Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/SN3FZexFvc9o0uW6vWwNi4LMQ6A.roa
File:                     SN3FZexFvc9o0uW6vWwNi4LMQ6A.roa (raw, json)
Hash identifier:          Yf7FYIGDgVAlSPpl4Vlc3dsBmA5Rp07D4mzMBZ3Jb84=
Subject key identifier:   48:DD:C5:65:EC:45:BD:CF:68:D2:E5:BA:BD:6C:0D:8B:82:CC:43:A0
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       081C
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/SN3FZexFvc9o0uW6vWwNi4LMQ6A.roa
Signing time:             Tue 30 Apr 2024 02:14:16 +0000
ROA not before:           Tue 30 Apr 2024 02:14:16 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        183.74.196.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2076 (0x81c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr 30 02:14:16 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=48DDC565EC45BDCF68D2E5BABD6C0D8B82CC43A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:03:52:cf:ff:51:b2:0e:fb:7d:a8:53:74:e8:
                    64:e1:45:0d:f5:ba:14:73:00:c5:71:ec:53:d5:ff:
                    59:f4:eb:3f:cd:8c:5e:32:d3:9e:44:27:ec:55:99:
                    e3:eb:f0:ed:50:e8:9e:93:3b:a1:91:b8:3a:b6:19:
                    bc:72:e3:02:92:cc:94:4d:79:46:ba:c3:4a:d1:d9:
                    dd:a3:7e:79:18:80:91:93:7c:4f:f1:63:db:25:c1:
                    74:78:4f:6a:90:92:72:8a:c6:d1:dd:37:c4:64:37:
                    76:ae:9e:e8:af:2f:6a:58:c7:0a:cf:87:62:97:f9:
                    84:36:64:c5:5f:fd:c1:34:96:27:ff:b0:8b:37:46:
                    02:f9:d9:3d:26:90:89:da:c0:f4:6f:f2:ac:5e:b1:
                    1c:b8:7c:5a:36:01:ba:26:09:68:9d:95:f4:fc:32:
                    25:fa:9b:3d:5b:90:db:f4:80:a4:ea:b6:cd:b8:2e:
                    65:62:5e:f8:3e:69:6f:20:a3:43:73:26:f2:fa:02:
                    f8:fe:d6:43:90:d3:bf:56:87:37:05:bc:77:7b:37:
                    0c:c3:b2:06:0c:8e:38:68:59:aa:16:8e:fe:df:c8:
                    21:d5:50:32:f1:f2:5a:70:3e:d9:c4:c3:3d:36:1c:
                    50:95:2e:d8:37:7b:94:c0:f5:ac:15:48:5a:2e:93:
                    3a:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:DD:C5:65:EC:45:BD:CF:68:D2:E5:BA:BD:6C:0D:8B:82:CC:43:A0
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/SN3FZexFvc9o0uW6vWwNi4LMQ6A.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.74.196.0/23

    Signature Algorithm: sha256WithRSAEncryption
         e5:d9:05:6f:83:76:e0:b3:2f:4a:d1:dc:0e:0a:7b:fd:42:1c:
         aa:88:01:8b:c2:eb:80:f9:5a:dc:50:c0:1d:bc:dd:a3:37:8b:
         c8:46:4b:f5:b5:3e:e4:33:6c:67:84:ca:3a:01:77:5c:83:54:
         8b:84:84:3d:4c:b3:3d:3a:66:2f:53:61:68:56:1e:f8:a8:30:
         09:e7:54:6f:21:f3:4f:3d:b8:d0:e0:89:78:5c:1c:7a:60:5e:
         18:6d:f8:10:4c:fc:5b:08:a4:97:ac:0e:f1:a8:79:46:07:8c:
         ce:ff:f7:f0:82:01:ef:e1:67:7e:0f:ce:e1:57:e8:cc:23:a9:
         e8:59:34:5a:41:ac:0f:83:f2:19:56:3a:80:8d:8b:97:d4:ec:
         06:b0:3f:1d:82:21:ed:8e:6d:c8:98:52:2e:33:9e:6e:fc:df:
         59:7b:8f:10:b7:ba:32:a4:e3:e7:1c:e5:84:d8:95:cd:33:a1:
         bb:95:4d:0c:ea:ba:ca:47:1c:52:44:2e:3a:71:85:e2:ba:19:
         ee:06:7a:d2:8e:e7:9e:24:4a:02:84:42:9d:0b:2f:43:1b:6b:
         d2:15:2a:e9:4a:03:91:56:bc:e8:5b:34:c0:d7:8b:e7:68:25:
         19:17:3c:37:00:8a:35:cd:a8:48:25:24:b7:c5:2b:bb:26:a6:
         71:52:5d:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:45:40 2024 by rpki-client on console-ams.rpki-client.org