Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/JX_pqgSXrAeOQady0NPBtK9a5jI.roa
File:                     JX_pqgSXrAeOQady0NPBtK9a5jI.roa (raw, json)
Hash identifier:          AG5iJyjq2CIxX0CAthqWhFFAvrPgeC8tGs0X3JcSw5A=
Subject key identifier:   25:7F:E9:AA:04:97:AC:07:8E:41:A7:72:D0:D3:C1:B4:AF:5A:E6:32
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       07C1
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/JX_pqgSXrAeOQady0NPBtK9a5jI.roa
Signing time:             Tue 30 Apr 2024 02:08:45 +0000
ROA not before:           Tue 30 Apr 2024 02:08:45 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        183.75.197.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 23 Jun 2024 14:09:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1985 (0x7c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr 30 02:08:45 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=257FE9AA0497AC078E41A772D0D3C1B4AF5AE632
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:39:d6:1b:86:4d:b4:ff:e8:76:a4:33:e5:c8:
                    ef:a1:df:d3:06:8a:4e:f5:44:c5:f8:66:aa:4c:ed:
                    47:71:3d:cd:01:0c:cd:3c:fc:78:99:51:96:29:10:
                    80:65:c6:a6:c0:11:40:53:dc:bb:50:dc:57:df:f1:
                    27:f4:80:31:3b:38:db:87:35:3d:7f:5a:e7:12:75:
                    69:3b:e1:e5:5e:73:ed:58:90:31:59:d4:1e:4a:87:
                    e5:6c:76:60:78:65:d5:1c:ff:4e:f7:37:19:18:e6:
                    45:b7:4e:be:ab:21:ce:83:50:19:70:25:77:0b:f5:
                    f0:18:89:79:4f:aa:02:65:4b:0b:8a:00:17:84:d5:
                    4d:0a:ad:b8:22:95:5a:fc:1c:da:63:e2:0f:81:e5:
                    0f:ca:fd:ed:5c:75:bd:47:cc:b4:b6:51:f4:00:c8:
                    2c:bf:bc:cf:da:15:97:74:db:aa:a9:2b:33:68:11:
                    77:9a:f1:b8:f9:4e:dc:dc:87:f7:07:22:f6:0f:90:
                    3e:40:32:20:ed:45:f0:30:32:c5:c2:57:45:01:2d:
                    36:0a:2e:3e:63:be:8d:ce:e3:e1:1e:d9:1b:32:77:
                    60:36:55:2f:ad:e9:d5:a8:39:e3:5e:ed:56:0e:c5:
                    63:85:1a:00:df:a2:dd:14:2d:bb:52:75:67:c6:97:
                    2d:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:7F:E9:AA:04:97:AC:07:8E:41:A7:72:D0:D3:C1:B4:AF:5A:E6:32
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/JX_pqgSXrAeOQady0NPBtK9a5jI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.75.197.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d7:ac:e4:6a:8a:f7:dd:1e:22:5b:78:8f:ea:2a:2b:10:e2:0d:
         10:39:0f:00:a7:a3:c2:ff:0d:e1:c2:1b:8a:9b:2e:2b:77:3e:
         50:b4:50:7e:86:e0:06:c3:77:13:a3:03:18:46:3a:7e:e5:36:
         2b:ec:8d:30:3e:c0:e2:1d:41:e1:10:74:ca:9d:79:72:b7:72:
         03:f1:30:d4:43:da:fe:df:a4:4a:26:00:48:99:de:83:36:03:
         5c:79:f1:e4:de:2b:95:73:f3:61:48:a2:1d:89:d7:b9:22:e9:
         b9:51:35:79:8a:7c:f1:4e:f7:86:af:12:05:0d:88:d6:45:3e:
         e2:c4:85:f8:ba:6e:fa:ac:ed:7f:7d:cc:0c:e2:a9:67:a6:55:
         91:06:6b:0e:3e:e8:33:e8:b6:58:b6:79:07:02:14:8c:15:ac:
         fc:0f:96:7b:d0:78:3d:d8:40:a2:8d:53:f8:25:6a:90:db:fd:
         3e:57:eb:14:93:85:e3:76:bc:2e:17:f7:35:65:16:58:e7:8b:
         20:19:54:0c:02:32:24:0f:43:ea:77:cd:05:f8:df:3f:5e:bb:
         35:89:9a:70:43:f6:22:bb:26:2f:3d:49:5d:03:a5:64:cc:56:
         7a:e0:0e:0a:a7:a1:e0:bd:ad:0b:88:88:bc:c2:95:d0:d3:cf:
         81:5f:15:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 09:40:09 2024 by rpki-client on console-fra.rpki-client.org