Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/eGovF779mpvu-vLDEDZmoDyo4_g.roa
File:                     eGovF779mpvu-vLDEDZmoDyo4_g.roa (raw, json)
Hash identifier:          zt48SXzTqOW+SrjXXqhdg3riq0m33Ws0wst1l3p1F3w=
Subject key identifier:   78:6A:2F:17:BE:FD:9A:9B:EE:FA:F2:C3:10:36:66:A0:3C:A8:E3:F8
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0933
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/eGovF779mpvu-vLDEDZmoDyo4_g.roa
Signing time:             Mon 17 Jun 2024 08:19:59 +0000
ROA not before:           Mon 17 Jun 2024 08:19:59 +0000
ROA not after:            Sun 15 Jun 2025 01:30:03 +0000
asID:                     9605
IP address blocks:        1.75.112.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:41:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2355 (0x933)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun 17 08:19:59 2024 GMT
            Not After : Jun 15 01:30:03 2025 GMT
        Subject: CN=786A2F17BEFD9A9BEEFAF2C3103666A03CA8E3F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:47:9f:bf:6f:b5:fc:fa:fb:fb:22:4d:e8:b9:
                    71:cc:77:e8:9f:b2:a9:14:90:f2:c3:28:e3:5b:43:
                    79:ff:f9:e7:68:cf:80:e2:c1:7d:db:f1:10:1a:b1:
                    e9:93:6a:1c:41:75:66:dc:4c:c7:c5:9c:0a:91:a0:
                    b5:f0:ad:d9:e3:49:7e:a3:ec:36:ea:cc:5b:a8:93:
                    a0:e1:97:b9:23:e3:b1:66:81:14:9a:df:3a:68:be:
                    46:d2:6a:ce:75:69:77:73:97:05:f2:b8:f1:16:60:
                    5c:93:2a:ba:11:ef:41:1b:34:1e:40:23:cb:79:77:
                    62:23:2e:31:18:aa:25:5c:23:1a:b8:e7:1b:f7:75:
                    4e:72:ed:c6:a1:60:b6:86:b5:b5:cf:c0:cb:3c:80:
                    f8:db:b8:25:cc:74:41:6d:4f:35:cf:a6:d8:24:6d:
                    eb:53:95:0e:1e:2b:93:79:76:ce:45:66:a8:f6:ef:
                    b6:ba:b9:2d:73:69:ab:0a:94:b2:c2:95:66:aa:7c:
                    4f:59:b5:f3:65:80:ed:e1:1a:61:59:fa:80:8e:ae:
                    8a:33:31:c6:87:ab:8a:72:11:13:f9:31:fa:54:45:
                    5a:1b:1c:9c:e7:e4:ae:56:fa:b7:d2:3e:5b:15:d9:
                    5c:58:4e:55:d8:64:fa:95:e3:87:fb:5c:e0:77:8a:
                    9c:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:6A:2F:17:BE:FD:9A:9B:EE:FA:F2:C3:10:36:66:A0:3C:A8:E3:F8
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/eGovF779mpvu-vLDEDZmoDyo4_g.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.75.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         23:12:8c:d2:9e:e7:54:d7:64:32:75:d8:e2:75:2a:c2:c9:e2:
         a3:f9:c4:b7:ec:67:02:f3:80:e4:10:3d:65:27:f3:5f:2c:35:
         30:33:51:95:6b:0d:f6:df:b3:20:b8:3f:5f:e1:10:90:9a:c2:
         50:08:40:b3:2e:f7:2a:bf:cd:58:67:96:98:b9:30:79:ff:bc:
         e2:47:23:e5:60:15:2a:26:17:14:a3:a6:b1:2c:5e:16:eb:be:
         73:e4:34:00:ed:30:83:d8:e1:67:ad:34:71:70:2d:ae:39:a8:
         41:3e:29:f2:72:5c:39:a7:d8:fd:7d:a3:ae:2e:00:1a:d5:ca:
         50:c6:15:94:46:e6:cb:2c:be:02:cc:37:0a:8d:1f:d6:ac:16:
         17:cd:0b:67:1b:d7:12:d5:3f:5d:c9:d5:91:0e:15:d0:d3:17:
         c4:62:77:3b:75:ff:3b:93:41:aa:8e:aa:f9:39:45:4b:e2:d9:
         c8:c5:54:b9:4b:09:19:37:96:97:5c:ee:c6:2b:4c:ea:42:46:
         e3:33:8b:9b:c2:4a:24:94:19:55:5e:c5:8a:3a:2f:24:45:a7:
         33:24:16:a2:66:71:a8:10:1a:6e:96:8e:0e:16:a5:e4:4a:fb:
         15:5d:be:7b:fd:c4:f1:d1:ae:9d:0e:d8:78:98:0c:44:9f:fe:
         95:4f:4f:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:24:02 2024 by rpki-client on console-fra.rpki-client.org