Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/bDWl4iOEU6DTrvZEc_S88-8qA9o.roa
File:                     bDWl4iOEU6DTrvZEc_S88-8qA9o.roa (raw, json)
Hash identifier:          oL+f27vSo0HSiFt1KXGg+JpMh0vQmDbDBE/S1pE+qDQ=
Subject key identifier:   6C:35:A5:E2:23:84:53:A0:D3:AE:F6:44:73:F4:BC:F3:EF:2A:03:DA
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0A2B
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/bDWl4iOEU6DTrvZEc_S88-8qA9o.roa
Signing time:             Sun 30 Jun 2024 01:46:31 +0000
ROA not before:           Sun 30 Jun 2024 01:46:31 +0000
ROA not after:            Tue 24 Jun 2025 10:46:45 +0000
asID:                     9605
IP address blocks:        183.72.128.0/17 maxlen: 17

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:41:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2603 (0xa2b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun 30 01:46:31 2024 GMT
            Not After : Jun 24 10:46:45 2025 GMT
        Subject: CN=6C35A5E2238453A0D3AEF64473F4BCF3EF2A03DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:00:d2:95:b4:e9:6e:92:b2:ae:80:84:d0:e0:
                    f1:5b:7d:5e:f4:18:f7:ce:9f:79:e7:06:61:60:3d:
                    f1:df:b6:19:7c:50:c1:6d:49:e4:d6:1c:c1:2e:9f:
                    38:b7:a9:93:e4:1b:f6:bf:b4:98:63:3a:c0:e6:07:
                    68:f0:63:c5:58:6e:41:b4:11:58:74:11:f4:cf:53:
                    00:e4:aa:18:b9:11:9f:43:bc:f6:bc:de:5d:ec:cf:
                    dc:ee:bf:da:c0:96:9e:59:7e:2c:d7:58:f0:50:5e:
                    0e:38:45:95:85:86:d6:7a:2b:f2:9d:d2:b1:4f:96:
                    5a:07:f9:47:21:de:08:82:81:d8:40:22:fd:5d:3e:
                    24:28:8f:6a:12:44:cc:5e:4f:91:c9:28:ed:de:18:
                    47:25:1a:16:f7:86:a5:9d:c3:e8:1f:f7:14:7f:48:
                    5b:cc:fc:92:dd:71:4d:e7:45:e2:b5:04:ec:a1:f4:
                    52:ad:76:9b:d4:31:8a:3b:82:c8:c6:aa:f7:a9:f5:
                    b0:7b:a9:1f:55:d5:2e:ec:c3:de:f5:a8:14:17:6f:
                    8b:44:ef:e0:9d:9a:30:25:bc:71:df:58:86:1c:5e:
                    53:18:21:f5:5b:7b:16:a7:19:90:21:a1:20:81:4e:
                    1a:5a:d7:a2:19:5f:f9:95:b1:fc:a3:ee:a5:8b:86:
                    42:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:35:A5:E2:23:84:53:A0:D3:AE:F6:44:73:F4:BC:F3:EF:2A:03:DA
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/bDWl4iOEU6DTrvZEc_S88-8qA9o.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.72.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         06:96:e5:78:30:1e:f8:db:74:15:d3:6d:73:a6:f5:37:9d:7f:
         da:90:05:f2:63:fa:c9:21:4f:65:f8:91:81:ef:c2:5b:f4:53:
         63:f3:7e:d8:4f:f1:1b:7a:a8:bc:12:de:a9:1f:8f:1a:d4:85:
         89:e6:2a:42:be:b2:01:c4:c7:ab:c3:02:01:e8:1a:c6:c8:73:
         cb:79:78:8a:57:3b:de:5c:21:48:58:20:c1:60:6b:fa:56:e3:
         4c:00:63:69:82:5b:64:36:e8:de:b4:c3:be:b4:a6:5f:b0:b3:
         ec:ec:6a:50:a3:a4:84:3a:72:ba:4e:16:f6:06:8e:6a:16:d0:
         6c:7b:f1:d4:ac:d0:f7:1f:ae:1c:ab:5b:2d:67:6e:f3:e4:e8:
         c6:55:48:1d:23:8c:34:2a:bd:54:ef:34:76:d4:05:44:6a:4b:
         4e:20:d8:e2:6e:b7:33:f3:b7:41:c5:e4:fe:5b:54:f1:3b:7a:
         f5:6c:c3:db:00:fd:38:6e:81:33:3b:18:ad:e1:2e:b8:ec:41:
         b8:88:c7:ec:cb:51:ce:d0:02:83:ca:2e:aa:b0:66:47:1c:65:
         cd:49:5e:e0:d9:f1:aa:8a:24:f0:01:b7:0d:e3:c0:c3:a2:2f:
         4f:af:c6:3b:2c:37:57:81:7d:98:39:0e:93:97:80:40:38:58:
         45:99:b1:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:24:01 2024 by rpki-client on console-fra.rpki-client.org