Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/IC9E4md-n_0qohHcNVFUQxNqMrQ.roa
File:                     IC9E4md-n_0qohHcNVFUQxNqMrQ.roa (raw, json)
Hash identifier:          ljF0fKPTT0zG6Yf7w2re+fxM9bBvHDwH4aizgHcJ+dg=
Subject key identifier:   20:2F:44:E2:67:7E:9F:FD:2A:A2:11:DC:35:51:54:43:13:6A:32:B4
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0955
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/IC9E4md-n_0qohHcNVFUQxNqMrQ.roa
Signing time:             Sun 30 Jun 2024 01:29:39 +0000
ROA not before:           Sun 30 Jun 2024 01:29:39 +0000
ROA not after:            Tue 24 Jun 2025 10:46:45 +0000
asID:                     9605
IP address blocks:        183.73.0.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2389 (0x955)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun 30 01:29:39 2024 GMT
            Not After : Jun 24 10:46:45 2025 GMT
        Subject: CN=202F44E2677E9FFD2AA211DC35515443136A32B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:34:d7:9f:f7:cf:1c:57:27:82:b2:02:cd:78:
                    e2:03:f1:31:e2:b0:13:f2:f1:ef:3c:a1:34:05:b8:
                    ca:2b:21:8d:04:c5:a9:01:25:9b:c7:0d:f5:db:c9:
                    c8:92:68:0f:65:a5:08:61:06:30:33:30:48:01:47:
                    46:d3:39:4d:d8:0e:de:26:34:73:67:c9:60:84:17:
                    3f:52:fa:76:1a:e1:e6:b8:08:5a:32:40:27:07:f9:
                    8c:4e:b2:6e:c3:9f:8f:a9:97:91:df:e0:ae:dc:9c:
                    3e:8a:3b:a3:e4:ee:72:97:9c:4e:a0:43:50:e7:3d:
                    d0:db:dc:0b:0a:94:7e:3d:5e:06:fd:25:23:5e:b9:
                    47:e8:3f:13:e9:9d:73:62:1a:80:b8:a4:86:6e:1b:
                    19:38:09:71:1a:90:05:cf:6b:87:ee:72:ee:ff:bd:
                    97:51:18:bb:2e:52:f5:c3:fe:9c:e9:f8:17:3e:03:
                    db:15:ea:2c:a2:d4:81:a7:3d:08:c3:d0:46:bc:5b:
                    ef:12:5c:5c:ab:9d:8d:c6:c6:c9:d0:64:f9:64:3a:
                    2d:0f:bb:44:12:14:0a:25:2d:bf:ad:35:30:92:09:
                    47:87:ce:87:78:68:a5:81:a8:03:40:cd:ea:8a:1a:
                    47:72:7c:cf:ac:2a:bb:85:6f:93:2d:66:83:8b:42:
                    39:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:2F:44:E2:67:7E:9F:FD:2A:A2:11:DC:35:51:54:43:13:6A:32:B4
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/IC9E4md-n_0qohHcNVFUQxNqMrQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.73.0.0/21

    Signature Algorithm: sha256WithRSAEncryption
         63:c8:81:2d:2b:12:06:6d:ae:4d:9d:5b:9b:40:32:fa:74:73:
         c0:d8:67:a4:8e:c4:4a:86:9a:2f:38:18:26:2d:b4:d1:33:bd:
         9b:96:9b:7d:9d:aa:c5:5a:ba:3d:f5:9d:8c:31:28:65:75:c4:
         df:14:29:18:40:17:e8:f6:11:8f:14:a7:0d:c8:c3:90:3e:87:
         1f:b4:af:5b:a8:c3:3a:8b:98:65:11:32:da:c7:46:8d:8b:fd:
         69:cb:c8:24:df:c4:fe:34:d2:85:a1:2a:25:18:5d:2d:62:76:
         e6:fe:21:85:e5:85:85:07:a8:46:4b:84:a7:2f:44:84:1e:14:
         55:1e:78:85:76:93:24:b5:dc:0e:0d:48:a3:56:a9:58:ff:69:
         88:1e:00:25:0f:af:be:de:cf:42:94:85:4f:23:fe:b0:2f:6e:
         c9:3c:7e:0e:6e:fe:c1:ed:dc:d6:20:9f:45:fd:c1:c1:c3:ce:
         cb:9a:f4:96:60:8c:e1:64:0c:76:31:18:aa:dd:7b:8f:29:38:
         d5:1b:3f:8e:e4:cf:04:22:e3:59:f1:4b:dc:81:aa:cb:f9:3b:
         e5:57:2e:45:66:cb:27:7f:3c:03:6a:58:3d:0c:33:e8:c2:3a:
         a3:98:ef:55:2d:7e:85:76:57:69:cb:01:4b:f2:dd:3f:75:6c:
         bc:ba:07:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:54:41 2024 by rpki-client on console-ams.rpki-client.org