Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/WnWH8VPzRe-2xpinXVCpZ4kzz0o.roa
File:                     WnWH8VPzRe-2xpinXVCpZ4kzz0o.roa (raw, json)
Hash identifier:          H0VhVe8ocT1OU42gFo1P+1n8NNmapnWmmlJOIJrKIo0=
Subject key identifier:   5A:75:87:F1:53:F3:45:EF:B6:C6:98:A7:5D:50:A9:67:89:33:CF:4A
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0703
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/WnWH8VPzRe-2xpinXVCpZ4kzz0o.roa
Signing time:             Tue 30 Apr 2024 01:52:52 +0000
ROA not before:           Tue 30 Apr 2024 01:52:52 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        183.73.24.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:41:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1795 (0x703)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr 30 01:52:52 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=5A7587F153F345EFB6C698A75D50A9678933CF4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:8b:70:a5:97:63:2f:5e:0d:7e:9f:bb:de:ff:
                    52:23:cb:13:1f:37:03:2e:80:4c:93:7e:1d:7b:58:
                    af:8b:6f:55:5c:dc:f4:56:78:e1:73:25:6a:83:7f:
                    cc:8b:1a:3e:83:a1:5b:ea:c1:42:ce:68:01:e5:6e:
                    2f:40:0c:6a:50:cb:c3:94:3a:89:5b:1d:cf:b8:ef:
                    4c:a6:95:8f:ad:a9:c0:2a:0b:f0:62:21:ab:4d:2e:
                    71:68:a7:eb:29:6a:e1:79:cd:87:5c:4a:fb:51:53:
                    b6:84:7e:07:07:52:f7:9d:77:49:e3:93:27:67:e7:
                    85:2c:94:b6:64:7b:d7:59:76:9b:f8:03:c7:a6:02:
                    f3:87:41:cd:7e:33:1a:e2:e0:08:04:eb:a0:9c:8f:
                    b4:b1:6a:25:eb:ef:ab:ab:f9:c9:7e:3b:db:60:84:
                    6a:2d:94:16:38:4b:47:fa:dd:1b:bb:8f:6a:9b:87:
                    8f:ab:39:f4:22:1f:86:0f:8f:3d:67:50:81:c1:5c:
                    4d:96:86:9a:cc:0d:49:57:e3:3a:6d:e5:0b:a9:09:
                    c2:58:e0:a8:a7:ef:16:12:6e:87:18:1d:17:15:f0:
                    d7:58:2b:51:48:61:3f:31:c0:80:f1:20:3a:42:79:
                    f0:71:96:1f:93:27:0e:61:f6:b0:14:02:b6:08:d5:
                    f0:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:75:87:F1:53:F3:45:EF:B6:C6:98:A7:5D:50:A9:67:89:33:CF:4A
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/WnWH8VPzRe-2xpinXVCpZ4kzz0o.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.73.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         19:b4:1c:e1:a4:ed:ae:f4:8b:ad:a0:69:60:e4:92:b2:da:41:
         95:70:1a:dc:92:3d:ae:4d:0f:2f:b9:0b:2c:70:fd:8a:51:65:
         ae:9c:8f:f0:a3:3d:c0:4a:f0:4e:a4:6b:9f:fa:c8:da:bc:65:
         ca:cb:00:7f:47:ab:f8:e0:b5:b2:97:d0:40:4f:ef:df:dc:d1:
         5b:b8:61:b5:30:28:d7:39:89:19:43:e0:df:f4:f7:53:bf:d6:
         9c:5b:46:f0:99:9f:94:29:41:86:47:97:28:35:47:a7:ce:3d:
         b6:a7:99:5b:d7:44:bc:57:5b:66:3f:82:7b:6d:22:93:84:5f:
         35:4c:22:4e:91:6d:47:f4:04:ff:e4:1c:40:1a:6c:b4:9a:ec:
         fd:5f:49:5a:49:40:54:12:7f:16:22:12:45:21:0c:c3:3c:59:
         fa:e7:d9:ef:70:88:6a:7b:4f:35:ae:90:f0:c6:b6:98:ed:85:
         4f:66:7e:f5:01:f5:7e:f0:09:f4:b6:65:5e:a1:44:db:9b:4d:
         16:8f:e6:c9:61:b9:67:63:6d:17:33:95:23:41:e0:ab:a4:fb:
         02:9b:a6:1e:4d:4a:cd:54:2c:da:35:ff:d9:2a:d9:4c:b0:4e:
         de:a8:14:60:20:ab:cb:9f:fd:ff:a1:4b:c6:93:d7:bc:2b:de:
         29:88:64:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:24:01 2024 by rpki-client on console-fra.rpki-client.org