Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/foPkORvRdN2Rc43nrNNy-Va6Ym0.roa
File:                     foPkORvRdN2Rc43nrNNy-Va6Ym0.roa (raw, json)
Hash identifier:          KwcYYzCbdybS0f0Hg+7hphiAtNga5ystV4S+az8znB4=
Subject key identifier:   7E:83:E4:39:1B:D1:74:DD:91:73:8D:E7:AC:D3:72:F9:56:BA:62:6D
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       01CD
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/foPkORvRdN2Rc43nrNNy-Va6Ym0.roa
Signing time:             Wed 24 May 2023 16:40:32 +0000
ROA not before:           Wed 24 May 2023 16:40:32 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        1.79.72.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 May 2024 13:36:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 461 (0x1cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: May 24 16:40:32 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=7E83E4391BD174DD91738DE7ACD372F956BA626D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:75:3c:ad:f8:77:27:e6:fa:0d:28:c2:b9:a7:
                    ac:18:90:6a:a8:b7:d8:07:dd:19:5b:d0:4b:5f:3a:
                    31:16:13:ca:18:90:74:f8:47:bf:df:de:b2:51:fe:
                    48:db:46:ca:b7:8d:4a:31:47:23:4a:d6:16:9d:ad:
                    31:5d:03:09:e4:0e:d5:e4:fb:22:70:dc:65:18:8d:
                    bc:18:b7:0a:8c:5d:09:be:3d:1a:8d:e4:e7:84:c0:
                    10:b6:07:13:e7:97:35:5a:7f:af:27:ed:e5:96:63:
                    f2:03:56:7c:c4:8f:01:fd:ba:ac:e8:13:81:05:5f:
                    4e:fc:e8:09:17:1b:ec:cd:99:38:3c:2e:dc:e3:c0:
                    89:6c:db:2f:c2:26:eb:be:38:58:2b:f0:fc:58:9f:
                    49:22:e0:14:b4:91:9d:a9:6e:f5:f4:b6:53:2a:dc:
                    7e:0e:a7:1b:4f:fc:55:f4:c0:ab:e3:e5:ad:32:a5:
                    5c:80:7b:8e:2d:94:64:3a:55:da:b7:6d:53:4b:d9:
                    84:f1:98:5b:f6:da:d8:60:69:ee:35:9d:4c:da:e3:
                    5c:12:9b:7a:95:a1:f7:94:fb:d1:87:1a:e8:b7:54:
                    ed:1b:53:1c:c4:e5:29:49:4f:9c:db:c4:ba:d0:a7:
                    9c:a5:8f:ca:59:27:00:86:80:4d:e6:85:dc:a5:ec:
                    9c:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:83:E4:39:1B:D1:74:DD:91:73:8D:E7:AC:D3:72:F9:56:BA:62:6D
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/foPkORvRdN2Rc43nrNNy-Va6Ym0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.79.72.0/23

    Signature Algorithm: sha256WithRSAEncryption
         38:06:0b:fe:95:d7:71:77:31:f1:c1:6f:81:e5:2b:87:d4:83:
         ae:44:38:1e:9e:f3:77:5e:0e:ce:b2:5c:31:8e:4a:ee:71:ee:
         f8:8d:22:ad:63:45:3c:dd:31:be:fc:60:44:2b:c6:6e:76:f6:
         b7:7a:a0:0d:c5:5e:38:7f:eb:b3:56:3e:b9:5d:8a:05:b6:b8:
         56:4d:61:cf:43:17:a8:bc:11:c7:cf:b1:66:af:55:e4:f3:9d:
         db:22:a3:68:22:f2:97:a1:b1:29:db:cd:31:25:ac:41:3b:7b:
         34:8f:3b:91:f8:a7:8b:fb:74:bc:6f:5c:e5:01:7a:ad:a0:1e:
         aa:85:9e:ba:34:b4:a5:21:44:50:ca:77:e2:1a:d7:4d:4b:09:
         80:71:30:ca:f5:c3:83:26:8e:1d:43:bd:97:de:20:5b:25:e0:
         75:b0:32:de:c7:82:31:20:38:98:4a:a5:c9:d1:ad:16:dd:6b:
         ef:91:a6:26:c2:44:ad:b4:a6:11:28:63:9a:e8:3f:8f:a9:dd:
         f2:88:9a:4b:4e:07:b1:64:98:06:4d:ec:c3:54:8b:18:b9:d3:
         ce:63:53:0b:32:4d:b3:9b:0a:9e:f0:e6:45:bd:f5:58:84:b5:
         ac:10:a5:09:59:75:74:c2:83:5c:6a:f0:72:4d:57:31:4b:15:
         91:bf:a0:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:15:57 2024 by rpki-client on console-ams.rpki-client.org