Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/TQ3czdhIaak_RA2IqolVj0G77u8.roa
File:                     TQ3czdhIaak_RA2IqolVj0G77u8.roa (raw, json)
Hash identifier:          sWvA7PSKgrBk5izDsQDhBsYIobKu55TicfbNl3LqQz8=
Subject key identifier:   4D:0D:DC:CD:D8:48:69:A9:3F:44:0D:88:AA:89:55:8F:41:BB:EE:EF
Certificate issuer:       /CN=F89E0F15C1E20E191AAF17288F6E30FF01869A6E
Certificate serial:       2D
Authority key identifier: F8:9E:0F:15:C1:E2:0E:19:1A:AF:17:28:8F:6E:30:FF:01:86:9A:6E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/TQ3czdhIaak_RA2IqolVj0G77u8.roa
Signing time:             Thu 27 Jul 2023 16:54:09 +0000
ROA not before:           Thu 27 Jul 2023 16:54:09 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     9605
IP address blocks:        146.99.0.0/17 maxlen: 17

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 14:50:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 45 (0x2d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F89E0F15C1E20E191AAF17288F6E30FF01869A6E
        Validity
            Not Before: Jul 27 16:54:09 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=4D0DDCCDD84869A93F440D88AA89558F41BBEEEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:43:8e:db:3e:d2:a8:3e:d7:71:17:13:ed:96:
                    07:39:a5:22:a6:8e:2d:9c:ff:95:eb:bc:d7:22:18:
                    bb:16:99:28:e2:05:59:e4:19:76:db:1a:20:92:50:
                    76:d2:03:7c:c1:02:8e:6f:d3:4e:a2:01:b6:02:36:
                    9b:37:40:0a:f2:76:25:9b:6d:30:e1:87:46:82:59:
                    c3:32:52:bf:44:62:43:75:0b:83:fc:3c:c3:df:b8:
                    9e:8c:b6:6a:30:77:e3:cb:ed:17:13:dd:e2:62:55:
                    df:7d:5d:2b:a8:35:00:4f:8d:e6:d9:18:63:be:af:
                    76:3e:f9:4c:0f:8f:2a:69:c2:f4:a3:21:3c:38:6d:
                    33:9b:73:82:a5:2d:06:0e:09:f6:c8:25:95:71:f4:
                    c3:22:bd:5a:6d:c0:bb:f8:ce:f4:bb:79:9a:8b:3f:
                    bf:0d:3a:5e:c9:50:af:30:b7:e2:1f:fb:10:37:e4:
                    22:39:e0:fc:05:6b:9e:8d:22:80:fc:5a:36:bb:01:
                    73:8e:cd:ad:ce:a5:94:1c:21:e5:04:54:ef:2e:6f:
                    80:c7:ae:d9:d2:95:01:81:e7:88:11:69:0d:09:a7:
                    f6:17:f6:88:fc:e7:e6:71:9d:2c:5f:80:d0:93:8d:
                    19:89:a9:12:2e:4c:ec:d9:fd:74:29:b1:9b:da:2d:
                    ca:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:0D:DC:CD:D8:48:69:A9:3F:44:0D:88:AA:89:55:8F:41:BB:EE:EF
            X509v3 Authority Key Identifier:
                keyid:F8:9E:0F:15:C1:E2:0E:19:1A:AF:17:28:8F:6E:30:FF:01:86:9A:6E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/TQ3czdhIaak_RA2IqolVj0G77u8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.99.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         7a:a8:23:56:18:3f:99:cc:b2:82:ed:2b:ee:38:1d:2a:59:c8:
         1b:af:9c:8e:a4:57:b7:f4:4f:45:3d:1e:f7:b4:6b:c3:6c:be:
         62:86:6f:fd:ac:6d:27:74:e7:07:8f:f6:13:ec:1f:42:ac:5a:
         6f:3d:00:e1:db:eb:08:79:e6:21:4a:bd:5e:0e:6e:50:e5:74:
         75:54:74:ef:23:5b:21:22:57:8b:00:43:82:ec:a9:bf:a2:d7:
         1e:68:49:ce:aa:51:5d:0a:43:64:df:dd:0c:4c:bf:8b:ea:3e:
         d8:01:00:5e:83:e7:f0:b4:76:eb:c0:32:c7:8e:27:d6:96:5e:
         27:6d:c3:f3:a7:13:bc:a1:e2:84:67:cc:8d:3e:3d:0a:7e:5d:
         69:5b:ad:2a:be:85:7c:43:a9:cb:a8:1d:a6:f1:3a:21:6f:52:
         c8:f3:9a:46:4b:2c:98:db:18:a7:a1:d0:ff:1e:25:cc:1b:73:
         ab:22:ff:d0:a3:b7:c7:38:8b:1e:4f:96:f3:4a:75:43:c3:c7:
         a9:85:fb:de:7f:bb:a0:47:e3:98:10:69:35:32:02:e1:63:cb:
         55:bf:6b:3f:77:97:3c:71:ba:15:a8:06:33:83:d7:fc:5e:4e:
         60:05:42:c3:14:96:fa:99:a2:b9:b0:af:f6:4b:5b:cd:3a:77:
         2f:98:64:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 15:54:30 2024 by rpki-client on console-ams.rpki-client.org