Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/ffjZ9Kmyg6V4F7NqjVvIA-bFw3k.roa
File:                     ffjZ9Kmyg6V4F7NqjVvIA-bFw3k.roa (raw, json)
Hash identifier:          eNBYcazFObiNn1pBYu1p1Xvu28otfVyE1X8b9E3Pb3Q=
Subject key identifier:   7D:F8:D9:F4:A9:B2:83:A5:78:17:B3:6A:8D:5B:C8:03:E6:C5:C3:79
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0444
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ffjZ9Kmyg6V4F7NqjVvIA-bFw3k.roa
Signing time:             Thu 27 Jul 2023 16:43:09 +0000
ROA not before:           Thu 27 Jul 2023 16:43:09 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     9605
IP address blocks:        183.73.128.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1092 (0x444)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jul 27 16:43:09 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=7DF8D9F4A9B283A57817B36A8D5BC803E6C5C379
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:41:6b:58:1b:08:ba:96:52:1b:6d:bb:da:6a:
                    67:28:4c:72:9b:46:7d:4e:17:d5:29:0e:8d:d7:91:
                    60:2c:88:d8:6f:c1:2d:8f:02:4d:33:0f:23:47:d7:
                    a4:6e:b3:6c:7b:d0:b8:f4:af:af:03:3d:0a:f5:85:
                    dc:e3:43:9b:3a:79:af:ee:5e:d1:d0:06:86:ef:59:
                    fb:9a:e8:48:1d:91:95:60:1f:b5:b4:2b:59:42:38:
                    3f:4d:bb:83:ce:92:b3:4d:5b:1e:99:38:db:66:51:
                    19:e8:7e:8d:2c:27:a3:89:ce:ba:b8:01:36:7c:02:
                    19:dc:c4:4a:59:7b:5c:b7:06:2e:2e:ff:72:29:ff:
                    6d:7a:04:16:39:06:a9:08:2a:fb:68:4d:69:46:87:
                    e1:bd:62:ae:6b:ec:80:55:ec:d8:fa:56:a2:34:03:
                    1d:29:b1:e1:74:b9:8c:5b:18:ee:b2:78:ec:16:f9:
                    2d:2e:e0:c2:bd:1c:50:64:57:ab:f3:2a:cb:15:54:
                    89:b7:ee:51:ad:a0:2b:2f:6e:76:1c:3b:14:83:61:
                    8e:3f:02:7d:cd:d6:3b:a2:37:99:6f:b1:0c:d5:b1:
                    04:cc:dd:65:50:4b:ec:03:15:5e:f1:54:96:dd:0e:
                    e0:18:6b:84:a1:ff:34:ff:f7:48:48:bc:20:f3:92:
                    91:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:F8:D9:F4:A9:B2:83:A5:78:17:B3:6A:8D:5B:C8:03:E6:C5:C3:79
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ffjZ9Kmyg6V4F7NqjVvIA-bFw3k.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.73.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         a0:d3:11:17:e8:02:20:1b:fd:73:36:8c:6b:59:94:dd:c1:04:
         bd:1a:53:e5:fa:38:1d:35:29:4b:c0:d0:4a:8d:5d:98:21:71:
         90:56:fc:c7:3d:83:35:a0:61:8f:c8:6b:c6:a4:b8:fb:f1:85:
         9a:e3:83:e4:55:2f:bd:36:44:52:c6:32:29:9e:bc:fc:0b:48:
         70:71:52:cb:25:f0:94:69:7e:c5:f7:2f:2b:99:76:a8:19:9e:
         73:7b:50:ef:a1:5f:07:45:2c:9b:9c:90:87:5c:0e:a1:cc:a0:
         a6:01:46:2a:d9:e4:c0:01:80:86:90:1e:50:b1:ff:5e:2f:fc:
         ef:e9:0a:7c:37:32:24:ad:01:ae:51:d1:20:d7:f3:a1:83:0c:
         c1:3d:70:91:bb:e5:f8:5e:4d:c3:6a:cb:d2:59:35:13:7c:57:
         a7:1e:8c:f6:4b:af:99:39:6b:83:c1:a3:85:b4:80:bd:1c:48:
         63:a2:40:1e:02:f8:0b:99:fb:d1:10:7c:50:fb:ef:e5:aa:6f:
         39:84:25:21:29:bc:bc:4f:dc:c4:6e:5c:68:80:c1:ae:b9:41:
         34:0b:fd:3c:67:f9:c7:c0:7d:d5:ce:04:d0:d1:c0:69:8f:b0:
         6c:bd:8a:a8:5f:b2:49:9d:f6:4c:c3:73:3a:e0:51:47:2a:88:
         08:53:84:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:38:48 2024 by rpki-client on console-fra.rpki-client.org