Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/PjWMMN4CbcxvRGB3XGsKC-rFNx0.roa
File:                     PjWMMN4CbcxvRGB3XGsKC-rFNx0.roa (raw, json)
Hash identifier:          atsiP5sdWr+inCMpKj2RpxmQJmVxyUpnsB2WQKuDMEs=
Subject key identifier:   3E:35:8C:30:DE:02:6D:CC:6F:44:60:77:5C:6B:0A:0B:EA:C5:37:1D
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       044A
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/PjWMMN4CbcxvRGB3XGsKC-rFNx0.roa
Signing time:             Thu 27 Jul 2023 16:43:12 +0000
ROA not before:           Thu 27 Jul 2023 16:43:12 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     9605
IP address blocks:        1.72.16.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 23 Jun 2024 11:53:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1098 (0x44a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jul 27 16:43:12 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=3E358C30DE026DCC6F4460775C6B0A0BEAC5371D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:03:f6:5f:12:25:4f:8c:6d:9a:79:a6:4b:72:
                    d8:d7:4c:dc:5b:b9:c4:9c:a5:75:06:9a:b0:15:20:
                    b8:32:b1:e4:1d:3a:28:4f:c3:8b:ea:66:26:d5:d4:
                    a4:49:8d:0b:6d:2c:0f:fe:34:3c:7c:5a:6d:11:c0:
                    1e:d4:30:10:4d:f9:1e:da:5d:59:aa:ed:08:d4:c1:
                    64:5d:5c:c5:21:b6:46:f8:ff:34:0f:27:7d:d7:d2:
                    4f:cb:c0:9f:a9:a6:f0:19:76:d6:df:ed:49:ff:93:
                    5b:94:ae:18:f4:52:48:3e:9f:8b:95:59:44:79:f0:
                    cb:c1:69:32:11:6e:27:2a:94:8d:bb:27:4d:37:1d:
                    57:be:b5:c9:64:1b:14:2f:19:13:ea:79:46:0f:84:
                    37:ce:37:9e:a1:e2:eb:36:15:1b:46:57:8d:63:bf:
                    d5:44:19:b7:4d:17:06:80:a7:be:f2:4b:65:51:d4:
                    b4:03:cf:9d:0a:c8:b6:0d:5e:d8:74:43:9d:64:a3:
                    1d:f8:74:25:63:18:f6:74:51:3d:44:3a:f5:f2:af:
                    79:6b:44:4a:60:9a:3d:fe:9f:20:36:e3:9a:c5:bc:
                    0b:f2:6c:c9:02:a0:00:78:c5:fd:1b:ac:0d:61:8a:
                    5e:4e:93:2b:a2:21:db:1f:89:7b:28:fc:f4:a8:6b:
                    24:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:35:8C:30:DE:02:6D:CC:6F:44:60:77:5C:6B:0A:0B:EA:C5:37:1D
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/PjWMMN4CbcxvRGB3XGsKC-rFNx0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.72.16.0/21

    Signature Algorithm: sha256WithRSAEncryption
         19:bc:01:1e:73:9f:cd:4d:0a:9f:9b:34:dd:df:f7:0e:7f:c8:
         c0:8b:d0:6a:06:92:a6:d1:45:a7:b2:3a:6d:69:d3:17:83:24:
         5a:5a:0c:f4:a7:10:c4:fd:2e:a0:9d:e2:dd:f8:7c:7d:30:3c:
         c1:77:70:b8:d6:4b:1e:ba:2d:1d:02:b6:15:72:0c:f0:63:1a:
         70:50:e8:2c:ec:99:0b:1a:40:bb:83:7a:18:88:d4:02:84:d7:
         01:b3:41:af:d8:21:c5:aa:6c:ac:19:da:82:3b:2a:2b:d4:b8:
         88:f5:de:66:23:8b:3b:e6:d7:2a:8c:13:06:37:79:3d:3a:80:
         a4:2b:e5:f1:d7:8e:32:7d:37:f6:12:c0:60:a7:36:b6:fe:46:
         e9:24:cc:77:e7:a6:a1:0e:98:46:69:70:a3:7b:5e:c9:8d:07:
         95:67:a7:9c:85:a6:d1:30:ac:bc:97:58:cc:ea:a7:e5:00:58:
         be:1c:e7:eb:a1:e3:be:2d:ff:9a:a1:2c:6c:a8:e8:1a:16:b9:
         bd:17:77:4f:aa:85:1e:95:4c:2f:41:a8:b2:c2:4b:a9:a7:be:
         89:39:d4:cb:53:f5:19:57:98:1f:6b:ad:95:4b:3d:f3:38:cd:
         22:2f:71:69:36:70:e4:df:0f:8a:9c:f4:c8:9e:ac:61:b1:fc:
         44:7f:06:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 14:31:53 2024 by rpki-client on console-ams.rpki-client.org