Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/lC1HVGkd8XKK-WvU1uc24O7Uojo.roa
File:                     lC1HVGkd8XKK-WvU1uc24O7Uojo.roa (raw, json)
Hash identifier:          4pyOUiAkvF+8TjT+PjJWToSeoINrHlgT8NThrE7dxZA=
Subject key identifier:   94:2D:47:54:69:1D:F1:72:8A:F9:6B:D4:D6:E7:36:E0:EE:D4:A2:3A
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       04F6
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/lC1HVGkd8XKK-WvU1uc24O7Uojo.roa
Signing time:             Thu 27 Jul 2023 16:52:02 +0000
ROA not before:           Thu 27 Jul 2023 16:52:02 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     9605
IP address blocks:        27.230.50.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1270 (0x4f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jul 27 16:52:02 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=942D4754691DF1728AF96BD4D6E736E0EED4A23A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b8:18:09:1f:76:63:17:dd:18:ae:15:fa:be:
                    44:da:3f:75:c0:68:d4:1b:c2:fc:0d:8f:5b:84:48:
                    81:e0:86:66:6b:dc:6e:a1:57:f1:a1:a0:d4:71:86:
                    dc:51:73:97:30:66:fe:e0:04:74:42:09:2a:3b:92:
                    7c:da:e6:f1:23:9c:20:bc:c2:4f:ab:c4:b4:aa:d8:
                    69:35:ea:44:40:5f:3d:31:26:02:d1:5a:58:26:c5:
                    39:6c:9f:c8:70:f4:e2:1e:89:f7:ec:b6:c3:c4:96:
                    e1:0d:51:89:29:0d:54:8e:52:58:90:9d:2e:67:54:
                    3a:12:54:9d:9a:fd:cc:64:02:b6:49:90:82:ba:56:
                    a9:60:51:96:c4:c1:ed:ea:45:c3:f9:1a:48:ba:2c:
                    02:5f:23:fd:10:5a:7f:4d:ab:6b:a0:f2:39:07:d4:
                    68:fe:56:10:9d:6a:fd:ce:62:49:c6:e9:f1:6a:cb:
                    5b:dc:67:04:2f:0e:09:8a:0a:42:b5:0a:04:0b:03:
                    b0:ed:9f:5c:b1:a7:9c:76:c4:e5:db:a1:90:c1:c3:
                    c8:2f:ca:6a:33:e4:41:24:ac:45:9e:ea:e9:af:63:
                    05:78:86:32:51:60:b6:18:84:1c:f2:65:21:a2:c3:
                    64:ec:d2:8e:5b:63:06:fc:1f:b4:13:7a:fc:6f:df:
                    fa:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:2D:47:54:69:1D:F1:72:8A:F9:6B:D4:D6:E7:36:E0:EE:D4:A2:3A
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/lC1HVGkd8XKK-WvU1uc24O7Uojo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.230.50.0/23

    Signature Algorithm: sha256WithRSAEncryption
         49:f7:de:e6:fb:9d:cc:e1:f1:26:8b:3b:57:e6:d6:0f:77:83:
         70:a0:b3:69:48:ca:49:a7:e9:e8:c9:dd:ab:96:19:de:0d:18:
         b7:b4:8a:c4:39:5f:82:68:9d:a7:9d:5a:ae:0d:f2:df:63:22:
         6f:d4:a8:17:82:93:44:82:f6:60:0b:68:79:96:fe:a6:32:8b:
         28:72:89:b7:92:17:73:10:18:69:1f:66:94:45:6c:15:95:d5:
         87:2e:9f:7e:05:5b:fd:67:5c:ad:2c:14:04:f3:bc:07:1e:88:
         64:c0:fd:a3:5b:94:dd:a7:16:10:f2:43:85:b2:8f:19:49:ed:
         86:06:5d:a4:03:64:3f:2b:b5:b7:a6:5d:63:9b:42:ce:e9:01:
         02:0c:73:05:89:3d:7e:ca:f8:01:2f:35:b5:37:14:8c:6d:18:
         84:e8:d4:b2:ef:0d:bf:2e:42:d1:db:42:2e:7d:e8:ec:de:6b:
         82:f1:25:ee:19:1f:53:41:f8:f6:db:3e:66:f0:2a:83:4d:39:
         68:f1:58:15:de:e7:55:aa:2b:94:42:1e:95:30:56:c1:5c:d5:
         5b:9e:2f:28:03:47:69:cc:ac:2f:6c:d7:a2:5f:c0:d6:22:2e:
         ac:31:b3:95:9b:c5:df:b3:16:52:06:05:4a:90:e1:eb:03:82:
         8b:9b:1d:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 15:54:32 2024 by rpki-client on console-ams.rpki-client.org