:4d:
                    22:c7:fa:04:9b:74:6c:24:04:70:35:8f:7e:4f:6e:
                    04:3f:4f:5d:ea:d3:61:d5:75:ec:0a:a6:92:0e:35:
                    c4:4b:d9:0f:93:a0:cf:41:67:e2:63:75:c7:df:40:
                    ae:55:cd:76:da:c7:4b:3b:1c:66:9a:ac:d1:e8:93:
                    92:63:ed:8c:9b:83:20:7e:21:55:c2:c5:fb:9a:c1:
                    88:0d:bb:1c:d2:de:4b:8e:5c:96:b2:20:89:cb:3e:
                    d3:96:60:72:8d:3b:09:d2:6d:62:18:35:78:86:c1:
                    7c:77:50:98:54:bd:a2:cf:16:9d:30:1e:a3:24:9f:
                    94:f0:9e:06:9c:71:12:12:96:3c:d7:14:2c:25:0c:
                    b1:28:f4:a2:00:18:1b:96:b7:fa:67:b0:9d:b1:f9:
                    66:3b:dd:2c:05:3a:c2:ce:bd:0f:8d:9d:41:f8:da:
                    79:25:c9:cc:60:02:6b:c5:66:5b:a2:09:e5:a2:40:
                    04:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:3B:16:B9:D8:BB:78:A4:30:D9:A4:FC:F1:68:DA:B9:8E:DC:45:71
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/FzsWudi7eKQw2aT88WjauY7cRXE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.74.4.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c2:0c:48:a7:81:84:ba:2e:22:4b:43:a8:29:79:0a:4a:39:96:
         08:fe:4f:2e:8a:3e:4a:11:f5:59:9b:78:28:19:2b:a7:94:a9:
         91:49:ba:5b:85:81:c0:b0:98:69:57:3d:f3:92:da:5d:3d:d2:
         43:05:c3:a0:8c:c0:f3:7f:69:70:59:cc:9c:82:78:8e:e5:24:
         b1:6d:28:64:15:c7:bd:bc:c9:39:3b:45:c5:bf:cc:91:30:13:
         79:63:0b:1a:3d:45:94:91:43:51:5d:5a:b5:56:d9:de:62:1d:
         a0:ab:78:a6:47:e4:ec:20:99:75:15:f0:f2:bc:6b:20:4e:31:
         8b:9c:17:02:37:09:e9:0a:09:f5:8c:dd:ad:68:ae:c3:1c:f8:
         e3:20:7f:5d:74:90:36:2a:46:10:54:0f:cb:bc:24:58:81:1b:
         06:d2:6c:e8:99:47:25:32:93:69:62:d2:53:86:3e:d0:fc:76:
         c5:15:2f:bd:6c:8e:97:b6:2d:41:92:99:c0:c0:1f:53:55:64:
         01:c5:8d:8b:e9:5b:1c:c2:cd:87:50:9c:e7:b9:f5:24:a6:cc:
         15:cc:e2:88:eb:bf:a4:f7:83:3a:6a:1d:dd:6c:bc:dc:9d:8d:
         23:3a:c1:b1:26:05:20:2a:e7:a0:b1:4c:b3:8c:66:3d:a5:a5:
         56:8d:fe:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:15:56 2024 by rpki-client on console-ams.rpki-client.org