Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/NgMNU1tUrpY0DhOrjMjyybarZic.roa
File:                     NgMNU1tUrpY0DhOrjMjyybarZic.roa (raw, json)
Hash identifier:          FIRDVAONhgpJuwRe3ZyEvEZbGLPWE6tT74swCCbr5bk=
Subject key identifier:   36:03:0D:53:5B:54:AE:96:34:0E:13:AB:8C:C8:F2:C9:B6:AB:66:27
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       08E4
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/NgMNU1tUrpY0DhOrjMjyybarZic.roa
Signing time:             Tue 30 Apr 2024 02:26:27 +0000
ROA not before:           Tue 30 Apr 2024 02:26:27 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        183.74.202.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2276 (0x8e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr 30 02:26:27 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=36030D535B54AE96340E13AB8CC8F2C9B6AB6627
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:0f:ee:ea:46:d7:5b:f5:2f:01:d0:19:7a:69:
                    0a:e3:ba:03:a1:c4:d1:f3:16:23:5c:f3:44:43:75:
                    30:8b:16:da:00:53:c6:91:01:35:9c:d8:cc:05:bd:
                    29:1a:30:1d:c5:c7:4b:f1:50:30:a9:a3:0f:f4:a2:
                    20:20:91:a1:c5:9a:51:05:42:c6:04:d3:4f:51:90:
                    54:49:53:00:05:26:1b:be:22:73:87:c1:6f:cd:2b:
                    8f:a1:63:e4:2f:1f:6f:29:b3:5f:23:48:3d:6f:a7:
                    4a:e3:db:0b:de:0c:80:1e:83:4c:ee:c9:51:b2:c2:
                    b6:9c:82:c6:a6:80:d9:66:12:36:38:ca:31:0f:a4:
                    f5:49:7e:87:b6:dc:68:46:bc:a8:98:fd:7d:46:e6:
                    ec:87:47:c3:5e:92:97:88:ea:05:3f:93:15:b4:5a:
                    05:9e:d7:b5:c7:34:65:a4:ce:0c:c5:30:a8:2a:18:
                    cf:03:2a:bb:ec:33:15:3d:2a:d7:0f:17:b4:db:ab:
                    55:d0:92:aa:97:72:82:2d:68:ee:fe:8d:9f:b4:d2:
                    65:bc:92:b7:6e:db:d3:b4:2c:e0:97:8e:f0:a7:9b:
                    60:0d:f3:68:d6:e4:61:78:02:a7:42:c6:16:ca:15:
                    5f:85:7c:54:06:8e:35:4c:f9:fa:c2:a6:88:e0:75:
                    e4:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:03:0D:53:5B:54:AE:96:34:0E:13:AB:8C:C8:F2:C9:B6:AB:66:27
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/NgMNU1tUrpY0DhOrjMjyybarZic.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.74.202.0/23

    Signature Algorithm: sha256WithRSAEncryption
         32:b3:28:a2:9a:8b:74:ec:a4:70:30:75:94:a1:9f:91:99:6c:
         0f:94:76:36:23:85:23:90:79:b5:c3:9c:7d:7a:ad:18:a0:0f:
         5b:8b:20:94:03:38:ac:59:2c:81:0a:06:77:b1:67:e6:df:50:
         ec:d2:db:c3:f3:f4:99:4f:4e:7f:4b:52:b2:7d:ed:a5:3a:b4:
         99:63:b3:63:49:6f:03:62:07:fd:38:7d:c2:92:67:e1:23:c4:
         ef:c6:66:98:9c:fe:07:a7:46:77:13:f0:a9:30:11:6b:fe:c8:
         b1:34:96:a5:ce:73:db:4f:83:fd:47:bc:e9:5c:90:f3:c1:78:
         5a:eb:20:97:ff:98:b1:e0:8e:17:b8:66:e0:97:86:37:c5:7a:
         b2:af:89:f4:98:d2:29:bb:55:b8:86:51:96:32:9b:99:cd:9c:
         a9:3e:2b:3f:c0:b2:fa:03:45:f7:d2:c1:37:8c:96:93:91:f6:
         af:b0:de:91:03:f6:6b:d5:be:12:17:4c:71:46:79:76:f0:7f:
         61:7b:2e:40:d6:48:2b:d7:1a:54:75:cc:23:e5:f0:1c:af:5e:
         9b:41:1a:2f:d6:4e:98:30:68:90:af:6a:80:64:41:37:e7:5c:
         ba:40:82:13:a7:75:c8:e0:28:e9:78:2f:2f:fd:13:ec:43:b3:
         46:f4:88:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 15:54:30 2024 by rpki-client on console-ams.rpki-client.org