Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/UDd0hoq9lsfujiOEtHsDlOUm3WQ.roa
File:                     UDd0hoq9lsfujiOEtHsDlOUm3WQ.roa (raw, json)
Hash identifier:          3UJkZ8UmfSeOjad0EKceaBbwcatRwNecfQkXnmYaXEE=
Subject key identifier:   50:37:74:86:8A:BD:96:C7:EE:8E:23:84:B4:7B:03:94:E5:26:DD:64
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       07C0
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/UDd0hoq9lsfujiOEtHsDlOUm3WQ.roa
Signing time:             Tue 30 Apr 2024 02:08:45 +0000
ROA not before:           Tue 30 Apr 2024 02:08:45 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        183.74.128.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1984 (0x7c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr 30 02:08:45 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=503774868ABD96C7EE8E2384B47B0394E526DD64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:1e:05:e4:3d:90:a4:f7:f3:28:b0:02:3d:26:
                    ae:2f:14:9c:df:8e:37:36:e3:2d:40:54:3e:4a:08:
                    9a:1b:1a:5b:b3:7a:b6:61:fe:cb:f5:10:52:9c:12:
                    cf:7f:c3:33:07:b0:1b:6e:b3:67:9a:9f:28:8e:49:
                    bf:bc:88:e5:b4:0b:1e:7a:4c:44:14:6d:eb:53:4c:
                    e3:cc:f0:83:07:97:63:60:ad:ee:53:54:e7:2f:c4:
                    f1:85:5e:c6:64:f9:61:3f:fb:fb:d6:5e:19:bb:09:
                    58:0d:54:29:72:7c:03:7e:ed:6c:fc:e1:ef:cf:1c:
                    a4:20:64:45:b4:9e:32:1c:dd:fb:04:e2:b2:33:98:
                    42:c5:ad:a5:34:6b:c1:c1:b0:f4:b2:7c:0b:78:68:
                    0e:a8:c2:f5:c5:08:68:71:82:e1:19:b0:b3:2d:6b:
                    fe:3a:c4:16:13:10:95:dd:01:6c:d2:b8:8f:95:65:
                    ce:52:c6:69:d4:47:09:ef:fa:19:40:3f:3e:5a:b9:
                    f2:61:48:89:2b:e5:ce:c9:4e:4b:a3:9f:85:73:45:
                    7e:cd:14:c3:9c:ca:3c:20:f0:ea:dc:cd:2b:0a:06:
                    0b:e7:47:6c:64:57:79:34:7f:6b:72:a0:f9:e7:51:
                    d9:ed:f1:24:aa:a5:67:23:ca:bf:ce:32:28:d2:08:
                    3c:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:37:74:86:8A:BD:96:C7:EE:8E:23:84:B4:7B:03:94:E5:26:DD:64
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/UDd0hoq9lsfujiOEtHsDlOUm3WQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.74.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         5f:e9:d5:de:5c:4a:57:b6:19:1c:29:11:4b:2a:f9:ab:1c:b1:
         8d:d7:ba:75:97:c7:2a:03:6d:38:33:7f:56:97:8e:5c:ad:57:
         15:9d:28:fb:c2:f8:6f:bc:20:7e:dd:8d:30:a2:dd:36:92:86:
         c9:43:c2:14:22:3a:d0:17:87:91:26:64:83:31:c6:ea:ca:6f:
         9e:1e:96:37:32:82:e6:35:81:fd:8c:33:99:ec:a9:83:85:85:
         2b:2f:5e:52:54:08:6a:3b:e4:11:84:20:95:c7:99:cc:23:38:
         a1:06:b8:b0:42:3c:bb:84:b3:c6:02:6c:89:d8:66:5e:92:44:
         5d:db:b1:ec:7f:99:90:03:d5:df:39:79:15:84:43:bf:3d:64:
         48:0d:cc:7b:20:d2:89:75:42:c1:04:6c:27:67:ab:de:1f:d3:
         1c:8f:d1:23:b8:64:d7:f3:24:cd:5b:0f:61:13:67:16:13:56:
         bc:b8:ba:3a:ce:4f:0d:7a:60:21:f5:49:ad:b6:02:94:0b:97:
         8e:0c:22:74:e6:a8:3c:40:6f:4b:9b:d8:f0:62:6b:d1:bf:fb:
         93:46:74:20:ff:e7:aa:9b:16:41:d1:ec:5f:77:85:b0:c0:57:
         b9:df:52:95:ac:f3:76:7d:70:8a:f4:14:99:c2:5a:65:0b:e0:
         29:17:13:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:45:40 2024 by rpki-client on console-ams.rpki-client.org