Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/qtjPBDSsku2AFKImE01csjpx_-g.roa
File:                     qtjPBDSsku2AFKImE01csjpx_-g.roa (raw, json)
Hash identifier:          atM22tHtXrhPQQowSudd2BZnDFpsJAsEBv8VtzdH/mA=
Subject key identifier:   AA:D8:CF:04:34:AC:92:ED:80:14:A2:26:13:4D:5C:B2:3A:71:FF:E8
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       090A
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/qtjPBDSsku2AFKImE01csjpx_-g.roa
Signing time:             Tue 30 Apr 2024 02:28:41 +0000
ROA not before:           Tue 30 Apr 2024 02:28:41 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        183.74.112.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 12:58:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2314 (0x90a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr 30 02:28:41 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=AAD8CF0434AC92ED8014A226134D5CB23A71FFE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:95:ed:72:6b:21:36:9c:cf:4f:d0:be:8e:29:
                    b3:cf:d3:d1:e9:4f:13:c6:0f:a6:cd:a7:ad:e7:e8:
                    90:c3:9b:7d:3a:95:c3:56:4e:da:98:13:32:b1:56:
                    c1:b1:da:9a:46:69:10:0b:c5:52:f4:95:04:e4:bf:
                    24:9b:3a:e5:86:31:a4:bc:3e:97:2e:e1:3d:16:06:
                    bd:a2:5e:51:02:f7:0f:ce:45:dd:83:ad:2e:2e:35:
                    22:d2:08:4a:ab:c0:72:18:72:4f:25:ae:79:5c:c0:
                    53:99:cb:a6:8d:bd:6b:9e:18:8f:b4:59:86:60:86:
                    f9:5a:b7:23:fb:03:11:9b:b5:32:b4:82:79:34:74:
                    7d:f3:4a:6d:40:f9:b9:9a:3e:e3:40:58:a3:43:27:
                    d3:41:5d:f5:39:90:f7:17:e9:8f:3f:bb:39:17:db:
                    90:31:73:32:69:d1:a6:a1:34:ca:b8:96:f0:6b:91:
                    68:dd:20:3c:6a:43:4c:e5:e1:c0:6e:0c:dd:47:58:
                    aa:df:03:d7:a7:b1:53:5d:a2:57:90:44:43:2e:c7:
                    07:72:57:63:35:9d:60:7d:b8:b4:ae:e7:fb:28:6a:
                    02:96:03:b2:b5:1e:97:98:3f:10:f7:90:8d:58:0e:
                    b4:c9:cb:ac:9d:f7:2b:de:87:68:16:f0:c3:5c:b6:
                    59:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:D8:CF:04:34:AC:92:ED:80:14:A2:26:13:4D:5C:B2:3A:71:FF:E8
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/qtjPBDSsku2AFKImE01csjpx_-g.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.74.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         68:d6:21:39:0c:62:15:1f:0b:41:35:63:ab:df:eb:5e:e3:e7:
         23:f8:39:e7:e7:d3:ce:71:90:b5:2f:55:0b:b6:92:66:84:e3:
         47:f2:be:5c:5f:0b:e0:96:28:03:42:39:aa:06:0e:f2:1a:bb:
         4c:65:68:7d:69:6c:e6:89:55:47:09:f9:6e:8c:9c:2b:97:0a:
         d1:d9:b7:b8:e9:af:ea:cf:5f:d8:fe:d1:dd:dd:dd:42:ff:49:
         90:73:4a:89:b8:93:2d:f3:88:68:41:8f:93:39:2d:37:a8:86:
         cc:b3:f7:07:3d:4c:c5:9b:7b:3c:48:40:f4:24:48:de:ab:97:
         b6:87:99:cc:a3:88:3a:8a:bd:89:9c:2c:0a:89:40:06:fd:a5:
         f7:76:c3:09:11:d9:49:ca:d2:fb:20:c2:2b:31:47:75:10:50:
         8c:d1:e4:9b:4e:25:97:84:03:f7:b3:17:ce:24:b0:1f:30:22:
         b2:68:64:ef:30:26:2c:f3:72:0c:4a:b0:76:9e:f7:82:0a:d0:
         bd:3d:e9:0e:8c:94:74:31:95:8d:f9:9a:b2:9d:95:6d:76:da:
         ce:24:ac:18:0a:5e:20:ce:54:b8:a5:7d:88:0a:b7:ec:60:0d:
         13:52:34:a0:ee:74:2c:1c:fc:f9:df:e7:6d:a8:1e:54:95:05:
         ca:69:54:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:21:25 2024 by rpki-client on console-ams.rpki-client.org