Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/GhfHVrHa9KoHx77fXoisT8cVhlQ.roa
File:                     GhfHVrHa9KoHx77fXoisT8cVhlQ.roa (raw, json)
Hash identifier:          bX99/AVMecJNlKWx6klEcmQbrE6NHdM28v6zVzx5zFg=
Subject key identifier:   1A:17:C7:56:B1:DA:F4:AA:07:C7:BE:DF:5E:88:AC:4F:C7:15:86:54
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0505
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/GhfHVrHa9KoHx77fXoisT8cVhlQ.roa
Signing time:             Thu 27 Jul 2023 16:52:08 +0000
ROA not before:           Thu 27 Jul 2023 16:52:08 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     9605
IP address blocks:        183.73.96.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1285 (0x505)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jul 27 16:52:08 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=1A17C756B1DAF4AA07C7BEDF5E88AC4FC7158654
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:9a:33:99:a3:f0:18:ad:8c:e7:f3:59:9b:95:
                    a4:5c:cc:1e:25:a4:79:f2:74:4c:c7:ce:01:39:96:
                    36:99:53:26:f0:d0:cf:c4:58:20:8d:3d:d9:cf:9e:
                    ca:1b:7e:dc:5b:cc:d6:ce:72:83:35:02:23:ca:1e:
                    d2:98:a7:2c:1a:06:ae:f4:aa:5f:a8:a1:7f:73:81:
                    0a:4e:21:bd:7c:2f:fa:71:b9:63:cd:2c:44:5d:21:
                    d4:93:d5:dd:0d:b6:43:99:1e:20:3b:bf:96:2c:1f:
                    87:27:f0:53:cd:12:ec:fb:4a:94:b9:fb:b9:23:a9:
                    51:31:4f:bc:ff:cc:3e:60:47:e7:86:61:ee:b2:83:
                    ab:8a:13:63:e4:bc:5c:ca:7f:c2:b8:24:d8:4e:0f:
                    d4:0b:bc:c7:f1:cc:c1:c0:00:5d:41:26:4a:74:a6:
                    68:f2:96:17:cc:6b:d0:68:ee:ff:d3:f0:80:2c:4d:
                    84:b8:7e:2b:33:79:ba:86:8c:ef:da:e8:d7:7f:8c:
                    33:6a:51:1b:bd:b2:c3:56:cc:01:e7:c5:d9:d6:69:
                    7e:7a:5f:23:16:1c:7a:a6:4e:22:90:5c:23:ba:73:
                    e1:37:dd:32:6a:9a:e5:b8:80:26:9a:e5:3f:3c:2f:
                    c2:c6:e9:0f:27:26:d3:36:e3:2b:02:8f:46:b1:be:
                    2a:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:17:C7:56:B1:DA:F4:AA:07:C7:BE:DF:5E:88:AC:4F:C7:15:86:54
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/GhfHVrHa9KoHx77fXoisT8cVhlQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.73.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         59:cf:51:ba:ac:7b:52:6c:e4:c7:c8:72:6e:8f:dd:01:f8:f2:
         8b:ad:1c:7f:a9:ab:da:27:01:5d:33:cd:74:d8:0e:00:c2:62:
         6b:8a:e5:c4:01:0b:e3:6d:8b:89:cc:28:e7:d0:7b:8f:f6:79:
         94:a9:18:f2:7f:57:c0:2e:f6:9f:7b:24:8c:11:9e:17:2d:45:
         d1:34:94:d4:fd:1e:57:7f:b9:a4:24:66:ed:b7:c2:30:d6:4f:
         de:27:71:24:5b:36:00:e3:75:8f:c4:fd:02:0a:86:47:98:48:
         61:32:2b:42:ab:f2:73:36:50:f9:37:04:bd:6a:06:47:7a:36:
         91:f8:24:5b:c9:f5:ea:c5:6f:53:f3:73:b1:dc:53:19:4d:45:
         90:05:27:d8:21:e4:10:30:fa:65:77:d6:54:40:ba:3a:95:0b:
         e1:31:cd:54:5a:af:8c:18:61:0d:0e:3b:eb:82:b8:e0:ea:14:
         f9:c8:73:78:39:7a:61:af:32:15:ef:68:09:c2:94:2f:73:f3:
         f1:c0:29:51:1b:d8:24:17:ee:b8:32:84:42:ee:f1:4d:7a:41:
         73:56:8e:ae:1a:f4:7b:5e:b6:0c:f5:d5:48:7c:59:1a:ad:0c:
         43:f9:d1:70:9f:da:61:a6:27:60:d7:fd:9f:52:90:d5:7a:d3:
         28:9b:12:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 15:54:30 2024 by rpki-client on console-ams.rpki-client.org