Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/WzAP9d-_y_AluTxzlvJmwJKIIps.roa
File:                     WzAP9d-_y_AluTxzlvJmwJKIIps.roa (raw, json)
Hash identifier:          5CFyEGDy/1lT7ebH6SnznPicjZ4zhwNmkrHAqrzTcQo=
Subject key identifier:   5B:30:0F:F5:DF:BF:CB:F0:25:B9:3C:73:96:F2:66:C0:92:88:22:9B
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       06B7
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/WzAP9d-_y_AluTxzlvJmwJKIIps.roa
Signing time:             Tue 30 Apr 2024 01:46:51 +0000
ROA not before:           Tue 30 Apr 2024 01:46:51 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        1.74.0.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 23 Jun 2024 11:53:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1719 (0x6b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr 30 01:46:51 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=5B300FF5DFBFCBF025B93C7396F266C09288229B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:5b:ab:0e:d4:37:13:af:03:9b:36:55:a0:f5:
                    21:58:83:a6:6c:13:45:c2:1b:02:de:d9:27:a7:4d:
                    93:70:b7:7e:12:b0:a5:df:3c:b2:8d:af:cb:d1:e9:
                    95:f4:1e:a8:06:4f:4c:ad:f4:6b:35:d2:99:7d:68:
                    ad:4f:17:f8:28:cf:89:45:14:ba:fb:58:52:da:91:
                    65:96:dc:c4:59:8f:a9:41:c6:a6:bc:75:a5:19:63:
                    9f:24:b7:e8:2d:e4:d7:01:e2:de:c8:3e:5a:a6:34:
                    e9:a5:ab:39:db:49:37:ea:b5:0d:13:f1:7a:2e:41:
                    4e:a7:27:eb:17:af:d0:90:20:44:36:6d:5a:ea:ce:
                    bc:ec:58:b8:f7:61:19:76:a2:b8:a8:a3:16:98:5c:
                    73:e8:d1:a5:83:ca:29:4c:f0:7c:70:04:cc:97:a5:
                    ff:86:ce:72:dd:4c:11:1a:c2:99:2b:03:7a:1c:c1:
                    7d:d5:ec:67:26:42:fb:8a:83:49:6d:cf:3c:b1:33:
                    36:00:30:a3:ba:ae:f3:af:bd:4c:d4:96:ec:e1:b4:
                    68:4c:6c:78:0b:1a:ed:bb:47:b6:41:8d:e7:21:1e:
                    2f:a4:1b:4c:8e:93:18:17:4f:b5:25:eb:82:8e:de:
                    f7:7f:bf:fc:6e:36:e0:bc:e1:58:08:6f:a9:0e:92:
                    d5:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:30:0F:F5:DF:BF:CB:F0:25:B9:3C:73:96:F2:66:C0:92:88:22:9B
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/WzAP9d-_y_AluTxzlvJmwJKIIps.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.74.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         95:64:21:0f:43:0f:46:5c:53:25:0c:88:e8:c9:7e:b7:5c:e9:
         1a:78:27:30:f3:b1:68:78:e1:ad:20:99:03:1c:38:f8:d9:e0:
         8b:66:68:cc:54:fc:e7:5b:7f:87:7c:e6:0b:ca:c0:a4:64:98:
         11:6a:b6:18:e7:40:b5:ea:33:93:f7:51:78:3b:41:6e:68:7e:
         ed:ec:f0:90:fc:e8:a2:83:05:c6:24:a3:59:fa:db:be:67:2c:
         93:21:4b:0c:fb:3d:70:04:29:bb:17:8e:fc:6b:6a:98:65:b2:
         9c:1b:08:91:cf:99:0a:ad:6d:95:44:c7:d7:c4:4c:2a:2d:78:
         6a:ff:98:f3:18:c7:da:8b:41:a8:3f:0a:a1:cf:63:8c:f3:02:
         f2:a3:ae:1d:2b:e8:5d:bf:55:73:61:71:32:54:2a:1b:2f:c9:
         da:91:1e:90:ff:f4:07:6c:44:a2:a5:6e:24:5b:a0:41:de:86:
         e9:59:de:f4:98:e2:40:64:88:af:ee:6b:5e:b6:60:d7:a4:cd:
         b2:61:5d:08:91:6e:e1:c1:f5:33:82:11:8e:bb:8f:bd:83:29:
         e0:41:60:da:ae:86:05:b4:ff:5d:b7:7e:ff:e1:7a:20:43:27:
         06:32:64:85:cb:b0:18:e5:4c:86:96:92:dd:b6:b4:01:f8:b1:
         80:f5:3b:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 12:57:21 2024 by rpki-client on console-fra.rpki-client.org