Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/SctjvTuDQ-oAEkGYv2BjsdVbRB4.roa
File:                     SctjvTuDQ-oAEkGYv2BjsdVbRB4.roa (raw, json)
Hash identifier:          vl87KLQF78Idd6E7DyCENihbumAps6mghX+1pMWbH/w=
Subject key identifier:   49:CB:63:BD:3B:83:43:EA:00:12:41:98:BF:60:63:B1:D5:5B:44:1E
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0559
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/SctjvTuDQ-oAEkGYv2BjsdVbRB4.roa
Signing time:             Thu 27 Jul 2023 16:56:16 +0000
ROA not before:           Thu 27 Jul 2023 16:56:16 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     9605
IP address blocks:        1.79.216.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1369 (0x559)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jul 27 16:56:16 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=49CB63BD3B8343EA00124198BF6063B1D55B441E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c8:5a:35:d5:c2:e8:81:aa:a1:27:37:c0:18:
                    4c:1e:36:04:e6:e7:61:b6:b9:c6:79:27:7e:ca:30:
                    70:02:ca:64:54:ec:c1:6c:84:34:c6:6a:a2:c4:50:
                    aa:0e:ea:f7:38:99:f8:1f:93:3f:ac:11:53:0f:65:
                    62:57:86:57:93:af:4a:7b:da:82:02:13:26:80:41:
                    45:3e:80:74:82:72:57:55:df:77:5c:d4:14:d3:c5:
                    3b:51:b0:b7:71:c3:e3:8f:30:a2:0e:5f:76:0d:25:
                    6f:d3:56:c7:b2:78:43:61:64:a6:d2:7b:79:9b:a1:
                    01:80:05:7a:67:32:fb:f6:c4:e2:52:1c:89:cd:e5:
                    54:1e:26:2f:a1:98:b7:98:1b:79:fb:3b:dc:70:1c:
                    d7:a3:37:a0:0c:3f:1d:6b:d7:e7:08:ae:75:68:0a:
                    98:ae:68:bc:42:cf:9f:ea:93:46:9b:df:4e:b1:33:
                    e3:3f:79:f4:61:24:05:02:39:2c:5b:b3:b6:25:de:
                    62:b4:f0:61:a0:30:3a:30:9a:2b:48:6f:18:0d:39:
                    cc:1b:97:c8:fb:f2:08:7d:38:74:20:1d:fb:3e:b2:
                    f2:1b:e0:a4:fb:16:1b:5d:f0:e2:e6:9e:83:ef:c3:
                    b6:59:75:8a:e7:40:87:4d:04:93:5d:98:b9:d3:bf:
                    09:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:CB:63:BD:3B:83:43:EA:00:12:41:98:BF:60:63:B1:D5:5B:44:1E
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/SctjvTuDQ-oAEkGYv2BjsdVbRB4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.79.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         dd:d5:b3:15:30:c6:58:c0:7f:31:d4:9a:1f:71:0e:9b:46:eb:
         4a:c4:44:95:7b:5c:a5:24:8b:ca:bf:d3:27:52:08:c8:b1:8a:
         96:ae:14:0c:2c:cb:38:44:6e:dc:2b:89:9b:40:1d:7d:92:c8:
         fe:4c:f4:6b:a3:eb:99:fc:5b:aa:02:ee:c0:f1:4d:85:aa:a0:
         1d:64:d3:67:d0:ee:27:84:1c:8e:50:1a:ce:83:8b:28:fa:82:
         0a:85:e2:cb:bd:3d:f9:f3:c9:97:07:0c:11:fb:d3:55:26:82:
         5f:cf:e3:7e:8d:05:a8:09:07:8e:03:00:6d:00:51:b2:bf:4a:
         78:e3:ed:e9:96:55:ee:fa:11:44:9a:b0:5e:ad:f8:f7:4c:6b:
         11:b2:d2:3c:db:62:65:8b:4e:57:4d:49:01:2a:0f:bc:ac:8b:
         1a:9b:d8:c9:a4:df:75:26:5f:d1:1b:0d:83:ba:be:1e:b0:45:
         f9:78:e1:07:79:30:5d:df:34:bd:71:19:01:d3:7b:22:4d:8d:
         83:86:b8:23:1a:06:9b:e5:26:e9:39:e3:7e:aa:04:46:9e:74:
         f8:72:fe:89:2c:d8:44:d9:4b:83:47:ba:11:89:22:b5:2d:72:
         6a:5f:8e:89:f4:6e:ed:e8:41:05:aa:15:08:34:78:81:62:93:
         ca:d8:d2:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:38:47 2024 by rpki-client on console-fra.rpki-client.org