Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/QYA8CBdH8rGntkqIPWWN_aesEyo.roa
File:                     QYA8CBdH8rGntkqIPWWN_aesEyo.roa (raw, json)
Hash identifier:          v86fk7re4PzwWg+u5auxDiGF6KT5NuwdIH+qvSu0BOs=
Subject key identifier:   41:80:3C:08:17:47:F2:B1:A7:B6:4A:88:3D:65:8D:FD:A7:AC:13:2A
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0547
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/QYA8CBdH8rGntkqIPWWN_aesEyo.roa
Signing time:             Thu 27 Jul 2023 16:56:09 +0000
ROA not before:           Thu 27 Jul 2023 16:56:09 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     9605
IP address blocks:        183.74.254.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 23 Jun 2024 11:53:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1351 (0x547)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jul 27 16:56:09 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=41803C081747F2B1A7B64A883D658DFDA7AC132A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:06:69:98:30:3d:c0:c3:11:11:e8:4b:1a:bb:
                    e6:93:b3:a5:50:21:c7:98:5f:a3:d9:1b:10:a7:27:
                    bf:cc:24:cf:46:3b:5b:3e:08:1f:69:d9:b9:36:f6:
                    e4:2b:70:54:d4:6d:45:d6:3e:ff:86:65:9b:f6:da:
                    08:09:75:36:b3:9b:5d:fa:2f:bf:90:a6:ea:25:b5:
                    e6:ae:31:0a:a7:79:5a:1d:63:57:2a:8e:09:52:85:
                    e4:8a:f0:7f:02:c5:79:2f:52:82:07:ce:e3:64:61:
                    f2:a1:8b:1a:b3:03:27:7c:8e:14:fb:f5:b4:a8:6e:
                    d7:c0:13:fb:d8:ed:d7:96:f0:fe:5e:ee:5a:bd:fa:
                    a0:29:9a:5f:20:8e:8c:90:5b:f3:db:95:cb:64:d4:
                    05:af:8e:fd:eb:4b:f5:dc:f8:34:ae:56:44:39:95:
                    06:ad:26:ad:89:2f:9a:2a:da:ab:95:d0:16:6a:be:
                    84:75:fe:55:fe:95:69:c1:0b:f8:67:b0:3c:79:5d:
                    49:13:29:ab:b9:c8:46:25:ab:4f:58:19:2f:00:35:
                    20:c1:a0:93:2d:b9:98:31:a9:3a:3d:7d:9c:45:c7:
                    81:8c:b9:1b:0e:9c:6b:49:0e:ac:38:61:e9:ff:50:
                    1d:2c:ed:1e:89:a9:32:f2:b1:2c:8d:ab:b4:6a:a1:
                    9a:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:80:3C:08:17:47:F2:B1:A7:B6:4A:88:3D:65:8D:FD:A7:AC:13:2A
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/QYA8CBdH8rGntkqIPWWN_aesEyo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.74.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6a:bd:a6:13:42:cf:31:89:83:54:61:2a:c9:19:29:48:97:1c:
         e1:c6:cc:9f:1b:6f:59:5f:3c:8d:6a:82:7b:50:41:12:a1:b0:
         5d:d5:0c:a2:f8:05:2c:af:88:07:b0:1a:28:67:79:9f:fd:d6:
         4a:13:31:6b:4a:95:1f:6b:16:35:3a:60:58:b4:25:1d:2c:3d:
         a2:96:bd:d8:12:20:02:0a:46:27:aa:f3:c5:5d:b2:ff:75:da:
         46:bf:76:2a:f5:0c:db:be:ca:94:d5:39:96:43:10:f1:d0:4b:
         ed:dd:06:03:f5:bf:5d:d2:c5:7d:d6:19:c6:bb:7a:e4:2b:f3:
         1e:79:43:cd:6b:21:ef:d4:52:00:78:f8:36:8b:23:c4:30:5a:
         0f:92:b5:08:e0:57:46:cb:04:5f:b2:8e:72:42:d7:3f:25:e7:
         19:07:75:13:9c:43:fc:54:9a:87:6d:ae:ef:38:9f:17:0c:5e:
         fc:b3:1e:bc:5c:89:d8:7d:57:ff:99:e2:29:41:eb:2f:2a:2b:
         87:8e:88:01:33:f2:a8:90:17:0a:a0:72:67:b8:f8:5e:a7:24:
         2b:dc:1c:75:fd:2a:22:f7:af:41:ee:60:a4:c8:a2:35:8b:c6:
         e7:c6:25:98:03:62:61:2b:f0:7e:79:e6:f3:ae:57:87:46:86:
         48:b8:f9:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 14:31:53 2024 by rpki-client on console-ams.rpki-client.org