Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/_WlPkYm6OUQjD7sh6vrrREng6h0.roa
File:                     _WlPkYm6OUQjD7sh6vrrREng6h0.roa (raw, json)
Hash identifier:          1riJ4waB9C9FI5GGrw3nyO42/WuxMIAf+MuMduQ1Ttc=
Subject key identifier:   FD:69:4F:91:89:BA:39:44:23:0F:BB:21:EA:FA:EB:44:49:E0:EA:1D
Certificate issuer:       /CN=F89E0F15C1E20E191AAF17288F6E30FF01869A6E
Certificate serial:       3A
Authority key identifier: F8:9E:0F:15:C1:E2:0E:19:1A:AF:17:28:8F:6E:30:FF:01:86:9A:6E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/_WlPkYm6OUQjD7sh6vrrREng6h0.roa
Signing time:             Tue 30 Apr 2024 01:43:19 +0000
ROA not before:           Tue 30 Apr 2024 01:43:19 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        148.67.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 14:50:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58 (0x3a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F89E0F15C1E20E191AAF17288F6E30FF01869A6E
        Validity
            Not Before: Apr 30 01:43:19 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=FD694F9189BA3944230FBB21EAFAEB4449E0EA1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a3:63:a0:12:17:96:23:2f:8b:97:a6:99:c3:
                    cb:a0:d0:ed:66:31:3f:e7:05:b4:de:85:d7:c3:7d:
                    bc:70:19:77:b1:97:af:67:b2:52:69:12:3b:d6:20:
                    9c:e0:7d:96:0d:63:4f:02:6c:98:9a:61:ea:21:64:
                    ac:88:c5:39:05:36:6d:45:c1:42:0d:c2:2d:48:b2:
                    4a:e0:ec:a8:39:20:be:fb:27:72:56:16:45:fe:bd:
                    cc:6b:2e:c6:12:dd:ff:a0:c2:77:29:88:90:48:ba:
                    c3:f9:e4:ee:1a:7c:ca:11:75:c7:56:a9:0a:89:05:
                    47:ff:42:19:86:84:c3:5b:ef:12:c7:3f:1c:2d:07:
                    e6:18:b6:c0:19:34:05:cd:a4:fd:44:ef:81:bf:41:
                    b4:8a:26:f0:74:65:ab:65:4f:a3:58:0b:bd:26:c8:
                    30:44:bd:18:2f:4e:29:f5:4c:f6:30:12:4b:7f:8f:
                    25:40:fd:c4:b3:37:b3:d8:b4:df:ae:0d:5d:80:87:
                    93:d3:d4:dc:1f:d5:79:0e:b7:fe:6b:a5:03:ca:d2:
                    71:f3:ee:6a:e8:aa:fa:80:29:a0:f6:64:27:db:ae:
                    da:ab:d8:f5:a1:75:00:04:f6:4b:cf:46:19:28:1b:
                    49:99:41:1c:5b:5a:84:b9:48:1e:99:9e:58:9b:6f:
                    d3:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:69:4F:91:89:BA:39:44:23:0F:BB:21:EA:FA:EB:44:49:E0:EA:1D
            X509v3 Authority Key Identifier:
                keyid:F8:9E:0F:15:C1:E2:0E:19:1A:AF:17:28:8F:6E:30:FF:01:86:9A:6E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/_WlPkYm6OUQjD7sh6vrrREng6h0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.67.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         18:f3:87:84:84:a3:51:74:7d:3c:0c:f3:eb:91:87:77:6d:00:
         11:36:40:4b:7c:c1:c0:c2:32:b2:47:a2:07:2a:60:dd:db:0c:
         0d:ba:d1:7c:b7:9f:e9:cd:de:bd:5a:ee:4a:ff:ff:79:44:f7:
         6c:81:7a:82:30:ca:21:d1:5b:e1:12:3d:f5:6c:b7:7a:fc:6b:
         dd:99:a6:c0:9b:d0:84:bf:50:78:54:8e:87:e2:7b:d9:1f:33:
         cd:1f:61:7c:7f:e3:7c:bc:61:60:cb:aa:e5:9a:90:7d:5f:a2:
         91:46:41:87:82:44:5a:37:7a:9f:49:53:0b:a5:6f:59:6b:e2:
         28:fc:75:4b:ab:13:2d:ca:86:92:b1:80:31:a9:fc:8c:10:11:
         b5:40:19:06:ea:e4:25:16:eb:fd:9b:5b:46:92:9c:bd:2a:a1:
         70:0e:08:48:17:5d:7b:02:69:aa:fc:f3:b5:94:94:75:a4:c5:
         41:79:92:b4:1a:93:8b:3c:4a:b3:ec:3e:52:02:fa:89:bc:38:
         76:6d:e2:86:f6:51:ee:50:23:58:98:04:f1:2c:68:e7:3c:80:
         5a:d1:ab:12:69:cf:08:fe:01:27:e6:92:ec:54:1e:4e:9b:52:
         0b:b0:15:06:d9:df:02:0e:64:85:c3:fa:af:f3:96:8b:f1:98:
         36:16:e2:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 15:54:31 2024 by rpki-client on console-ams.rpki-client.org