Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/QqMjN4Ik3fhH2GhWPpvCNUxp8pk.roa
File:                     QqMjN4Ik3fhH2GhWPpvCNUxp8pk.roa (raw, json)
Hash identifier:          iMmelY8ntT8Sr6kNVWoAgsdA830qIeoJEjt+57b1AW8=
Subject key identifier:   42:A3:23:37:82:24:DD:F8:47:D8:68:56:3E:9B:C2:35:4C:69:F2:99
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       05CD
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/QqMjN4Ik3fhH2GhWPpvCNUxp8pk.roa
Signing time:             Thu 29 Feb 2024 01:32:11 +0000
ROA not before:           Thu 29 Feb 2024 01:32:11 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     9605
IP address blocks:        1.75.4.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1485 (0x5cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Feb 29 01:32:11 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=42A323378224DDF847D868563E9BC2354C69F299
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:38:b4:a6:ad:ad:4a:c1:87:78:88:40:c4:b2:
                    15:94:d7:8c:22:5f:6c:e8:1e:b4:dc:f8:0d:ca:7a:
                    cc:eb:42:50:54:0f:f6:40:11:20:4a:0f:9a:80:c9:
                    c3:93:c4:27:c8:d0:b8:71:89:d1:dc:40:ed:1a:2a:
                    5e:29:57:23:f8:78:b2:a6:18:f2:1e:1f:2b:5d:c6:
                    f9:bb:e2:6f:f8:46:eb:82:dc:88:01:56:4d:6e:33:
                    a7:7b:92:b9:83:e5:1b:df:68:2f:8c:55:9f:32:32:
                    64:72:33:a7:d7:6e:0d:bf:b5:d8:09:e5:b3:73:ce:
                    14:a4:45:d6:3f:f3:6c:5a:51:fb:bf:f2:b1:1a:02:
                    06:a6:03:e8:25:62:4d:96:61:09:80:e1:f1:ec:2c:
                    72:3f:63:6b:88:f3:c8:8f:25:6f:80:f3:bb:4b:d3:
                    42:92:88:34:c2:35:35:2f:6b:e8:65:07:0d:15:2a:
                    79:fe:b2:14:d5:86:9e:5a:9d:4d:ba:94:5d:bc:b6:
                    1e:a4:ab:0a:bf:93:cc:f4:b7:40:2e:86:22:3e:e1:
                    94:48:22:50:47:22:bc:e9:42:b0:f5:6e:bf:eb:a2:
                    e8:ee:01:43:3f:bd:0e:9a:a8:8d:57:49:9c:d3:76:
                    f8:b8:1b:8a:8a:5c:fa:80:ae:0a:8e:48:a5:0a:f3:
                    46:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:A3:23:37:82:24:DD:F8:47:D8:68:56:3E:9B:C2:35:4C:69:F2:99
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/QqMjN4Ik3fhH2GhWPpvCNUxp8pk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.75.4.0/23

    Signature Algorithm: sha256WithRSAEncryption
         dc:a7:53:95:e7:46:61:da:39:05:36:e3:f3:da:ec:da:f1:a0:
         47:e1:41:2a:1f:4a:2b:ae:7e:6e:0e:c9:33:f1:f5:16:d9:c4:
         56:34:13:21:70:9f:19:95:12:ba:76:fd:0b:64:1d:ab:cb:77:
         85:3f:f7:0c:b7:cd:1a:dc:79:31:24:da:61:cf:e8:62:5c:81:
         0d:49:bf:15:4f:b1:d2:6d:d6:a5:81:3f:be:d8:c6:02:79:5b:
         2e:88:be:d0:a3:03:2c:2c:bd:d0:a4:d0:59:8a:46:5e:bd:bf:
         8b:ca:36:54:ed:fb:fd:b4:77:88:6d:0a:2b:1d:0f:0e:cf:38:
         e4:ee:35:a9:ec:ea:82:a0:c5:3d:7d:13:81:d8:d8:eb:61:36:
         21:36:ac:96:e9:9a:84:c7:99:93:d5:24:b0:bb:65:cf:87:31:
         8f:47:e8:a2:f5:34:4b:fb:21:90:c5:86:fa:89:b6:12:81:d3:
         df:8a:00:f9:35:a0:14:3a:1d:01:dc:6f:c7:b2:cb:45:10:75:
         d9:f1:95:4f:f2:c7:7f:fd:5b:0b:a2:b0:88:09:e8:a5:08:6d:
         ea:bc:02:4f:2b:ef:92:6a:ec:46:7f:a6:16:32:56:d1:c7:ce:
         e9:87:a9:24:e4:4b:43:87:9c:fb:d5:1f:9c:5d:f6:b1:48:d7:
         71:33:0f:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:54:41 2024 by rpki-client on console-ams.rpki-client.org