Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/laGa9r7gL_MJcfaejWxw2sbj1Ec.roa
File:                     laGa9r7gL_MJcfaejWxw2sbj1Ec.roa (raw, json)
Hash identifier:          jOHG0NVvFZhtILLvYREcrtbgB04EWTeGyMbHt+Bqkj0=
Subject key identifier:   95:A1:9A:F6:BE:E0:2F:F3:09:71:F6:9E:8D:6C:70:DA:C6:E3:D4:47
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       05CB
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/laGa9r7gL_MJcfaejWxw2sbj1Ec.roa
Signing time:             Thu 29 Feb 2024 01:32:10 +0000
ROA not before:           Thu 29 Feb 2024 01:32:10 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     9605
IP address blocks:        1.72.6.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1483 (0x5cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Feb 29 01:32:10 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=95A19AF6BEE02FF30971F69E8D6C70DAC6E3D447
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:5e:73:68:fb:44:ab:5d:38:b8:55:82:9a:dd:
                    88:a9:c7:5f:00:02:a5:83:e5:a9:20:49:fe:b2:11:
                    aa:81:f0:65:df:99:72:6e:9f:c3:3c:dc:dd:79:fa:
                    d7:04:04:3b:f5:e5:23:f2:9c:44:ea:84:b6:6b:ad:
                    b7:27:95:b6:ad:ab:fa:2b:1a:66:bc:a3:5c:3c:4a:
                    81:00:7f:41:23:60:0f:37:50:8e:7a:5a:f1:b1:a3:
                    84:a8:a7:6b:ee:d3:5d:9a:44:b4:44:26:a7:48:25:
                    10:83:bb:31:8d:81:28:d0:67:11:f1:9c:d2:04:5b:
                    06:13:7d:bb:8a:4a:37:e5:ae:28:b9:b2:e2:06:1b:
                    1e:b4:18:5b:3f:68:a9:bd:fb:b8:32:71:d8:4a:c5:
                    81:d7:ef:f8:83:72:4d:62:4e:23:17:95:cf:59:01:
                    45:62:5d:43:ff:2d:3b:5f:7f:99:62:9e:99:f6:d7:
                    93:5a:d9:38:87:e4:c9:f1:47:cb:71:90:5e:01:64:
                    ba:08:38:a9:97:8f:a3:f7:75:68:8f:ac:88:a9:eb:
                    45:60:35:25:b3:02:fd:1d:e6:6b:71:b2:00:9d:8c:
                    f4:7f:64:9d:09:56:b3:e5:eb:4b:0d:01:90:b0:9f:
                    4f:1a:7d:3f:42:44:25:a2:28:3e:62:9f:ea:d5:6d:
                    ec:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:A1:9A:F6:BE:E0:2F:F3:09:71:F6:9E:8D:6C:70:DA:C6:E3:D4:47
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/laGa9r7gL_MJcfaejWxw2sbj1Ec.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.72.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:8b:22:54:51:b3:47:e3:86:de:95:ab:15:02:ae:14:91:fb:
         2c:2b:48:53:ff:26:82:6a:7c:9d:21:db:8d:3b:8f:f0:4f:72:
         f3:d7:6a:f6:5d:8d:0b:33:7d:3d:0f:71:92:0e:3f:16:fd:b7:
         3e:9e:80:40:75:27:f6:21:1f:23:77:07:77:29:d7:96:9d:a4:
         c2:54:b0:af:30:0c:33:c2:77:21:a0:fc:56:cf:80:7d:ff:7e:
         97:aa:ad:49:6d:da:c0:54:ec:a9:b8:26:5b:a8:c0:93:69:3c:
         47:93:3e:c0:d9:02:72:48:6c:94:05:98:03:b1:ce:0c:97:38:
         bd:60:9f:9e:50:a5:2d:57:3a:78:3c:db:57:ad:32:12:c0:7f:
         d5:c5:41:7d:56:7f:74:8e:9f:bb:56:54:d0:fe:c8:c3:6c:9a:
         4d:49:0a:c8:0f:ac:15:ad:65:c1:cf:42:ed:4c:02:90:00:b5:
         13:b1:b5:5f:43:78:cd:a3:7b:c7:b5:85:3c:ce:e0:0f:61:05:
         c1:5c:a4:f1:0f:b4:99:6f:e4:55:96:b2:bb:78:94:4c:2e:15:
         a0:5a:b9:72:e3:66:43:a9:e3:25:6d:35:53:55:71:d1:0e:94:
         20:39:3c:bf:32:1b:c6:bc:e7:8e:c9:fa:45:a2:0c:ed:99:d8:
         4a:05:b1:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:38:48 2024 by rpki-client on console-fra.rpki-client.org