Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/JpdAUInIMiXU0xwrEjTlHIbe60Q.roa
File:                     JpdAUInIMiXU0xwrEjTlHIbe60Q.roa (raw, json)
Hash identifier:          jPWFGVa1hL1irqWqe2ldAsPUPbf8cbGnDrC98gi+Wus=
Subject key identifier:   26:97:40:50:89:C8:32:25:D4:D3:1C:2B:12:34:E5:1C:86:DE:EB:44
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0A6B
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/JpdAUInIMiXU0xwrEjTlHIbe60Q.roa
Signing time:             Sun 30 Jun 2024 01:50:27 +0000
ROA not before:           Sun 30 Jun 2024 01:50:27 +0000
ROA not after:            Tue 24 Jun 2025 10:46:45 +0000
asID:                     9605
IP address blocks:        183.73.16.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2667 (0xa6b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun 30 01:50:27 2024 GMT
            Not After : Jun 24 10:46:45 2025 GMT
        Subject: CN=2697405089C83225D4D31C2B1234E51C86DEEB44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:04:f0:58:4c:17:9e:f9:9d:ff:e5:6e:22:ea:
                    db:1c:be:40:1f:f1:5d:6b:9e:ec:95:d1:bb:af:30:
                    68:04:55:3d:67:0a:c0:bd:47:ec:d1:16:ed:77:ee:
                    87:aa:37:ca:0d:5f:9d:0e:da:03:3c:8c:41:59:25:
                    ae:52:c7:88:69:48:1c:37:92:52:88:e5:b7:08:82:
                    36:31:04:8c:93:12:6c:45:c4:b8:6a:7b:dd:b0:55:
                    5f:85:cd:16:81:57:44:08:fe:17:9d:33:29:1f:dc:
                    f2:53:81:c8:f4:27:90:93:7b:cd:59:53:46:eb:61:
                    86:22:d9:8f:2c:a0:fa:36:4e:3a:23:aa:0b:0a:98:
                    4e:5f:5b:5b:ab:8e:a0:b6:ad:4a:88:fe:ec:0c:f4:
                    93:54:55:58:1c:e6:68:62:20:cb:65:96:f0:8f:7d:
                    2a:1a:22:75:ed:e3:ac:36:11:84:9a:4c:ab:a9:d6:
                    4a:74:00:8f:83:1d:6c:fc:34:99:13:e6:b3:b7:d9:
                    d1:f6:2d:31:ac:e1:43:7d:76:b7:23:ba:0b:9e:56:
                    68:b7:c2:4e:94:e4:23:4c:1c:48:60:ac:2d:05:97:
                    b6:93:c0:5a:bd:dc:4c:43:18:12:07:cb:6b:5b:00:
                    68:0e:34:d0:72:a5:68:9b:1d:af:23:da:9b:89:a3:
                    f5:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:97:40:50:89:C8:32:25:D4:D3:1C:2B:12:34:E5:1C:86:DE:EB:44
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/JpdAUInIMiXU0xwrEjTlHIbe60Q.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.73.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         83:25:d8:97:39:c7:35:60:9f:24:22:ed:9a:0c:d3:ad:2f:a9:
         5d:9e:cc:d0:36:46:1b:ab:d0:98:13:5c:2a:14:d0:ac:9a:98:
         23:65:0f:4e:5b:04:f1:63:18:19:8b:11:b0:2b:84:be:a1:eb:
         8d:bb:46:8d:f0:f2:4d:0e:de:38:c7:50:8d:05:a3:d5:9d:db:
         90:1c:fd:0d:a1:92:4f:2e:7f:ef:e9:6b:8e:d4:42:31:76:1a:
         5f:af:6a:73:cb:53:57:a2:a1:e8:a3:b2:e6:6c:46:f6:01:a4:
         f5:b3:8b:94:b3:42:92:7f:02:fa:87:27:4c:28:12:79:81:d3:
         a8:a5:1f:08:fb:d1:4e:50:99:cf:bc:fd:e7:13:0e:c8:e9:62:
         af:ce:c3:e6:ab:8d:bc:97:37:76:9c:ef:fc:9b:f1:42:ec:06:
         b5:70:ef:4b:cc:4f:34:9f:26:94:02:31:c4:f3:af:61:81:90:
         35:84:fa:17:de:2d:ba:04:fb:ba:41:4b:e8:e1:b9:58:a6:0a:
         b9:b5:10:00:7f:91:11:8f:38:28:61:ec:a4:71:ed:4b:2d:ac:
         90:4d:21:c3:96:69:18:0d:41:5c:68:08:f8:92:94:a8:3a:93:
         47:61:aa:ad:60:87:20:b9:55:97:3a:ec:e9:d4:99:5e:a9:ac:
         38:51:c1:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:13:54 2025 by rpki-client