Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/OwUzfobOhMSA76PMunDKJiUAc_M.roa
File:                     OwUzfobOhMSA76PMunDKJiUAc_M.roa (raw, json)
Hash identifier:          EyhE3urRDZMaEXMSWCCfhL28z62Vz49ttqBGsKPsI8A=
Subject key identifier:   3B:05:33:7E:86:CE:84:C4:80:EF:A3:CC:BA:70:CA:26:25:00:73:F3
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0640
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/OwUzfobOhMSA76PMunDKJiUAc_M.roa
Signing time:             Tue 30 Apr 2024 01:31:27 +0000
ROA not before:           Tue 30 Apr 2024 01:31:27 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        183.74.248.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 23 Jun 2024 11:53:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1600 (0x640)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr 30 01:31:27 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=3B05337E86CE84C480EFA3CCBA70CA26250073F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:6f:fd:17:59:4d:e9:db:0d:ca:f9:fb:bc:3c:
                    9b:13:a3:e9:61:cb:ce:21:34:d9:b5:2d:b5:8a:a9:
                    af:ba:39:f2:e6:cf:cb:51:dc:7c:c4:5c:64:55:d7:
                    37:f3:cd:93:69:41:39:65:ac:50:5c:fa:c6:00:f6:
                    7a:dc:20:ab:1e:77:63:39:0a:a2:d3:74:a5:f9:cf:
                    f5:16:5b:cc:72:c0:ee:1c:a6:8f:b6:36:9e:4b:ca:
                    38:0c:ef:e0:26:76:ce:d4:84:30:de:a0:3c:f4:57:
                    f6:d1:53:28:aa:7b:53:d2:1d:79:ce:51:3e:fa:aa:
                    dd:d3:b0:db:f8:b8:d3:99:bf:a6:fa:f9:07:4f:6b:
                    71:0c:5d:85:e9:47:ad:f4:80:8a:0d:ca:0c:f2:c6:
                    c3:f1:df:f7:58:a7:ba:16:d3:6f:45:b8:97:09:6a:
                    8d:ff:44:11:5e:4e:db:64:bb:c6:37:e3:dd:62:6f:
                    7c:97:64:01:7b:40:f6:c5:08:bf:1d:50:04:e0:fe:
                    bd:9e:08:0e:04:a5:85:a6:f2:c0:9c:07:3e:da:47:
                    f3:ef:f1:df:96:37:6f:dc:bd:fb:1c:db:72:23:ee:
                    76:97:c1:98:e1:8f:51:03:e2:c6:36:0e:a9:30:3f:
                    92:53:bf:14:14:10:ee:99:c4:7c:d2:8f:55:23:ad:
                    e9:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:05:33:7E:86:CE:84:C4:80:EF:A3:CC:BA:70:CA:26:25:00:73:F3
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/OwUzfobOhMSA76PMunDKJiUAc_M.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.74.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0a:d6:5a:ef:2f:6a:ab:51:cc:30:0e:22:23:81:e6:77:c9:0e:
         71:3c:b9:88:e2:83:89:53:bb:eb:c9:15:7a:89:40:30:12:b8:
         04:3d:c6:af:03:ac:02:f3:b7:92:58:3d:61:49:42:2c:1a:a6:
         dd:94:e2:d2:ef:da:b5:65:af:22:c2:20:9e:18:12:4b:1c:e3:
         ce:a1:4c:c9:b4:1e:73:0c:45:fc:78:f8:ac:96:38:d7:1f:8f:
         3e:9c:45:ef:1c:bf:38:32:80:d7:bf:e7:1b:89:0c:21:69:17:
         e4:69:ca:f8:ac:6d:83:34:0f:a3:d2:0d:d3:76:06:f8:d3:29:
         ae:7c:55:a8:fc:7f:b4:2a:49:dc:61:02:ed:d1:2a:fc:84:c1:
         a1:7e:c1:03:c8:28:40:a5:07:6d:c1:85:aa:86:d5:1d:15:e0:
         71:41:f1:32:18:0a:94:cc:de:59:fd:fe:b8:a4:77:2f:6c:56:
         9e:0c:e2:5e:36:cf:a8:1a:1a:b0:2f:fd:57:cb:fa:58:c5:ea:
         68:6e:21:11:db:36:ce:e9:06:d8:ad:1d:d0:91:cf:7b:da:c7:
         6f:cc:47:28:61:95:49:37:23:45:f8:1e:75:de:9b:12:d7:87:
         47:63:5c:1c:b3:0a:62:7a:5b:b4:a4:55:c3:11:cf:45:15:97:
         94:a1:26:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 14:31:53 2024 by rpki-client on console-ams.rpki-client.org