Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/U48vUu3VrRRTDwB5pEqQfxUFgpU.roa
File:                     U48vUu3VrRRTDwB5pEqQfxUFgpU.roa (raw, json)
Hash identifier:          g6jYQLBNiG2ntOzyDWjJblkQ9TjeA3y29Fx3T9GKU1M=
Subject key identifier:   53:8F:2F:52:ED:D5:AD:14:53:0F:00:79:A4:4A:90:7F:15:05:82:95
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0583
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/U48vUu3VrRRTDwB5pEqQfxUFgpU.roa
Signing time:             Thu 27 Jul 2023 16:58:12 +0000
ROA not before:           Thu 27 Jul 2023 16:58:12 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     9605
IP address blocks:        183.73.24.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1411 (0x583)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jul 27 16:58:12 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=538F2F52EDD5AD14530F0079A44A907F15058295
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:98:df:cc:fb:9c:e2:32:60:a5:43:de:d1:c0:
                    c7:1f:54:f4:ac:c2:27:e4:61:42:53:15:6e:38:e3:
                    4f:fc:3b:2d:8d:3c:8f:a7:ca:04:44:43:88:c6:6e:
                    19:56:65:b1:d7:50:d8:55:3f:c2:c6:1c:dc:d3:71:
                    1d:b1:ae:af:56:6b:44:83:83:57:93:aa:38:3f:e5:
                    84:03:ca:06:43:0c:79:3e:04:ff:07:07:89:9c:46:
                    b5:88:66:22:68:26:49:68:3e:a8:7d:d0:f0:1c:05:
                    68:d3:d9:11:38:cf:30:d3:2d:6e:9b:e6:0e:09:37:
                    71:fe:8f:b8:9c:38:16:d9:73:7a:54:4d:2b:a4:6c:
                    a2:26:e2:13:ac:67:8b:72:a3:2f:0c:fc:02:a1:78:
                    cf:af:1d:df:f8:39:19:c4:32:fc:47:f2:d2:9e:b7:
                    f0:63:40:e3:71:30:59:74:f0:d1:6d:23:c7:29:5b:
                    46:fc:6f:2a:f1:4a:71:e4:30:55:06:93:1c:80:32:
                    3c:75:68:fa:5d:4c:4b:69:ad:fe:02:2a:1e:b3:0f:
                    31:e4:ac:98:05:f0:62:a0:15:4d:0f:7d:6b:93:b5:
                    19:5c:b0:bc:13:74:79:2f:88:54:0f:bf:b5:f2:5f:
                    b7:d9:0b:bf:15:76:e7:68:6c:6d:5e:e6:86:0a:e7:
                    ac:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:8F:2F:52:ED:D5:AD:14:53:0F:00:79:A4:4A:90:7F:15:05:82:95
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/U48vUu3VrRRTDwB5pEqQfxUFgpU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.73.24.0/23

    Signature Algorithm: sha256WithRSAEncryption
         84:d6:80:47:a9:36:10:53:7a:1b:ca:4c:ba:67:63:b1:94:b2:
         40:5d:69:20:1f:8e:68:b1:a5:1f:af:06:ce:80:91:65:72:0f:
         36:e8:c4:2b:57:b0:f3:0c:ef:c5:70:36:42:be:5d:c7:36:bf:
         3b:ae:0b:79:f3:d5:b0:4f:e9:90:8a:88:82:56:5d:64:a4:dc:
         2a:c0:60:03:af:5a:05:d3:05:a3:90:c2:79:63:17:a1:7b:46:
         44:bc:34:67:34:4c:d7:3c:db:6b:5a:bb:c5:bd:19:f5:fc:19:
         3a:19:bd:a8:bc:dc:ba:55:b4:03:55:e2:25:f6:5c:a8:ba:13:
         4f:ba:bb:27:f2:f6:d1:75:2b:dd:f5:e7:87:3b:ef:51:01:a1:
         0d:ba:a6:e0:82:2c:26:1b:dd:17:2b:cd:a9:1b:19:61:19:d9:
         57:b4:b9:d0:bd:36:80:c1:89:af:62:af:cf:20:ee:19:6b:75:
         b8:57:30:c4:79:b1:02:dd:ac:ef:68:a5:62:ef:a2:99:8e:6b:
         87:42:fe:35:cb:ca:8c:8a:76:ac:89:3b:83:95:7c:10:89:72:
         16:e2:26:01:c5:ce:0d:c9:d8:ee:04:7a:64:1b:f4:09:5c:0e:
         c3:d8:59:8b:02:c8:b2:6f:b3:08:55:c3:81:00:99:92:9f:cb:
         57:06:bd:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:38:47 2024 by rpki-client on console-fra.rpki-client.org