Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/_rfTNn7zGFLHw-JE-yrk7enlDbc.roa
File:                     _rfTNn7zGFLHw-JE-yrk7enlDbc.roa (raw, json)
Hash identifier:          EC2nN84g2HEbuaL1gPMXIPU5kWstnPbGFNw39YZoG4s=
Subject key identifier:   FE:B7:D3:36:7E:F3:18:52:C7:C3:E2:44:FB:2A:E4:ED:E9:E5:0D:B7
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       04B6
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/_rfTNn7zGFLHw-JE-yrk7enlDbc.roa
Signing time:             Thu 27 Jul 2023 16:48:10 +0000
ROA not before:           Thu 27 Jul 2023 16:48:10 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     9605
IP address blocks:        1.74.248.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1206 (0x4b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jul 27 16:48:10 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=FEB7D3367EF31852C7C3E244FB2AE4EDE9E50DB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:f2:73:f4:40:d6:9a:d5:75:37:b9:ec:d2:13:
                    12:cb:24:c5:ba:61:95:42:4b:f6:6c:70:d7:27:31:
                    b5:38:60:35:14:b2:cc:10:db:7a:89:73:20:59:85:
                    25:21:26:50:5b:a0:07:cc:eb:34:40:02:6a:f6:79:
                    0e:ec:4f:7e:2b:c7:05:9f:ec:98:86:4f:e3:f2:f1:
                    df:5a:eb:df:98:89:87:2f:4d:0e:88:30:2e:29:64:
                    57:1a:b5:41:ff:5f:0d:ed:62:38:6a:6f:12:21:c8:
                    96:fe:cb:5b:94:e2:65:f0:08:85:0c:08:c1:a0:4b:
                    a7:22:d6:0e:7a:01:8e:cb:9e:66:83:3a:08:86:45:
                    a2:2c:89:77:8e:12:60:69:5d:e8:5f:f1:26:ce:a9:
                    f9:48:97:85:bc:44:ab:1b:18:f5:93:74:3c:f4:de:
                    c7:bd:99:5b:ef:c8:4c:a6:93:a5:6a:a1:8c:ae:c4:
                    a8:71:d7:b9:04:ca:22:aa:5f:bb:26:85:0a:a2:09:
                    a2:ef:11:f1:a5:74:fb:53:3e:31:18:6a:69:d4:86:
                    3e:65:a9:fb:22:a0:35:9e:c2:ff:77:ed:41:b2:fe:
                    4b:02:27:a5:91:ef:3e:ef:19:d2:6e:ca:96:41:70:
                    ef:bc:b9:3b:74:fc:91:12:55:99:c0:99:26:33:fa:
                    92:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:B7:D3:36:7E:F3:18:52:C7:C3:E2:44:FB:2A:E4:ED:E9:E5:0D:B7
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/_rfTNn7zGFLHw-JE-yrk7enlDbc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.74.248.0/21

    Signature Algorithm: sha256WithRSAEncryption
         1f:d2:d6:cb:f8:af:d6:fc:15:89:b8:da:6e:ec:53:7a:84:b8:
         96:8a:3d:05:52:aa:b6:6a:74:2a:fb:10:1d:2d:ca:99:11:d7:
         cd:f2:49:38:28:56:96:f0:a8:59:2c:f2:41:c4:9f:81:a9:c6:
         61:3c:11:0b:2b:20:89:a2:9f:0c:7e:32:ba:e0:da:d5:10:61:
         d8:66:9d:82:73:e7:48:22:cc:26:6d:7f:4f:3f:1c:2f:ba:76:
         bc:da:24:b6:47:35:b1:e7:14:93:23:0b:2c:85:87:f0:dd:06:
         17:b0:4a:0f:75:39:1f:11:07:24:0d:d3:8e:24:a1:f2:15:68:
         33:04:36:b4:80:4c:4c:bf:a6:5a:af:41:cf:7d:ca:78:74:51:
         67:2a:a0:a1:d0:c1:2b:c0:6f:c7:21:6c:98:47:df:9d:37:96:
         5a:c5:a5:1a:9c:dd:da:6c:fe:f9:c3:d8:05:dc:82:66:41:ed:
         c6:7d:95:ce:a2:4d:6d:99:c8:9e:4d:31:f7:35:c9:88:7e:76:
         0c:59:b9:87:ba:03:36:4e:85:64:44:44:2f:9b:20:e5:d6:c1:
         55:79:2c:17:d8:ab:b2:39:f3:d9:61:24:89:ce:e0:1b:ad:6c:
         22:32:75:2c:22:b1:1c:48:62:4f:ec:b0:a8:6e:17:ef:5f:6f:
         e2:08:75:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 15:54:31 2024 by rpki-client on console-ams.rpki-client.org