Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/j9H87TR__RSygINE5WhaPwZ5ndg.roa
File:                     j9H87TR__RSygINE5WhaPwZ5ndg.roa (raw, json)
Hash identifier:          q7oRPfRvVwA0u13wEIvHnpV/mG5jUhVLHFcAAvOa4o0=
Subject key identifier:   8F:D1:FC:ED:34:7F:FD:14:B2:80:83:44:E5:68:5A:3F:06:79:9D:D8
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       01EC
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/j9H87TR__RSygINE5WhaPwZ5ndg.roa
Signing time:             Tue 30 May 2023 16:29:18 +0000
ROA not before:           Tue 30 May 2023 16:29:18 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        183.73.16.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 May 2024 13:36:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 492 (0x1ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: May 30 16:29:18 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=8FD1FCED347FFD14B2808344E5685A3F06799DD8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c6:80:31:62:11:56:b1:2a:0d:33:fb:c1:4a:
                    40:9c:11:9d:34:b1:9e:36:11:a1:0e:94:66:22:d4:
                    82:ef:45:bc:7d:9e:bb:98:a4:64:5a:05:03:c2:ef:
                    b8:dd:04:61:37:e4:54:ec:14:f8:db:b2:ff:95:5e:
                    04:d6:c3:68:2d:b7:f9:d8:1a:d9:4d:da:9e:38:9a:
                    35:56:02:a0:e2:bc:e0:64:31:d2:76:c6:a5:af:3a:
                    cd:51:65:4d:a7:e6:8a:02:0c:09:2c:7c:59:ca:2f:
                    8d:e5:fe:20:78:24:92:7e:f3:9f:37:89:1a:66:07:
                    01:8b:90:1a:f9:7b:72:2a:21:ee:b8:8f:e0:53:66:
                    6e:96:81:18:86:1a:e8:ae:41:c2:f7:ee:54:03:a3:
                    64:86:2e:b4:22:65:c6:64:fc:74:a0:11:f7:81:0e:
                    45:5a:fc:e4:04:f5:22:ec:c4:04:65:4c:1c:44:a7:
                    cb:91:8e:d0:38:5b:dc:93:29:a8:48:fd:40:1e:17:
                    cf:16:92:84:2e:61:15:0a:49:11:71:b9:be:42:f7:
                    08:6f:45:d9:b7:b5:f2:c8:ce:d8:76:6d:13:81:2e:
                    4e:04:82:4d:a7:b4:3c:7f:ae:57:c4:3a:cc:53:59:
                    8d:87:1f:4f:12:dc:61:b2:97:a9:1b:29:03:b7:43:
                    92:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:D1:FC:ED:34:7F:FD:14:B2:80:83:44:E5:68:5A:3F:06:79:9D:D8
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/j9H87TR__RSygINE5WhaPwZ5ndg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.73.16.0/21

    Signature Algorithm: sha256WithRSAEncryption
         54:f3:36:68:e1:13:2f:bf:01:20:00:f3:0b:7a:75:5e:8a:69:
         6f:94:c9:fd:38:1b:41:57:49:91:6d:45:b4:60:10:6a:cf:12:
         69:9d:27:5f:b7:df:6e:4f:2d:d0:a0:0b:cb:f0:f9:93:23:16:
         2c:a0:f4:5b:69:8c:d7:99:7b:81:1b:f0:da:1e:71:43:f1:30:
         4c:e5:35:93:3a:8f:43:ba:5f:d2:5f:25:4a:aa:d1:dc:33:01:
         8d:ec:ae:3a:c9:64:6c:72:e5:9e:97:66:49:7f:15:64:1f:75:
         78:64:1d:b0:28:d3:fe:59:88:d4:ff:3a:b0:ba:60:9d:3b:8a:
         99:14:ee:41:0f:3e:66:64:2c:ca:4f:7a:b3:84:10:43:7f:f5:
         05:ff:2a:10:94:59:82:ca:ca:eb:8f:2b:db:9d:41:b8:34:82:
         58:52:1e:11:ea:75:8b:22:4f:64:39:68:d0:3a:74:f1:a5:3e:
         6c:86:7f:cb:07:8a:6b:ed:c8:70:4d:f8:3a:35:82:9d:fc:31:
         dc:ea:84:6f:21:bb:f7:36:cf:20:0a:df:dd:01:07:51:51:b7:
         05:72:71:3d:56:4b:c9:cb:3b:c5:2e:a7:0b:af:50:ea:97:b3:
         70:92:ab:a5:c8:85:31:e6:8f:4e:46:c1:4c:e3:02:f3:e0:58:
         9c:73:3e:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:15:57 2024 by rpki-client on console-ams.rpki-client.org