Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/aQFghNwZX0-w_qBW0yhQGbezrbo.roa
File:                     aQFghNwZX0-w_qBW0yhQGbezrbo.roa (raw, json)
Hash identifier:          AyFKCjZsT14KGxL70vtzgv/imPablKPxJ17C5SOKNmM=
Subject key identifier:   69:01:60:84:DC:19:5F:4F:B0:FE:A0:56:D3:28:50:19:B7:B3:AD:BA
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       054D
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aQFghNwZX0-w_qBW0yhQGbezrbo.roa
Signing time:             Thu 27 Jul 2023 16:56:12 +0000
ROA not before:           Thu 27 Jul 2023 16:56:12 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     9605
IP address blocks:        1.78.192.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1357 (0x54d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jul 27 16:56:12 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=69016084DC195F4FB0FEA056D3285019B7B3ADBA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:84:e2:5e:fb:99:93:f8:20:26:45:73:e9:68:
                    ce:03:84:62:bc:f4:6b:89:17:2f:76:b4:2c:6f:25:
                    0c:20:22:32:d4:d0:c2:33:75:41:f5:d2:f9:60:b6:
                    ba:86:7c:91:db:aa:7c:7d:ce:54:af:c6:2e:cf:5c:
                    a4:17:77:38:df:30:74:84:7c:a6:0d:49:79:e9:c8:
                    74:5f:73:9a:d1:f4:53:a5:8e:1b:cc:9d:6d:cb:9d:
                    78:6b:b2:2b:17:d5:f8:13:94:61:9b:d5:84:c5:58:
                    10:fd:ae:c7:ae:1c:35:82:5f:73:27:37:cd:8c:a9:
                    da:22:4e:bc:d8:fb:48:60:b1:d3:04:80:a8:a0:fa:
                    9b:9e:02:07:53:7e:7c:62:23:af:eb:91:12:66:cf:
                    a0:d5:98:b8:2c:f2:8d:a7:4f:01:d8:ce:21:98:31:
                    bf:c5:2c:de:bc:1b:97:2b:d6:c0:54:79:ee:e0:3b:
                    ac:5a:9b:6f:5f:28:2d:3b:22:e9:40:92:7c:7a:bf:
                    12:86:e8:1e:21:e5:22:f7:d8:8d:48:a1:14:18:43:
                    4d:02:6e:d6:c0:59:fe:f8:f8:68:ff:5c:a3:57:5b:
                    8c:c4:bc:3a:d8:23:2d:a9:d5:8e:bd:f2:4f:0c:bf:
                    0b:56:ea:39:75:ca:50:55:48:c4:41:38:70:c8:8d:
                    04:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:01:60:84:DC:19:5F:4F:B0:FE:A0:56:D3:28:50:19:B7:B3:AD:BA
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aQFghNwZX0-w_qBW0yhQGbezrbo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.78.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         10:f3:ab:4f:01:e0:a4:c1:66:06:f8:b8:b7:b5:7c:61:2f:1c:
         51:69:76:fd:41:b1:36:40:25:bd:3b:9c:ef:e8:29:ec:e3:34:
         35:73:bc:35:af:06:c9:dc:d4:64:ac:57:a1:49:95:7f:f8:28:
         4f:a2:9e:a7:7f:88:db:f1:6a:22:81:98:f1:51:4a:68:ea:0b:
         d1:ef:a8:0d:a0:f4:27:66:b4:d3:20:cd:cf:56:08:97:de:49:
         ae:1c:30:82:4e:68:03:55:f5:f3:a9:f9:70:d6:36:57:1c:d1:
         90:e2:c7:9c:0e:80:c9:65:09:9c:f5:ef:fc:69:8b:41:b8:fe:
         69:d1:77:37:85:64:81:60:91:e8:f8:ae:4c:59:77:a9:1d:04:
         f5:6f:e8:44:82:01:e0:e7:19:9a:ef:06:c9:d1:cb:0a:68:27:
         9d:11:48:2d:10:fa:77:a6:de:7b:f6:c7:03:dd:ef:da:63:2d:
         29:55:be:52:8e:13:bc:47:1c:19:e5:45:06:0e:04:98:07:f3:
         a0:5a:24:ed:27:73:76:68:8b:50:3c:8d:b9:72:ce:61:30:73:
         d6:de:e4:d9:18:b5:a7:be:4c:2a:52:fa:26:1d:ca:33:07:63:
         96:5e:61:25:c9:84:a4:c5:58:5e:88:b3:3a:90:1c:92:77:fc:
         ec:25:fb:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 15:54:31 2024 by rpki-client on console-ams.rpki-client.org