Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/PaniMyPm-wPK3yMY6DTJhRfXeI4.roa
File:                     PaniMyPm-wPK3yMY6DTJhRfXeI4.roa (raw, json)
Hash identifier:          Up4tMhvr2kOALvb8sYejV5fIJnOkQEKeJpuMjCdngLQ=
Subject key identifier:   3D:A9:E2:33:23:E6:FB:03:CA:DF:23:18:E8:34:C9:85:17:D7:78:8E
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       075F
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/PaniMyPm-wPK3yMY6DTJhRfXeI4.roa
Signing time:             Tue 30 Apr 2024 02:01:38 +0000
ROA not before:           Tue 30 Apr 2024 02:01:38 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        1.66.32.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1887 (0x75f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr 30 02:01:38 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=3DA9E23323E6FB03CADF2318E834C98517D7788E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ed:4b:ae:f9:86:c2:0d:34:8f:ca:6d:2b:e2:
                    19:74:69:f9:e4:71:eb:64:a0:d4:ec:fc:3a:c7:02:
                    98:2a:ff:27:33:3e:aa:56:99:34:01:40:e9:3c:17:
                    46:94:a4:2f:c1:de:91:bd:79:48:06:82:bb:78:13:
                    82:c7:58:13:71:00:fb:af:84:f5:e2:e8:79:3d:99:
                    f9:8d:c4:49:96:12:fa:1c:7b:1c:c7:d5:61:f2:20:
                    96:ef:82:0d:ab:5d:86:b7:74:b9:26:01:f7:13:af:
                    13:35:f4:4c:e0:d4:39:e2:ff:2a:db:ce:4f:8a:dc:
                    78:ef:18:15:91:35:99:1a:a0:ea:9a:03:45:8b:3d:
                    75:5f:6e:5e:5d:eb:59:4b:7e:5a:92:33:b0:18:2b:
                    74:56:b1:c1:0e:3e:7e:34:0e:d8:fa:b3:0b:aa:58:
                    b8:88:be:9b:ab:4d:40:cb:3b:e0:9c:6d:ac:9e:59:
                    9e:93:09:7f:ec:66:89:10:95:9d:52:46:b6:2c:3e:
                    91:02:be:77:85:c1:01:2c:cd:6c:43:3f:be:06:6d:
                    5c:11:53:69:bb:1d:5e:07:c6:b3:6c:e1:a3:d6:b3:
                    19:e1:36:d1:19:b8:56:e3:ae:25:3f:2c:aa:01:f6:
                    b8:f3:a9:a9:28:b4:cb:a9:84:51:82:fd:9d:d8:fb:
                    04:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:A9:E2:33:23:E6:FB:03:CA:DF:23:18:E8:34:C9:85:17:D7:78:8E
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/PaniMyPm-wPK3yMY6DTJhRfXeI4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.66.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         4e:f1:9f:3d:04:ae:94:bd:3d:c4:4f:f2:5d:99:9a:37:27:58:
         b6:ae:20:f2:11:0e:a8:e8:ef:f8:95:ad:76:9a:7f:85:67:0e:
         ac:c6:dc:43:2d:33:23:d1:f2:72:35:95:10:58:f6:3d:3a:93:
         f4:fe:46:3b:71:51:65:55:6e:5d:06:29:66:d3:f8:e4:69:53:
         9d:be:bd:57:9f:e6:84:4f:0d:a0:d0:b6:f7:2b:db:6c:00:7b:
         82:05:ba:e4:5a:8a:c0:db:b4:2f:2e:70:99:88:e1:01:47:fe:
         73:15:42:82:71:d0:97:8a:9f:e6:d6:d4:5e:60:31:a3:d7:a8:
         32:93:a7:da:48:02:a0:6b:6e:89:bd:1b:70:3b:00:e5:96:08:
         0a:65:5b:f0:ae:1e:4b:79:39:34:c8:4b:46:e4:11:8e:32:e8:
         5b:54:ca:14:21:2c:af:38:71:01:c0:94:99:2b:c8:a7:eb:e9:
         99:07:50:65:fd:a1:a5:2e:ed:4e:bd:d1:49:7f:89:5f:52:49:
         1b:6c:5e:e6:5c:30:d2:d0:4f:13:00:bf:b4:a4:f1:95:6f:ba:
         76:05:49:d1:03:07:f9:1d:de:4b:35:ae:ad:76:bf:a6:55:21:
         a8:a0:a3:d8:33:bc:bc:a8:ee:05:96:06:99:af:22:a6:c3:ab:
         e9:9f:a7:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 15:54:30 2024 by rpki-client on console-ams.rpki-client.org