Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/f3e54d70LUfzQpokvP-9Ebf-Ez4.roa
File:                     f3e54d70LUfzQpokvP-9Ebf-Ez4.roa (raw, json)
Hash identifier:          2V/FylP8htFpe48Wv5WkT3T7QdcJXPw6XXHlccyfTfE=
Subject key identifier:   7F:77:B9:E1:DE:F4:2D:47:F3:42:9A:24:BC:FF:BD:11:B7:FE:13:3E
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       059D
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/f3e54d70LUfzQpokvP-9Ebf-Ez4.roa
Signing time:             Thu 27 Jul 2023 17:00:15 +0000
ROA not before:           Thu 27 Jul 2023 17:00:15 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     9605
IP address blocks:        1.75.188.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1437 (0x59d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jul 27 17:00:15 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=7F77B9E1DEF42D47F3429A24BCFFBD11B7FE133E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:0c:17:82:47:85:14:82:75:d0:b3:3c:f0:fd:
                    25:f3:15:31:5c:87:46:cf:ac:f5:bb:0e:be:c6:77:
                    48:79:ea:b6:3a:c0:b5:22:2d:95:e3:c8:49:12:0b:
                    16:90:3e:4b:92:1a:a7:53:ab:49:ba:da:7e:37:d3:
                    c7:ce:5a:9b:52:c7:52:d3:d0:1f:ac:a2:4a:7b:cb:
                    00:69:9c:a4:44:cb:ec:4d:04:ca:55:38:e8:57:a0:
                    82:35:ed:2d:b6:f5:ec:9b:15:51:cf:24:5b:7c:9b:
                    6a:5d:61:9e:a2:0d:09:2b:27:55:fa:9e:5c:e5:18:
                    c7:4d:c8:50:7b:8b:86:17:98:33:38:f5:84:95:0f:
                    7d:00:ae:e5:2e:67:44:f6:d2:46:ad:72:ed:01:a4:
                    6e:22:76:48:15:1d:32:ab:6f:1a:f3:3f:d0:bd:da:
                    5b:85:35:8d:5d:e0:2f:ef:6d:25:69:33:87:a9:73:
                    40:a3:56:be:0a:29:1e:28:75:ce:cf:dd:50:08:31:
                    47:29:d5:f4:d2:06:ff:20:7a:6d:2f:43:91:54:ae:
                    fa:0e:10:18:b8:28:e4:ab:3a:e2:2c:21:21:e4:89:
                    17:24:21:57:df:7e:f2:27:e5:4c:49:2c:d0:06:ef:
                    49:eb:2b:97:4b:b7:d2:40:8f:59:47:ae:2f:95:66:
                    65:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:77:B9:E1:DE:F4:2D:47:F3:42:9A:24:BC:FF:BD:11:B7:FE:13:3E
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/f3e54d70LUfzQpokvP-9Ebf-Ez4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.75.188.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9e:ab:09:6d:22:f7:db:23:89:3a:a7:ac:31:dc:23:71:46:f3:
         5b:b6:8e:26:89:f9:60:f8:02:b1:44:69:3e:66:23:f9:6e:48:
         ed:04:d6:cd:1d:f3:db:ec:67:ae:88:a4:3d:94:a9:39:f6:b7:
         41:b0:d9:c6:33:7f:00:7c:51:9f:2b:f4:06:cb:1b:a9:70:44:
         68:fb:67:87:50:a8:8e:41:61:ff:81:7b:09:52:f6:2e:35:8c:
         c0:e7:f4:b6:33:bb:f5:3c:8e:86:40:12:a1:a8:c4:09:84:5e:
         83:f3:fc:51:c0:71:0b:da:3a:97:15:ee:d5:c2:5d:0c:49:54:
         9b:55:7f:84:bc:36:68:e4:b0:c9:4b:a2:f7:18:55:36:7e:09:
         68:3f:20:e0:3c:2b:f4:da:02:e9:03:99:d7:5a:6a:47:7e:a5:
         8f:73:0b:22:2a:8c:bb:ea:01:14:6a:fd:4a:fc:dd:1b:86:d6:
         33:e9:d2:b5:a4:89:eb:e9:1e:2c:c1:80:3b:62:7f:fe:15:14:
         ea:d8:2e:be:8b:a7:b1:a1:93:10:ed:20:0f:c9:4d:6f:52:71:
         bc:cd:78:34:ce:8d:a2:21:d3:78:85:21:ff:99:ef:27:59:ce:
         3a:0f:ea:f4:9d:d9:1c:62:04:e5:e4:7a:82:2d:90:74:dc:c0:
         44:f8:34:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:38:48 2024 by rpki-client on console-fra.rpki-client.org