Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/ZYdpQkOh2csXWTEEU8Iux2_bxYA.roa
File:                     ZYdpQkOh2csXWTEEU8Iux2_bxYA.roa (raw, json)
Hash identifier:          P430QCGVsyh5pZrI3KHvOcOhJNutAWdjElTcpOOHrLM=
Subject key identifier:   65:87:69:42:43:A1:D9:CB:17:59:31:04:53:C2:2E:C7:6F:DB:C5:80
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       068D
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ZYdpQkOh2csXWTEEU8Iux2_bxYA.roa
Signing time:             Tue 30 Apr 2024 01:38:08 +0000
ROA not before:           Tue 30 Apr 2024 01:38:08 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        183.75.0.0/17 maxlen: 17

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1677 (0x68d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr 30 01:38:08 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=6587694243A1D9CB1759310453C22EC76FDBC580
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:4d:3a:89:5f:29:74:8d:7f:df:17:06:8e:53:
                    83:29:45:7f:b2:fe:34:44:ff:5b:11:66:08:51:f4:
                    ee:65:e5:31:c2:6a:45:29:8a:2d:76:15:f6:59:52:
                    07:f3:20:a6:12:8b:74:08:f9:df:67:c8:78:d8:76:
                    b3:66:9e:b5:8e:d3:39:fe:55:3b:ee:68:f8:90:78:
                    48:4a:0f:17:51:24:18:fe:7d:58:e8:f4:26:dd:e8:
                    89:4d:5c:27:2b:1e:63:98:93:29:ba:a2:60:f3:4f:
                    98:d0:fb:d4:01:1c:d8:b8:d9:75:6c:29:c5:4f:9c:
                    9d:d9:70:a9:10:2e:14:a7:47:1b:91:3c:19:5d:69:
                    27:59:4b:39:f1:41:c8:e5:4a:3f:9c:f6:a5:11:91:
                    50:d8:a0:67:28:20:2e:62:13:d5:85:33:2f:60:c7:
                    43:7d:82:fb:c9:27:ce:f3:72:73:1d:f5:55:8b:9c:
                    ff:4d:55:98:ac:82:0e:f0:fa:e0:d4:39:6e:5f:08:
                    eb:5c:a5:93:5d:15:33:05:42:fc:c5:57:7d:b5:ea:
                    56:fb:ac:3f:b2:a0:ba:80:0c:74:b9:b9:f2:53:80:
                    c8:13:02:81:e8:0d:a6:8d:dd:9e:e3:98:d2:a9:54:
                    0f:63:84:fc:1e:fd:ce:22:d8:f9:bb:28:e1:d3:38:
                    d7:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:87:69:42:43:A1:D9:CB:17:59:31:04:53:C2:2E:C7:6F:DB:C5:80
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ZYdpQkOh2csXWTEEU8Iux2_bxYA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.75.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         14:e1:f9:7b:27:e2:cc:80:60:3a:cc:1c:bf:e8:35:b9:d2:7b:
         0a:69:80:7f:5b:2d:3d:a0:da:cc:ed:87:25:c9:db:cb:65:e7:
         a4:56:97:b0:cc:4c:65:4c:e3:26:40:b6:88:15:37:85:d8:0a:
         7a:ac:51:6d:56:76:ae:86:71:65:c7:23:3c:2a:18:3b:c6:e7:
         b6:d6:25:fb:55:d8:d8:84:b6:57:09:d1:d1:36:69:30:bc:4d:
         a4:17:97:1c:57:31:74:57:38:5c:c6:08:a6:8f:46:55:e2:fb:
         ed:f6:b5:19:05:4b:b0:a2:40:3b:52:cf:7a:08:66:12:7c:bb:
         3b:9f:e6:e9:8e:cf:49:e1:84:f6:a2:4d:38:2b:14:57:ed:60:
         af:b6:c6:c8:ec:7c:5c:cb:7f:5e:09:7c:3b:ac:d4:b4:b1:23:
         7c:ae:3a:f3:fb:4b:0f:dc:4c:cb:cf:b9:28:3c:68:cd:8c:07:
         27:08:bb:56:08:73:11:1c:71:36:64:ef:c2:96:e8:8c:53:84:
         ce:56:35:f8:cc:99:3d:10:6b:0e:90:60:7d:c7:fc:ed:3a:84:
         dd:ec:6e:ac:a9:5c:fd:b5:51:62:43:c1:25:dd:07:dd:f0:4a:
         ba:cf:7a:82:c1:ca:f8:c4:c9:93:ba:8a:af:48:f4:f4:ad:d8:
         91:c1:6a:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:38:47 2024 by rpki-client on console-fra.rpki-client.org