Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/qEuVqnirRSINJmg90qmDs_ShcQM.roa
File:                     qEuVqnirRSINJmg90qmDs_ShcQM.roa (raw, json)
Hash identifier:          EHZVCRzGuchSU/RJJbyQzy0BhXVdfKdpTVtxhRHa49s=
Subject key identifier:   A8:4B:95:AA:78:AB:45:22:0D:26:68:3D:D2:A9:83:B3:F4:A1:71:03
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       060E
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/qEuVqnirRSINJmg90qmDs_ShcQM.roa
Signing time:             Thu 29 Feb 2024 01:38:27 +0000
ROA not before:           Thu 29 Feb 2024 01:38:27 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     9605
IP address blocks:        1.75.12.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Dec 2024 00:11:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1550 (0x60e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Feb 29 01:38:27 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=A84B95AA78AB45220D26683DD2A983B3F4A17103
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:ee:94:cb:2c:a5:1a:25:ca:1c:13:dd:f4:3a:
                    01:de:ab:78:67:19:0b:eb:32:df:b6:d3:02:ff:0d:
                    ae:63:0a:9c:c0:6c:ab:10:0b:45:e2:e4:ee:e7:18:
                    b8:86:cc:9a:d3:49:5d:09:63:0e:29:f5:fa:59:17:
                    dc:a4:07:28:37:91:02:ae:5f:70:c8:56:d7:30:9c:
                    85:f5:dd:e9:eb:e6:ea:5b:12:41:55:f5:36:df:e4:
                    0d:b5:b7:8a:5c:44:19:e2:f2:6a:52:ab:7d:7e:61:
                    1b:93:9b:e4:11:fb:b8:a2:4f:f3:a6:b2:ac:ef:91:
                    79:b2:5d:de:3f:e1:cd:cc:57:e6:28:63:1b:8e:bc:
                    71:01:88:53:df:86:63:a2:1a:25:48:bc:99:72:81:
                    b8:65:82:4d:0b:8e:78:e5:9e:5e:f6:4d:3f:c8:98:
                    38:42:73:12:33:ad:b7:b6:1a:22:22:60:5e:f0:28:
                    54:dd:bb:55:e9:18:d6:cd:db:fb:50:02:c2:c5:fb:
                    e2:4f:9a:a2:9e:f4:10:87:97:71:14:84:e2:ca:c8:
                    eb:4b:15:eb:43:5d:08:c7:34:2c:fa:7b:91:d5:c0:
                    ff:e5:15:67:32:89:cc:95:e4:86:00:c5:e7:16:93:
                    1b:67:b9:47:5d:3b:dc:cc:99:97:aa:3f:fe:58:3e:
                    9f:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:4B:95:AA:78:AB:45:22:0D:26:68:3D:D2:A9:83:B3:F4:A1:71:03
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/qEuVqnirRSINJmg90qmDs_ShcQM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.75.12.0/23

    Signature Algorithm: sha256WithRSAEncryption
         e0:73:24:f0:3e:6c:f3:39:4d:c4:2e:44:13:5a:92:6b:4f:b5:
         ec:06:3b:b7:b0:3c:02:d9:ae:fa:dd:5f:67:6a:46:eb:a4:2b:
         c7:86:31:7f:63:80:d0:f5:6f:0c:03:0c:3b:8d:08:e8:3f:cc:
         c1:64:43:d3:94:c7:e6:cc:34:cd:64:73:3f:f2:ce:fb:79:b5:
         1b:30:53:b2:07:e5:4d:7e:7f:55:bb:44:6a:8c:e8:62:13:22:
         cd:60:3d:dc:7c:25:95:82:80:f8:4a:11:d3:f2:75:1a:ae:82:
         fe:33:55:e2:df:06:6e:bd:56:9c:a6:93:67:06:3b:a6:7d:02:
         2b:a1:bf:01:db:f6:b4:7b:a3:62:a3:86:04:9b:18:a6:6c:ca:
         04:68:56:db:d4:17:70:70:3e:48:97:94:d4:3f:19:43:9b:94:
         28:f1:c4:64:68:71:ba:d4:16:ec:18:c4:89:4b:de:41:ab:12:
         8a:0d:d7:26:28:ee:32:88:f0:4a:47:6e:65:21:d8:7e:8e:02:
         f6:29:42:ba:9a:f1:34:44:2c:30:25:03:88:58:6a:06:4b:a0:
         f7:22:71:5b:39:0a:7c:f7:b5:c0:1f:a7:42:04:0a:c6:a9:f9:
         ec:62:b0:7d:92:22:28:b5:af:3e:04:3f:fe:6b:f0:a0:1a:86:
         80:ec:8b:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 02:27:16 2024 by rpki-client on console-ams.rpki-client.org