Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/J1tiKH2quuBQQVbMEukUcaW1utk.roa
File:                     J1tiKH2quuBQQVbMEukUcaW1utk.roa (raw, json)
Hash identifier:          05DC5T0OkPwIOm7f4zle///aKK3x832tkoig0eu0eec=
Subject key identifier:   27:5B:62:28:7D:AA:BA:E0:50:41:56:CC:12:E9:14:71:A5:B5:BA:D9
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       06A2
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/J1tiKH2quuBQQVbMEukUcaW1utk.roa
Signing time:             Tue 30 Apr 2024 01:43:15 +0000
ROA not before:           Tue 30 Apr 2024 01:43:15 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        1.79.16.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1698 (0x6a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr 30 01:43:15 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=275B62287DAABAE0504156CC12E91471A5B5BAD9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:65:97:4c:d0:6c:aa:10:dd:70:c0:22:09:5b:
                    b1:a1:11:77:a2:ae:5c:dc:44:76:c1:75:3f:89:4b:
                    08:e6:f7:31:22:d2:ad:af:df:a9:af:44:30:b3:f8:
                    4e:2a:3e:57:ae:3c:55:16:33:a8:d9:67:42:d7:c3:
                    7e:45:a0:20:31:0e:ca:26:4c:3e:82:8d:dd:97:68:
                    7a:dc:d9:cb:60:6f:0d:34:25:09:95:c4:7c:3b:1b:
                    f9:b4:f4:0a:b9:6d:8a:c0:cd:66:6d:c2:10:37:8b:
                    9e:36:96:8e:d2:c2:71:20:e9:48:ff:9c:b7:5a:6f:
                    84:a4:4a:0d:59:05:3b:50:b5:5d:87:d5:11:20:ae:
                    d4:cb:b3:61:4e:5d:33:c5:40:19:df:06:54:8f:f0:
                    8d:2d:72:3d:1d:c2:23:26:09:b9:32:78:70:8d:9f:
                    08:09:f0:9c:5d:c9:b6:f2:b7:a9:1e:45:4c:02:81:
                    39:db:b0:f2:a5:92:04:a7:33:18:4a:1c:0c:c4:a8:
                    dd:47:23:fd:71:24:dd:eb:1e:fe:2c:dc:0a:23:67:
                    8d:55:c9:59:b9:e8:2e:c5:2c:f0:21:2d:dd:8e:32:
                    c8:a7:67:db:05:5a:aa:fb:8c:9f:4c:de:92:4b:74:
                    2a:2f:c9:9c:d8:6d:4a:fd:69:8a:a3:c0:e3:f6:49:
                    fc:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:5B:62:28:7D:AA:BA:E0:50:41:56:CC:12:E9:14:71:A5:B5:BA:D9
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/J1tiKH2quuBQQVbMEukUcaW1utk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.79.16.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4b:61:41:f0:da:7a:37:bc:35:be:b4:1a:1c:f0:17:14:d5:9e:
         ec:69:0a:a3:22:90:05:a3:6d:cf:5c:50:08:21:d2:93:82:5f:
         6b:10:56:ca:9e:2b:2c:1d:56:dc:78:fe:c9:d0:af:27:9a:6b:
         c5:48:7d:13:f9:ad:77:1e:10:bb:e7:75:53:1d:f7:ce:7f:dc:
         57:00:55:5a:2b:5f:86:7c:c1:b4:ec:2e:7c:74:34:10:6b:9c:
         94:3e:46:bd:4d:24:cb:e0:4b:0f:f7:82:d9:c1:ec:cc:ec:28:
         79:b1:57:0e:39:fa:10:d6:ff:3e:c8:be:57:5c:d8:c7:4c:ac:
         ff:28:7f:9f:be:9a:63:f2:13:58:4a:9d:a1:2b:d7:d6:45:13:
         3b:fd:2d:da:ea:0f:e4:f1:34:90:2e:a0:01:a9:9e:f4:04:19:
         63:01:34:7d:d2:a4:a2:ec:7f:f0:54:7e:7c:86:02:6e:f2:e1:
         82:69:b1:20:93:38:8f:bd:7a:74:0e:e8:fe:e0:9f:7a:9c:39:
         ed:e5:5f:24:ad:d9:b8:64:6d:bb:31:9f:7b:8f:6d:37:16:c2:
         0c:80:1e:a1:6f:41:a6:5d:67:ac:41:41:fb:34:74:2e:83:79:
         54:e0:1f:a1:6c:47:ba:fe:c2:62:d1:d7:d6:4d:48:53:af:ee:
         e8:f8:62:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 15:54:30 2024 by rpki-client on console-ams.rpki-client.org