Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Jqvt9GmMbtua7Fhnh_98093MGLM.roa
File:                     Jqvt9GmMbtua7Fhnh_98093MGLM.roa (raw, json)
Hash identifier:          hvgkSnD6rfacQ23ZeC5GlkW9NQtt1cistUYK7QpvndI=
Subject key identifier:   26:AB:ED:F4:69:8C:6E:DB:9A:EC:58:67:87:FF:7C:D3:DD:CC:18:B3
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0831
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Jqvt9GmMbtua7Fhnh_98093MGLM.roa
Signing time:             Tue 30 Apr 2024 02:14:27 +0000
ROA not before:           Tue 30 Apr 2024 02:14:27 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        1.73.239.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 12:58:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2097 (0x831)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr 30 02:14:27 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=26ABEDF4698C6EDB9AEC586787FF7CD3DDCC18B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:aa:21:f9:bc:8d:a1:05:8a:f3:08:1c:93:27:
                    cf:1e:d0:0b:7e:a7:bf:8c:e8:e9:37:95:bc:bc:cd:
                    ee:14:ed:96:72:4e:0b:25:5e:ac:7c:20:35:6f:b3:
                    18:1b:33:e9:bd:5d:88:90:c8:8e:c1:64:ef:13:dd:
                    06:1a:31:00:9b:d6:04:22:2f:1d:f2:12:1e:51:10:
                    5b:95:01:5c:32:45:9e:2f:e0:ce:23:cc:82:d4:cc:
                    3d:e3:81:9f:b1:68:2d:26:71:dc:ca:79:17:73:41:
                    71:b3:32:32:d6:40:19:cd:c0:cd:2f:08:29:66:f8:
                    7e:99:95:c5:18:41:e8:1e:5b:4f:d9:30:c5:29:fe:
                    bd:8a:e3:97:48:c5:b1:37:0d:78:b6:40:54:54:b3:
                    f0:6f:c2:a1:0f:c1:42:d4:b0:98:4d:77:ee:02:86:
                    f9:62:57:43:bd:92:1e:2d:13:8f:f1:c7:dd:87:e9:
                    b3:fa:3f:3e:c1:db:4d:7b:ab:5a:9b:47:11:5a:5e:
                    f4:c6:61:51:01:3b:c4:66:59:29:b1:6b:d6:89:b3:
                    dc:56:cd:83:af:03:26:81:7d:f5:e0:82:1a:23:e5:
                    ba:48:64:01:cd:9a:95:eb:6f:5a:44:8d:e6:34:e6:
                    53:ee:e6:bd:32:85:e9:6a:56:5a:44:b2:a8:46:7a:
                    ca:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:AB:ED:F4:69:8C:6E:DB:9A:EC:58:67:87:FF:7C:D3:DD:CC:18:B3
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Jqvt9GmMbtua7Fhnh_98093MGLM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.73.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:c9:22:4c:32:9c:18:60:ad:17:4a:d4:c2:88:f3:05:f5:62:
         88:bd:b4:2d:88:71:50:6c:52:dd:e4:a2:d7:ff:12:2a:8d:5f:
         3b:69:7a:e1:ac:4a:06:e5:25:b8:94:2f:0c:42:c9:f0:92:38:
         f4:4f:50:39:da:b0:73:02:c3:70:05:32:9c:d6:23:8a:3b:71:
         dc:0c:f7:45:04:d7:97:6f:6a:ed:86:a7:d4:8d:f3:ec:bb:38:
         25:92:67:2b:a3:93:5e:1e:64:11:e5:31:54:16:eb:ca:4c:06:
         fc:58:38:42:cb:a0:0c:18:ec:80:28:ff:90:25:4e:d9:ca:0d:
         ad:9c:c4:64:34:b0:5a:06:70:cc:27:f0:87:94:58:ad:ec:70:
         45:81:93:64:ea:6b:2b:8b:d5:8b:c8:88:05:b2:1d:77:3c:32:
         77:a4:c7:fc:86:80:29:10:5b:58:21:30:47:4b:3e:56:94:00:
         1c:21:ce:04:e9:c4:9a:1d:8c:74:2a:4a:90:5c:61:a6:27:1e:
         6f:29:97:82:af:c9:c8:7f:f6:4d:e6:71:08:4a:3f:17:80:ad:
         fb:72:c6:bf:2a:db:b4:71:a5:9c:6c:23:0f:6c:f5:7e:42:c0:
         03:31:e4:9c:3b:72:14:50:82:45:5a:46:94:02:ba:9b:51:7c:
         e8:ba:cc:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:21:23 2024 by rpki-client on console-ams.rpki-client.org