Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/_eWc4zeUAiTDymmFPf7NXiSeb74.roa
File:                     _eWc4zeUAiTDymmFPf7NXiSeb74.roa (raw, json)
Hash identifier:          AkXOpaUEY9Tcs2ByBtLgAUrE30Deq8nXLt19/BCAxa4=
Subject key identifier:   FD:E5:9C:E3:37:94:02:24:C3:CA:69:85:3D:FE:CD:5E:24:9E:6F:BE
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0472
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/_eWc4zeUAiTDymmFPf7NXiSeb74.roa
Signing time:             Thu 27 Jul 2023 16:44:06 +0000
ROA not before:           Thu 27 Jul 2023 16:44:06 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     9605
IP address blocks:        219.122.68.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1138 (0x472)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jul 27 16:44:06 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=FDE59CE337940224C3CA69853DFECD5E249E6FBE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:b2:4a:76:66:8e:20:d2:1b:a9:58:81:70:f7:
                    97:ce:73:82:bc:76:bf:7c:65:ef:b0:14:d9:c0:ec:
                    7b:47:ad:64:5d:3f:1d:58:15:30:74:64:6e:7e:8b:
                    5e:b5:9a:f4:ca:e9:79:7b:b4:af:92:4c:1f:8a:f6:
                    eb:00:be:61:3c:c1:ae:f1:71:52:33:3f:91:f4:4e:
                    12:f2:c0:c3:47:7e:a0:ab:58:9b:5c:c2:14:3f:64:
                    25:ae:da:08:78:44:fd:a5:fe:cd:80:88:ee:73:8b:
                    01:b0:a3:ab:c7:5a:00:33:48:13:2b:c1:81:44:54:
                    eb:d7:cd:97:eb:7c:c2:be:d7:8a:19:b3:34:55:90:
                    73:f3:d9:20:e1:bc:45:a2:54:14:e9:2a:30:30:db:
                    82:53:65:c5:06:7a:1f:51:a9:1c:06:f4:39:d5:72:
                    b2:7b:21:c7:28:1b:ff:26:ab:76:f1:c6:c3:c4:51:
                    e8:1a:ad:72:7e:9a:26:e7:74:4e:73:2b:d9:ef:de:
                    be:25:55:4b:c2:62:e1:6b:c2:3e:30:58:41:c2:2b:
                    f0:56:8a:92:81:e4:3e:74:e2:14:02:fe:e8:76:12:
                    57:4c:6b:28:08:c8:f7:8f:89:57:c1:29:e8:af:4b:
                    b4:7b:c3:fb:ce:4e:13:59:d5:4d:1e:47:04:b1:a7:
                    11:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:E5:9C:E3:37:94:02:24:C3:CA:69:85:3D:FE:CD:5E:24:9E:6F:BE
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/_eWc4zeUAiTDymmFPf7NXiSeb74.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.122.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c5:d5:26:c5:e6:fd:8d:92:71:c9:f2:59:5a:6b:8d:2f:75:02:
         35:e5:eb:64:4c:66:d0:7e:bf:e6:f1:3d:1a:6b:b6:74:88:44:
         d3:17:01:8e:04:ee:40:21:4c:51:c9:89:16:76:88:62:51:12:
         ca:8b:06:b6:81:61:60:f9:39:a8:0c:29:57:bc:6b:85:58:49:
         f8:a1:0e:30:ce:25:ea:cb:5f:fd:61:9d:a3:a0:c4:30:03:14:
         0c:34:c5:60:25:5d:ed:5a:81:34:d0:01:96:dd:00:4e:bf:78:
         a7:94:93:41:60:48:26:1b:8f:1b:30:1c:d8:83:2d:2d:78:1f:
         89:da:f9:e6:aa:4e:49:73:74:07:1e:85:14:5f:71:56:24:ec:
         81:b1:28:a3:03:6a:0a:8f:07:79:d4:a1:2d:64:b4:56:68:2d:
         11:ba:49:60:f7:ff:69:1a:1b:f5:a9:6c:79:f4:7c:85:85:da:
         6b:4c:27:68:03:bd:6d:a0:52:a2:9e:92:22:2a:0a:df:31:0f:
         c3:f8:49:95:bc:05:d1:37:c1:3a:be:b7:2a:e8:cd:b6:87:5f:
         61:50:7a:70:64:32:2d:8e:6f:12:11:18:06:c4:79:72:7e:fd:
         bd:21:a7:72:07:0b:7d:92:c2:4b:3c:5e:03:8a:42:07:37:f9:
         25:cf:fb:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 15:54:31 2024 by rpki-client on console-ams.rpki-client.org