Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/ftbjNGxSRBg2V9WX17niDFBwqHA.roa
File:                     ftbjNGxSRBg2V9WX17niDFBwqHA.roa (raw, json)
Hash identifier:          tasn2XU7r1cGOWXDYfu+dR8IQ1Qa136IoKVmMq3VIbY=
Subject key identifier:   7E:D6:E3:34:6C:52:44:18:36:57:D5:97:D7:B9:E2:0C:50:70:A8:70
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       08B5
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ftbjNGxSRBg2V9WX17niDFBwqHA.roa
Signing time:             Tue 30 Apr 2024 02:22:41 +0000
ROA not before:           Tue 30 Apr 2024 02:22:41 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        183.74.196.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2229 (0x8b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr 30 02:22:41 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=7ED6E3346C5244183657D597D7B9E20C5070A870
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c8:a2:ac:ce:a6:1a:67:27:9d:ec:1b:ba:c4:
                    c5:d3:55:c9:4b:45:d3:00:bd:87:4e:00:7c:a7:b5:
                    4a:d3:af:1b:f7:6d:99:7a:50:41:42:f0:f5:ea:dc:
                    3a:3c:ce:63:27:16:3f:37:bf:5c:24:43:2a:69:fa:
                    3d:84:5b:11:54:1d:25:d8:ab:0a:ec:8c:d3:98:b0:
                    85:47:67:25:4b:7c:d9:fa:1e:58:cc:6c:70:1b:b6:
                    5b:c6:05:88:13:14:29:56:85:42:dc:c3:28:d9:f1:
                    27:5c:56:03:87:d3:a5:68:12:e5:6a:6c:1d:89:44:
                    1c:7d:e6:f1:f2:8f:fe:f7:7b:25:ac:a4:52:65:9a:
                    b3:f0:a1:4f:50:77:77:f5:53:5b:ea:73:ab:8a:13:
                    0f:c0:89:53:1b:0b:88:6b:ef:29:e6:23:f5:dc:ce:
                    45:14:1a:9d:8b:9b:67:fa:51:a0:a7:fa:6e:b3:0e:
                    65:cf:c0:36:8b:a7:83:3d:a2:c4:72:2e:66:ea:33:
                    cf:1e:94:c9:be:e2:0e:9d:a5:ef:bb:9c:77:04:2b:
                    96:a6:62:3d:3f:23:bb:05:26:51:b6:d2:5a:c8:48:
                    ca:f2:77:6e:d2:da:96:e5:71:e6:cb:ba:db:31:8a:
                    cd:12:fd:f5:c4:0f:ad:45:27:ea:b3:5f:0b:f9:64:
                    aa:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:D6:E3:34:6C:52:44:18:36:57:D5:97:D7:B9:E2:0C:50:70:A8:70
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ftbjNGxSRBg2V9WX17niDFBwqHA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.74.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         71:e0:4f:ce:21:73:23:69:32:72:80:9b:eb:84:0d:e3:ab:70:
         62:3b:24:2e:68:01:91:3f:13:7e:da:de:03:85:80:ea:f2:f3:
         59:10:a2:c0:da:6c:04:fc:80:c6:4c:25:e0:fd:bd:c6:9e:6f:
         0c:f2:eb:e8:b3:0f:48:9a:09:42:49:af:46:69:38:9a:44:6f:
         0a:fc:56:88:66:ea:90:c7:d6:07:6c:f7:0e:33:c6:f1:7a:0f:
         ca:d2:a1:84:4c:fb:82:d9:31:b9:ca:2d:a5:3f:52:1f:50:74:
         92:21:a2:ba:57:d7:b8:f8:eb:0a:46:d9:5c:67:94:ce:34:ee:
         0b:15:ca:79:6c:17:66:4c:1c:e2:50:cf:83:86:62:70:53:a6:
         3c:65:63:c1:90:44:2f:b8:12:2d:31:ad:9a:d5:64:84:45:f2:
         fa:c5:b1:62:2b:bb:7c:2d:2d:10:f0:ca:8b:c6:c4:65:8b:55:
         e5:4a:5d:98:8e:3a:38:98:ad:2d:34:84:8c:ce:75:fa:5b:20:
         7d:c2:73:0b:14:7c:db:e2:a3:fc:2b:3e:23:cd:0f:c3:e0:ae:
         55:2f:e8:65:59:f0:ac:3b:a2:57:e4:c7:c4:a7:e5:29:92:9a:
         78:c1:e6:f2:cd:63:df:f2:3d:59:18:0b:52:52:d6:c7:2a:4a:
         56:fd:a7:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:38:48 2024 by rpki-client on console-fra.rpki-client.org