Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/TxZezLAC-RR8oOxkuTnokdRh-pc.roa
File:                     TxZezLAC-RR8oOxkuTnokdRh-pc.roa (raw, json)
Hash identifier:          WdIv3OTXAxufmmKaGizhD6rFGpqz4bardNIXLwgv4HA=
Subject key identifier:   4F:16:5E:CC:B0:02:F9:14:7C:A0:EC:64:B9:39:E8:91:D4:61:FA:97
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0518
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/TxZezLAC-RR8oOxkuTnokdRh-pc.roa
Signing time:             Thu 27 Jul 2023 16:54:05 +0000
ROA not before:           Thu 27 Jul 2023 16:54:05 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     9605
IP address blocks:        1.74.96.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1304 (0x518)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jul 27 16:54:05 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=4F165ECCB002F9147CA0EC64B939E891D461FA97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:15:c4:b9:39:d0:63:6c:a6:d0:d2:bb:b5:f9:
                    68:c6:5b:f8:63:e4:60:ad:5b:05:3a:38:53:ea:26:
                    73:5c:bb:31:f4:30:ec:c3:b4:d4:ae:ea:ed:4b:3a:
                    c0:4b:b8:66:ca:23:4d:6f:e3:25:d2:69:6f:34:f9:
                    74:27:bc:11:c6:5a:4b:94:8e:b1:32:cf:af:dc:7c:
                    89:b0:db:f1:ab:69:e6:88:08:21:20:ba:cb:d3:fc:
                    f5:f1:3f:b0:ba:67:7e:4c:2e:87:0c:17:20:d5:4a:
                    f3:9b:dc:c2:02:cb:14:bb:11:0f:5e:49:d2:a4:ab:
                    91:99:3a:e7:d8:91:e2:e7:53:af:ae:ed:76:e6:f0:
                    3e:02:11:fc:17:38:a7:f8:8f:d1:e4:c7:4c:fc:06:
                    30:7a:30:97:87:91:c3:0f:70:26:5b:c9:0b:a4:5a:
                    8d:79:62:8c:aa:d7:12:5c:2f:83:04:a3:01:66:65:
                    e8:c3:d7:86:90:39:54:11:2d:12:52:c2:aa:35:55:
                    31:ea:9d:38:42:b0:86:f5:c9:95:4a:dd:d3:7e:c4:
                    0b:80:1a:34:d4:c3:46:4a:c7:3b:13:cf:51:bc:b6:
                    db:c0:58:e3:c1:4f:13:18:8a:c2:08:3d:b6:14:9d:
                    0c:75:49:0a:2e:cd:b2:27:d0:67:46:b2:0e:54:c6:
                    7e:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:16:5E:CC:B0:02:F9:14:7C:A0:EC:64:B9:39:E8:91:D4:61:FA:97
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/TxZezLAC-RR8oOxkuTnokdRh-pc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.74.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         d4:f1:00:cc:96:1e:6b:99:a6:77:2b:be:52:e0:72:5b:de:e5:
         b0:58:61:f2:56:2b:de:c0:a5:ff:be:9a:f9:f4:6b:14:c5:b1:
         b6:05:0d:87:c5:99:10:a9:5f:68:bf:2c:64:92:ae:eb:48:dc:
         f4:85:e9:68:bd:95:c6:9c:85:e9:97:4a:7b:da:e1:1c:0c:ea:
         7f:42:93:94:eb:82:18:99:23:63:9b:ee:7c:7a:04:99:44:09:
         8f:f4:07:1a:db:a2:0b:4f:01:1b:e2:aa:a5:ec:ea:a8:3e:a1:
         75:4d:5e:c1:29:de:c7:a8:48:bc:15:d5:0c:52:4c:16:8c:9d:
         37:a4:82:f7:2c:32:4e:2d:06:e3:ef:f7:16:d7:66:bb:6a:04:
         05:e9:cf:4b:50:2d:84:8f:c8:ce:24:46:53:b6:ae:64:bf:76:
         f1:c7:d4:46:8e:73:d7:b0:9a:81:9d:53:d9:11:8e:07:d9:e9:
         89:cc:3d:d4:5f:0c:c7:db:0e:4f:09:95:ff:34:ba:0b:6d:2c:
         c6:00:7e:23:8a:f4:77:cd:95:6d:f2:8d:ee:72:c3:92:f3:0a:
         c1:5f:c5:16:1f:9c:00:ea:bb:5a:3a:1d:74:37:e5:4c:08:59:
         5a:f8:99:99:ba:63:bf:6d:f3:60:88:e0:00:d7:57:aa:0d:2c:
         a4:16:de:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 15:54:31 2024 by rpki-client on console-ams.rpki-client.org