Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/RbHaQH_H1ALiZlR0PHDc1EzZh40.roa
File:                     RbHaQH_H1ALiZlR0PHDc1EzZh40.roa (raw, json)
Hash identifier:          z1hbw120bioM/hasZQj2HBNAM0ITogiQjNoIqNbBdX8=
Subject key identifier:   45:B1:DA:40:7F:C7:D4:02:E2:66:54:74:3C:70:DC:D4:4C:D9:87:8D
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0467
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/RbHaQH_H1ALiZlR0PHDc1EzZh40.roa
Signing time:             Thu 27 Jul 2023 16:44:02 +0000
ROA not before:           Thu 27 Jul 2023 16:44:02 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     9605
IP address blocks:        1.74.196.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 23 Jun 2024 11:53:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1127 (0x467)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jul 27 16:44:02 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=45B1DA407FC7D402E26654743C70DCD44CD9878D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ce:81:17:28:bd:c0:10:0b:c8:fa:5a:c9:b2:
                    2f:40:25:8a:bd:2f:39:5d:a0:23:d1:0c:d7:6c:ab:
                    6d:a1:3d:ed:ee:b2:8a:b0:97:fe:1f:d1:d5:b2:2f:
                    9b:8c:35:b1:ef:10:f3:75:8a:3c:b8:28:d2:b5:5e:
                    4e:7d:ef:8e:85:5f:c4:d3:e2:da:65:a1:8c:6e:a7:
                    5d:f7:62:63:d4:f2:a8:c6:e5:bc:5d:29:f6:cf:6b:
                    03:82:4f:34:98:68:01:79:c7:f2:98:20:8a:d7:eb:
                    11:60:89:31:06:d6:41:42:95:f8:78:c6:d3:55:5c:
                    7d:91:cd:e0:1e:b9:5c:11:f2:a5:3c:23:18:6f:d5:
                    d5:a6:f0:4f:47:2a:c3:af:59:f0:87:98:ed:20:05:
                    87:4a:dc:f5:60:3f:c2:3e:34:44:0e:82:94:32:c6:
                    fd:d0:e6:44:4b:28:f7:88:87:26:2e:55:a1:e8:0d:
                    62:d1:39:c1:7e:6b:24:b8:ff:68:14:83:6a:2a:83:
                    a0:e0:93:60:bb:a9:20:f2:64:c6:db:dd:8b:e8:b8:
                    95:57:cf:e8:45:df:1f:dc:fb:a0:70:c3:6f:76:db:
                    cf:30:48:ad:63:3c:d6:12:d2:26:61:76:9d:9f:64:
                    a5:7a:ba:16:b4:6a:a1:99:3e:6d:de:44:19:19:f7:
                    bd:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:B1:DA:40:7F:C7:D4:02:E2:66:54:74:3C:70:DC:D4:4C:D9:87:8D
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/RbHaQH_H1ALiZlR0PHDc1EzZh40.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.74.196.0/23

    Signature Algorithm: sha256WithRSAEncryption
         85:f1:cd:c5:de:b0:77:49:04:12:42:fb:88:9b:bd:96:10:87:
         e6:86:6b:1c:2a:d0:e5:c1:da:2b:dc:64:6b:78:0b:f7:05:12:
         96:b1:e0:4b:bc:02:ed:42:c1:53:80:bd:d0:1f:a7:8c:7f:f1:
         de:3f:87:e4:6e:50:dd:2c:04:01:cc:39:44:30:fe:37:ad:75:
         a7:da:c1:ea:42:4e:af:bd:65:c9:04:ed:90:2b:b8:61:ed:b6:
         86:1c:ae:0b:34:fb:09:f0:b7:b1:05:59:f3:d7:e0:25:06:5e:
         3a:0f:81:54:11:85:99:ef:7e:6d:e0:87:5e:38:8d:b1:c1:c0:
         4b:ea:5d:af:11:be:b4:75:69:61:20:22:98:61:be:a6:31:04:
         b0:11:57:99:a4:af:79:c4:3d:fc:39:1f:5b:64:95:74:5b:35:
         2f:07:92:56:82:94:3d:2a:0b:ce:c9:94:cf:55:b9:fe:2b:ee:
         c5:fd:93:a5:a6:71:e1:74:c4:2a:ba:24:13:4a:69:02:06:1a:
         e6:3a:96:15:68:2c:b7:0a:ab:38:b2:33:bd:5d:07:b3:28:c8:
         75:f4:d9:99:52:d5:be:8e:42:b3:a5:0c:0a:0c:03:bd:73:fa:
         ff:ab:65:27:b7:73:cd:87:9e:8b:de:7a:e8:05:b5:59:3d:87:
         64:cc:fe:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 12:57:21 2024 by rpki-client on console-fra.rpki-client.org