Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/RNfZ5rFdQKxpMj5-QyUnY8w1X9A.roa
File:                     RNfZ5rFdQKxpMj5-QyUnY8w1X9A.roa (raw, json)
Hash identifier:          ready7eyB5HIjosyYEFHo5cDE6MokhtGVi2RWiDXDps=
Subject key identifier:   44:D7:D9:E6:B1:5D:40:AC:69:32:3E:7E:43:25:27:63:CC:35:5F:D0
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       050B
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/RNfZ5rFdQKxpMj5-QyUnY8w1X9A.roa
Signing time:             Thu 27 Jul 2023 16:52:10 +0000
ROA not before:           Thu 27 Jul 2023 16:52:10 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     9605
IP address blocks:        183.74.252.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 23 Jun 2024 11:53:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1291 (0x50b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jul 27 16:52:10 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=44D7D9E6B15D40AC69323E7E43252763CC355FD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:8e:f6:b7:3e:26:e8:b6:92:50:50:69:8d:15:
                    c6:51:7a:3e:51:76:36:ac:4e:d2:5a:c4:60:28:0f:
                    0d:b0:63:84:e4:23:b7:7b:dc:99:e1:db:86:bb:c8:
                    82:57:7f:00:61:ae:fe:ee:4c:45:8c:33:02:9f:1a:
                    56:2d:48:c8:0f:56:27:c9:18:43:42:2e:82:d7:db:
                    c0:c4:aa:eb:da:13:72:ed:7e:3f:1e:62:e2:5a:66:
                    b8:2c:2d:d2:7d:1d:4a:cb:9d:78:81:e2:f4:f8:9a:
                    18:75:38:76:92:8a:a8:5e:57:78:b8:56:df:9c:a6:
                    d6:75:a9:4b:c7:e2:35:41:7e:f0:a5:64:3d:f1:ca:
                    ec:2c:d6:37:06:37:5a:94:d1:9e:14:d9:29:ab:9f:
                    db:3b:de:fb:1f:23:5f:3b:5a:5f:20:ba:dc:46:cd:
                    e3:e1:7e:fd:41:22:8d:e2:eb:fb:52:8d:fb:4e:73:
                    5e:f3:b8:a4:ab:3a:d7:7f:97:d8:57:ba:60:54:41:
                    47:73:24:8f:c2:4d:43:44:c9:6d:6e:47:0d:9a:56:
                    d9:a0:23:88:f2:6b:62:e4:ba:61:66:c5:75:ab:5c:
                    a4:1c:b5:2d:e5:26:75:8a:3e:c0:ec:2b:cc:6e:43:
                    98:cd:56:16:11:36:28:b1:39:81:15:fd:0c:39:ed:
                    4a:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:D7:D9:E6:B1:5D:40:AC:69:32:3E:7E:43:25:27:63:CC:35:5F:D0
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/RNfZ5rFdQKxpMj5-QyUnY8w1X9A.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.74.252.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1c:a5:80:06:f0:07:d0:6d:fc:85:9d:12:86:9d:d4:e6:15:5c:
         3f:7a:97:8d:88:19:82:d9:30:0b:5e:4a:ba:86:8a:30:df:5c:
         ed:37:25:46:df:98:d3:6f:2d:b4:0b:53:c5:2a:ad:3c:9b:b9:
         db:d6:44:15:66:98:43:4d:f8:83:83:af:ce:4d:6a:06:95:39:
         fa:6f:b5:bd:b7:41:25:88:85:90:8d:2c:d0:3d:b3:44:44:4a:
         44:84:9b:6b:f8:67:82:5a:ae:97:30:47:10:d6:7e:8d:0f:16:
         3c:f3:d7:65:d5:00:f5:b7:bb:91:76:49:4b:6e:6b:ec:f1:5e:
         05:cb:40:84:a2:d1:bd:6a:33:0d:0f:a9:e3:99:3a:a4:e5:be:
         39:8b:a6:d0:30:a0:46:d2:43:67:79:37:8e:9d:95:1f:45:89:
         9c:0b:59:6a:f7:71:25:2f:ac:d0:32:2f:55:01:8e:56:0b:b1:
         d2:fc:04:13:c1:61:b7:64:33:bc:94:a1:3a:0b:00:94:94:77:
         ab:9d:5b:f3:a9:cf:40:b7:87:c4:a8:20:79:cf:b2:d2:47:65:
         3e:94:3e:09:58:55:8f:04:27:63:2e:74:8f:85:1f:08:2b:07:
         86:6a:bb:e4:d2:aa:c6:4f:73:c9:19:f8:a3:24:fe:5f:55:8a:
         7a:68:08:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 12:57:21 2024 by rpki-client on console-fra.rpki-client.org