Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/l2GOdf17CeN7HFFD4TsYHmvXTiA.roa
File:                     l2GOdf17CeN7HFFD4TsYHmvXTiA.roa (raw, json)
Hash identifier:          bVjWrSzjWel/6p+b/8ybTIohDvynOB4Bwfz532DbR/k=
Subject key identifier:   97:61:8E:75:FD:7B:09:E3:7B:1C:51:43:E1:3B:18:1E:6B:D7:4E:20
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0511
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/l2GOdf17CeN7HFFD4TsYHmvXTiA.roa
Signing time:             Thu 27 Jul 2023 16:52:13 +0000
ROA not before:           Thu 27 Jul 2023 16:52:13 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     9605
IP address blocks:        183.73.8.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1297 (0x511)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jul 27 16:52:13 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=97618E75FD7B09E37B1C5143E13B181E6BD74E20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:9a:cf:86:d5:46:8b:f0:4d:10:76:ba:53:59:
                    98:79:9f:90:18:76:41:5e:86:82:43:43:61:25:e5:
                    ea:65:ad:b7:99:c1:19:bd:6e:c1:bb:06:1b:c7:05:
                    90:da:ea:0c:91:25:41:8f:81:84:bd:5f:eb:70:92:
                    dc:3f:3e:cf:05:87:57:2c:8e:a7:38:8c:66:cd:70:
                    a2:c9:40:65:92:89:e1:e0:b1:17:a2:80:82:8e:ef:
                    10:68:5a:ec:69:9d:c1:f2:87:53:33:e0:f7:84:1e:
                    84:5a:70:9b:4f:9b:c0:dd:b7:50:bb:35:16:f5:f0:
                    04:c0:74:14:21:27:15:95:23:0e:3f:cb:60:f7:3f:
                    e6:66:f9:f0:d0:53:ac:4d:de:7c:d5:dd:08:cb:fa:
                    80:de:73:77:5f:76:d0:5b:b2:c6:98:35:7b:b7:76:
                    73:d2:40:c5:4e:44:95:61:58:fa:03:42:6a:36:04:
                    55:0a:39:6a:f8:13:7a:55:7e:f3:76:ac:56:38:40:
                    ef:ae:25:8e:7b:81:01:31:d6:0b:3c:d7:73:b2:9d:
                    70:bd:c4:d2:ed:0a:f8:70:9f:d3:4a:82:90:f7:79:
                    ee:c8:e1:7d:a6:1c:fe:cd:bc:42:78:e5:d1:21:31:
                    ef:17:dc:b5:18:29:02:4c:8b:52:e7:fb:d4:49:d1:
                    47:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:61:8E:75:FD:7B:09:E3:7B:1C:51:43:E1:3B:18:1E:6B:D7:4E:20
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/l2GOdf17CeN7HFFD4TsYHmvXTiA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.73.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         21:49:e7:51:99:47:0a:77:16:ce:de:a0:07:bf:53:3f:e4:59:
         0a:26:51:43:96:89:f9:3d:7f:f0:f4:6c:6b:67:c4:be:e1:58:
         25:c7:d2:92:47:76:e8:36:91:25:8e:b3:52:ae:b8:96:71:d0:
         a1:18:28:34:5e:5e:e6:6d:79:21:25:be:47:37:aa:d2:e9:dc:
         0b:58:7a:c9:ef:9b:a4:9d:08:a4:88:01:54:f4:20:82:81:87:
         63:aa:1f:ca:06:04:ca:56:a7:77:bd:ac:83:cd:0e:7a:43:af:
         91:21:59:83:c7:dc:7a:5c:36:f5:f5:4b:8f:22:2f:bd:51:0a:
         16:6c:44:c4:15:f6:3e:0c:a1:af:96:92:20:d8:e6:b5:de:59:
         19:c4:b9:40:f3:bc:f7:15:80:25:63:81:29:a3:da:1e:bc:4a:
         e3:49:6d:9e:45:56:a0:3e:77:52:2e:6a:70:93:8a:4d:d7:65:
         8b:39:e0:8b:05:96:e1:22:ed:9c:93:93:9a:09:79:f0:b9:ff:
         30:40:ca:b0:9b:67:fd:2f:be:61:9a:c2:c8:f1:95:d6:52:75:
         c7:67:5c:27:76:af:fd:7c:7b:6a:36:52:35:8c:1a:2f:e1:2b:
         b5:95:c9:ab:85:d3:c6:fa:86:6b:68:ce:a1:80:9c:d1:98:2c:
         ca:f0:b0:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:38:48 2024 by rpki-client on console-fra.rpki-client.org