Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Z3kokDvak20EFVEsvpVkRkMAn_w.roa
File:                     Z3kokDvak20EFVEsvpVkRkMAn_w.roa (raw, json)
Hash identifier:          942YdQfK1qoi61OJr34FQ2wLverjUk7wdlkE2SpShDU=
Subject key identifier:   67:79:28:90:3B:DA:93:6D:04:15:51:2C:BE:95:64:46:43:00:9F:FC
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       04F1
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Z3kokDvak20EFVEsvpVkRkMAn_w.roa
Signing time:             Thu 27 Jul 2023 16:52:00 +0000
ROA not before:           Thu 27 Jul 2023 16:52:00 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     9605
IP address blocks:        1.79.40.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1265 (0x4f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jul 27 16:52:00 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=677928903BDA936D0415512CBE95644643009FFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a8:b7:67:99:04:c1:a5:07:15:e6:ec:a6:da:
                    1d:1c:33:50:c1:e6:f6:9d:23:4a:35:7e:e8:6e:42:
                    12:94:3f:d7:19:58:72:42:7a:54:0d:db:c2:de:fd:
                    52:6d:54:78:80:7d:41:11:1b:84:14:b5:82:f6:59:
                    e6:af:83:d7:09:d3:15:29:4d:7b:d7:64:88:6f:45:
                    e0:19:6f:32:39:1c:59:06:ff:6f:c8:08:ee:02:86:
                    3e:3d:f1:e4:20:3c:15:e1:0c:49:82:27:26:0f:f2:
                    81:b6:fe:22:15:44:ed:4a:41:ef:ff:51:26:74:8b:
                    0e:71:dd:6d:9c:75:8c:65:ff:c4:bc:2a:a4:b1:20:
                    b4:a6:e9:5d:72:fd:a5:fa:ec:b1:0a:a8:73:24:e5:
                    1e:e5:50:b1:a5:3e:82:0f:f7:df:f3:47:54:70:ab:
                    df:4e:3a:e9:c0:09:1f:94:a3:db:65:ed:86:f1:d4:
                    d4:f6:e8:08:a7:60:fb:53:52:dc:d3:0a:94:5e:9d:
                    9f:c4:11:a6:e5:d7:e1:72:cd:57:8e:b4:89:cd:65:
                    50:ec:47:e1:45:43:9d:a8:23:1f:6c:6d:90:9d:59:
                    09:9d:b3:12:6c:7d:d6:e5:86:d5:b7:cb:b4:5c:c9:
                    8f:a3:4d:f3:c3:05:2f:32:f4:a3:d4:32:ca:46:46:
                    f5:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:79:28:90:3B:DA:93:6D:04:15:51:2C:BE:95:64:46:43:00:9F:FC
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Z3kokDvak20EFVEsvpVkRkMAn_w.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.79.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b5:43:25:a0:3f:f2:02:b8:71:d2:0c:66:52:ab:23:9b:8c:6f:
         b8:12:0a:a6:16:c4:bd:06:83:d5:9e:c1:ef:1c:40:81:d1:66:
         ec:8c:10:6c:ef:9c:d5:ec:f6:d1:fe:32:d3:b5:f2:5b:b9:0f:
         9c:87:93:e6:10:8b:fc:bd:12:56:4a:a0:e9:1d:79:39:8d:a5:
         08:51:9e:95:71:5b:1d:a1:99:91:72:8b:c8:16:0b:45:d5:8b:
         8f:ca:be:e1:8c:26:49:d4:5c:c0:95:35:29:d2:ef:99:b4:e3:
         f0:cc:1a:75:0c:43:ab:72:70:38:df:93:ba:2d:95:76:d2:00:
         12:39:d9:7f:93:c6:60:ab:36:14:1b:de:07:c4:c4:a5:af:ca:
         2d:c1:2a:0d:6a:a9:11:e2:be:7f:e4:1e:80:8d:4c:0a:d1:f9:
         9b:bc:96:00:56:df:9a:f5:a8:65:99:1a:ad:f6:db:74:7e:ac:
         3b:97:8c:93:5f:73:5f:af:a2:85:fa:5e:0f:ee:0c:11:cb:33:
         60:8e:53:30:3f:9f:7d:ef:bd:31:74:76:28:c9:eb:9b:a4:d2:
         e8:f3:20:8b:9f:15:c5:9f:96:5f:ba:e9:12:a7:6c:6b:f3:19:
         76:01:c3:4e:15:bc:24:00:50:50:2c:21:1c:b1:62:4d:03:70:
         34:19:5f:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:38:47 2024 by rpki-client on console-fra.rpki-client.org