Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/_RRmegL58Zz8FUzBoCDEWYo2Y3Y.roa
File:                     _RRmegL58Zz8FUzBoCDEWYo2Y3Y.roa (raw, json)
Hash identifier:          2k0SAUSFqR3BZ3CchNk+i8gvab+X1O/p4nOm1IU3mcE=
Subject key identifier:   FD:14:66:7A:02:F9:F1:9C:FC:15:4C:C1:A0:20:C4:59:8A:36:63:76
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0548
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/_RRmegL58Zz8FUzBoCDEWYo2Y3Y.roa
Signing time:             Thu 27 Jul 2023 16:56:10 +0000
ROA not before:           Thu 27 Jul 2023 16:56:10 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     9605
IP address blocks:        219.122.64.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 23 Jun 2024 11:53:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1352 (0x548)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jul 27 16:56:10 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=FD14667A02F9F19CFC154CC1A020C4598A366376
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:0b:a8:f5:ff:a7:af:b0:51:98:4d:69:88:19:
                    55:16:62:93:92:a8:ec:25:f5:78:73:0e:ef:3a:8b:
                    f3:39:d6:b0:26:76:cf:75:9f:a6:a4:e7:b2:f1:0f:
                    a1:be:c2:0f:cb:dc:ce:cf:03:54:41:01:b4:6c:11:
                    d4:85:fb:dc:cd:e2:b9:d5:39:60:38:ef:fd:78:85:
                    82:76:e3:a5:bb:74:61:ce:8d:72:d0:7e:6a:f1:70:
                    d5:60:61:11:3b:32:eb:7e:70:ad:b6:44:2f:95:a4:
                    25:1c:f9:b8:a7:7c:e7:43:c7:05:9c:a8:f7:b1:df:
                    b4:1a:94:fc:48:d5:a3:70:eb:cb:ae:b0:d0:02:89:
                    57:ea:29:66:31:82:88:ed:da:5c:b4:0f:3c:9d:9d:
                    a8:cb:6d:d5:9f:75:0b:ba:47:85:83:39:02:99:f5:
                    3d:cc:79:92:61:5d:79:9b:42:04:21:e4:70:09:b5:
                    ed:28:04:79:07:a4:be:9d:05:50:c1:85:f0:1b:00:
                    d6:b3:5d:f1:74:bc:17:0a:b0:33:95:b4:7b:08:60:
                    41:ca:4b:bb:33:1b:7c:eb:c4:05:ee:80:c2:6b:34:
                    2a:7c:59:d4:c9:42:09:81:c1:3d:22:d1:cc:ea:6b:
                    55:b8:30:05:3c:af:c2:27:5d:05:c8:f8:e9:09:38:
                    d8:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:14:66:7A:02:F9:F1:9C:FC:15:4C:C1:A0:20:C4:59:8A:36:63:76
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/_RRmegL58Zz8FUzBoCDEWYo2Y3Y.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.122.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         17:2c:54:b2:59:5a:40:e9:29:98:ee:7e:af:98:29:50:6f:15:
         87:da:c2:44:a6:4c:52:69:e0:ba:d2:92:92:54:df:f2:50:ca:
         69:85:67:05:b1:3d:e3:e1:a0:a1:fc:45:7c:bc:c6:20:4b:39:
         de:2d:2d:0a:3a:93:5e:be:ae:85:c4:60:4c:0e:9f:53:0b:5e:
         f5:b5:d2:cb:00:f4:43:f1:7d:a1:fe:06:16:c7:64:24:b5:99:
         9c:65:84:06:93:0c:d1:7e:cd:54:d5:d0:9d:b3:f1:fc:a9:15:
         c0:58:a4:cc:40:48:fc:4d:1e:7c:0c:03:e1:2e:3f:00:c0:3d:
         09:00:8b:03:4d:49:3d:42:df:b7:82:c3:32:af:cb:70:0d:94:
         92:c4:18:d5:e8:8e:dd:8c:62:94:76:78:ea:d0:99:5f:9a:38:
         23:eb:b2:b2:95:9c:91:6a:62:3c:22:88:61:d8:b4:04:c4:0b:
         fa:33:09:09:f8:93:83:64:88:e4:1b:74:4e:c2:0a:df:5c:c3:
         b8:5b:73:3c:33:35:97:de:5f:a2:02:cd:d1:63:8a:d8:c7:2c:
         dc:e1:fa:ae:03:85:d1:71:c1:f5:d8:d9:54:d3:e9:72:19:03:
         c9:f0:76:82:3d:7c:ff:63:78:1d:29:69:6e:cf:40:6a:74:69:
         58:91:1c:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 14:31:54 2024 by rpki-client on console-ams.rpki-client.org