Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/gj1ytZMiy4C2vzUL8MbDG8dmays.roa
File:                     gj1ytZMiy4C2vzUL8MbDG8dmays.roa (raw, json)
Hash identifier:          AcpqdiQLTJ1f7R+zr5fxWeDRcytJRBDc4IH7bsDoYhs=
Subject key identifier:   82:3D:72:B5:93:22:CB:80:B6:BF:35:0B:F0:C6:C3:1B:C7:66:6B:2B
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       02D4
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/gj1ytZMiy4C2vzUL8MbDG8dmays.roa
Signing time:             Tue 30 May 2023 17:18:24 +0000
ROA not before:           Tue 30 May 2023 17:18:24 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        219.114.160.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 May 2024 13:36:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 724 (0x2d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: May 30 17:18:24 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=823D72B59322CB80B6BF350BF0C6C31BC7666B2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:48:ce:8a:76:14:20:25:01:32:82:13:40:51:
                    64:4a:4e:a1:08:d3:e1:d5:30:62:e0:d3:74:4c:34:
                    67:34:de:9c:65:1f:90:e3:a5:61:f4:6f:4a:2d:ef:
                    b8:64:af:0e:79:82:eb:90:73:d7:3b:27:f7:d7:a9:
                    9c:ec:f2:bf:b1:42:63:89:69:c1:a8:12:37:5a:4e:
                    83:63:bd:3a:63:43:ba:2c:fc:5a:81:b5:46:32:77:
                    d2:87:30:a6:9b:44:f3:d1:0b:a6:4a:ab:0e:07:ff:
                    91:ac:53:70:ae:6e:98:be:f1:ef:4f:0d:de:ed:15:
                    34:ad:ab:d7:13:3f:77:fc:10:70:bd:99:65:1e:7d:
                    0f:d6:63:f4:74:b9:91:6a:ff:a5:74:a0:f5:39:2c:
                    1c:06:28:9e:07:54:3e:a4:94:be:6e:ab:e1:b3:f7:
                    9c:b0:3d:6a:ea:26:d8:42:81:6d:e2:db:4c:ae:e6:
                    ce:58:c4:54:84:26:54:96:62:cd:04:ab:b0:fc:91:
                    02:f0:a2:8f:36:70:ed:8a:9c:05:f7:e7:2a:d8:77:
                    b1:d2:b8:1d:19:f2:2f:aa:f6:ba:b4:ce:a5:34:fb:
                    69:c2:36:ae:d8:8c:83:7f:10:c3:68:ad:c1:0d:90:
                    18:58:0c:07:36:bf:02:e0:1d:d1:91:82:9f:5d:5d:
                    60:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:3D:72:B5:93:22:CB:80:B6:BF:35:0B:F0:C6:C3:1B:C7:66:6B:2B
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/gj1ytZMiy4C2vzUL8MbDG8dmays.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.114.160.0/21

    Signature Algorithm: sha256WithRSAEncryption
         16:af:2f:c8:c2:55:35:54:15:f9:ca:06:a9:0f:c3:3d:47:17:
         b7:19:7c:02:a0:5e:40:c0:dd:d5:59:68:53:20:04:fb:75:b0:
         fe:0e:6c:5a:5a:08:7f:14:40:7c:49:98:27:5b:fb:45:ad:4f:
         4c:20:26:99:03:4b:39:5d:88:0d:b2:c5:d9:92:20:2b:b3:54:
         31:9e:81:ab:ae:2f:c3:7d:a6:36:5a:57:5e:10:5e:27:3f:04:
         c1:b7:b7:55:c1:e8:53:d4:36:ba:72:43:e5:af:da:b4:b0:aa:
         3a:20:2c:78:74:04:1a:ec:d2:34:55:d5:86:9e:1c:37:09:51:
         15:83:fb:de:c3:00:e2:5d:8a:8f:07:33:81:c0:79:1a:c6:ea:
         f6:b5:25:59:9e:5b:f2:94:1f:a8:13:78:d2:1d:77:d8:22:f0:
         3f:1f:be:37:6f:01:a0:51:9c:8b:d0:e6:af:0e:54:0c:88:f0:
         cc:fd:ef:d7:95:d2:ce:37:7d:25:b4:50:dd:3e:a1:5f:70:09:
         f5:a1:df:8a:21:90:e6:1b:ff:8e:b6:27:0a:f1:19:a4:d1:4d:
         16:21:20:83:c1:94:f7:a2:79:38:58:4a:e2:f3:16:7b:03:68:
         2c:dd:30:c9:03:5b:00:29:e7:51:e6:25:e8:f0:87:6f:d6:41:
         b5:b7:df:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:15:57 2024 by rpki-client on console-ams.rpki-client.org