Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/jM00R9qFHCaSZfz7WZA2yqjxG7M.roa
File:                     jM00R9qFHCaSZfz7WZA2yqjxG7M.roa (raw, json)
Hash identifier:          oWoOmCF86v4csvlxIwZvgCtdJXIDY5wx5sgL1CIGhAk=
Subject key identifier:   8C:CD:34:47:DA:85:1C:26:92:65:FC:FB:59:90:36:CA:A8:F1:1B:B3
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       062E
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/jM00R9qFHCaSZfz7WZA2yqjxG7M.roa
Signing time:             Thu 29 Feb 2024 01:41:04 +0000
ROA not before:           Thu 29 Feb 2024 01:41:04 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     9605
IP address blocks:        183.74.32.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1582 (0x62e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Feb 29 01:41:04 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=8CCD3447DA851C269265FCFB599036CAA8F11BB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:06:36:ee:35:fd:b7:1a:f7:b6:c0:d5:f2:46:
                    9e:51:63:1c:c7:a2:3f:ce:61:6f:18:48:3a:c1:12:
                    71:aa:53:82:1e:34:43:c5:bf:41:f9:42:f3:a2:bb:
                    ad:73:a2:23:d6:c0:98:9d:e3:aa:46:d7:d3:1f:6f:
                    d7:b8:ab:91:7b:26:7e:51:04:46:d2:b6:82:54:fc:
                    9f:9d:d0:e5:32:51:ee:ad:7d:15:38:7f:91:68:f1:
                    de:e5:20:c4:89:db:07:22:fa:9b:7d:a5:ab:d4:b3:
                    51:9b:74:16:ba:71:9a:1a:bc:5c:ff:08:da:e3:1b:
                    df:0e:03:fa:7f:73:2f:da:b1:52:f3:b5:0a:cc:c5:
                    11:d8:fe:a9:43:61:99:85:50:64:cc:a7:a4:84:94:
                    64:a4:fc:11:12:48:a3:44:47:7f:46:a4:71:07:fe:
                    66:30:1f:8f:d6:f6:cc:1f:8d:72:a9:2f:6c:53:da:
                    9b:d7:7a:26:ed:2e:bc:c5:04:39:9d:5f:1b:5f:01:
                    76:ab:3c:a7:2c:0d:6d:f6:2a:d1:29:16:e6:a1:18:
                    cd:e2:b8:83:90:cb:6f:c3:d6:38:db:9a:d6:5b:c0:
                    8c:0a:a8:65:5c:74:90:a1:ea:37:60:0d:a1:14:2b:
                    77:d8:6a:f8:fe:ab:7f:ad:48:f4:92:7d:cb:32:18:
                    26:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:CD:34:47:DA:85:1C:26:92:65:FC:FB:59:90:36:CA:A8:F1:1B:B3
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/jM00R9qFHCaSZfz7WZA2yqjxG7M.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.74.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         5d:0a:38:3f:4a:14:e0:02:a8:12:48:b7:12:46:ec:de:f0:01:
         e6:df:2e:e5:09:0f:f7:df:b3:7d:43:e0:78:00:2c:26:9b:e3:
         21:e0:05:26:9f:78:3d:b5:ee:0a:08:15:8e:52:a6:b5:2f:82:
         75:5e:8b:fd:0c:38:4e:58:29:0d:77:5c:d2:f7:81:5e:91:4c:
         dd:1d:e8:7e:1d:32:1d:ff:a7:7e:fe:02:f9:28:12:43:5d:df:
         10:64:6a:05:0a:8f:a6:d9:3a:bc:8d:a3:b9:23:6b:a1:7f:04:
         21:86:2a:cc:dd:da:43:a6:dd:68:33:64:ed:27:60:e1:6f:d1:
         94:10:db:ea:4f:27:02:c0:1a:ff:94:79:87:e4:58:db:8f:cf:
         30:17:c8:26:f4:57:6c:f4:85:b4:47:ae:16:96:bf:1e:b5:99:
         c3:3c:f0:98:8b:18:33:6a:55:6d:95:62:27:1e:bc:54:14:f3:
         67:27:47:e0:3b:62:49:32:08:66:d8:22:a5:35:21:6a:d0:82:
         ce:53:40:c4:58:83:bc:9c:d1:8e:2c:ce:fd:96:8b:5c:f3:40:
         b8:00:ca:7a:05:dc:4d:16:4c:43:92:98:18:3c:fb:0f:23:43:
         d1:88:e5:dd:d2:f4:f3:32:0f:4b:af:fe:7c:37:4e:b3:28:ae:
         b0:2f:d7:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:38:48 2024 by rpki-client on console-fra.rpki-client.org