Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/N23nKuFM2r6QX2qUDc6J2yHHjx4.roa
File:                     N23nKuFM2r6QX2qUDc6J2yHHjx4.roa (raw, json)
Hash identifier:          vBG35F3QkRtE6XdGB9AiIAQFPngYe4f5lkELzYLZsLo=
Subject key identifier:   37:6D:E7:2A:E1:4C:DA:BE:90:5F:6A:94:0D:CE:89:DB:21:C7:8F:1E
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       04B7
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/N23nKuFM2r6QX2qUDc6J2yHHjx4.roa
Signing time:             Thu 27 Jul 2023 16:48:11 +0000
ROA not before:           Thu 27 Jul 2023 16:48:11 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     9605
IP address blocks:        27.230.104.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 23 Jun 2024 14:09:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1207 (0x4b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jul 27 16:48:11 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=376DE72AE14CDABE905F6A940DCE89DB21C78F1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ba:29:cf:2f:8a:32:e7:aa:f7:bd:a4:c8:94:
                    2f:e9:66:27:92:8c:4b:b4:dc:61:5d:84:6a:23:ba:
                    e0:84:ad:a7:65:45:98:aa:0b:6b:ad:61:bc:95:3a:
                    95:bb:28:9e:3c:e8:54:26:7b:41:21:c4:90:e0:e7:
                    7a:e3:d4:ba:ab:57:b4:88:a2:48:c1:f1:0f:ba:a6:
                    bb:e6:be:6e:53:1f:f7:ce:4a:b3:81:9e:e7:c4:8b:
                    3e:cf:fd:b2:ac:39:ab:4b:57:a0:2f:cb:bd:f6:0f:
                    bc:4c:0d:47:01:1d:69:0e:17:ea:94:7a:a2:f7:04:
                    70:c4:5c:32:2e:05:06:91:19:8d:81:c3:b3:7e:ab:
                    51:47:83:fe:4a:ec:69:88:f1:70:c2:81:5a:f2:bb:
                    79:fa:3b:97:ad:66:2c:d9:b1:fa:9a:22:15:a8:09:
                    9a:c4:64:d6:06:e0:4f:6f:a4:ac:bb:b4:0a:32:0d:
                    82:7b:0b:68:61:62:fa:11:d6:fc:31:8d:f2:16:5d:
                    15:ce:d3:85:dc:a1:e6:5a:24:7e:18:72:59:ef:bc:
                    05:32:17:0a:38:2f:a2:70:9d:7a:70:b4:14:86:cc:
                    d1:11:d0:5a:de:45:44:c3:b1:ef:b9:d1:bc:55:f9:
                    ce:28:91:27:bc:0d:c8:65:84:71:db:ee:8c:33:bd:
                    19:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:6D:E7:2A:E1:4C:DA:BE:90:5F:6A:94:0D:CE:89:DB:21:C7:8F:1E
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/N23nKuFM2r6QX2qUDc6J2yHHjx4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.230.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d0:e6:4c:54:9b:68:1f:bf:9d:dd:ec:7c:e6:b4:c2:13:05:a0:
         1a:42:b7:a0:18:d2:e4:ac:12:b3:85:08:86:82:ac:f6:dd:22:
         73:fd:36:38:c0:49:a0:66:83:5c:36:fa:f6:6f:3c:9b:08:5a:
         13:d1:67:ee:69:d6:6e:1f:3c:a8:91:4e:7a:de:10:cf:71:14:
         76:64:49:90:9f:e8:73:16:09:44:fe:ae:87:61:54:50:be:37:
         10:30:a8:ec:38:fb:c9:26:01:3c:cf:98:ce:5f:00:59:2f:5e:
         d6:7d:23:bc:59:2b:ca:05:2a:25:4d:a0:80:f7:8c:3c:76:6b:
         d0:9f:25:ab:dd:9d:f2:d6:f9:d7:27:c3:b5:a0:d3:ae:08:a6:
         f7:18:b6:81:e9:96:34:0c:ef:5a:7c:54:a2:42:63:63:2d:69:
         cd:de:51:c9:40:b8:a6:c5:83:46:b4:40:f4:aa:6b:82:ad:72:
         6d:f5:21:27:dd:f4:8c:a0:fd:ad:3e:2d:a8:54:7f:e8:c3:7e:
         fe:46:80:c0:a0:af:fb:eb:f3:b4:1f:5c:8c:43:8c:66:52:db:
         86:f0:ee:51:5c:90:1c:eb:da:1b:35:9c:b0:78:4a:62:47:56:
         b2:fc:eb:f2:cc:4f:56:f5:20:59:83:4b:f1:84:b2:2e:1d:d7:
         47:22:08:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 14:52:13 2024 by rpki-client on console-ams.rpki-client.org