Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/rU16UkDQEYfWhXMorFO8RYV2ph8.roa
File:                     rU16UkDQEYfWhXMorFO8RYV2ph8.roa (raw, json)
Hash identifier:          Tj4eAR0dP0hx8FOhpVsnNQbUPLEGWZBooPYNpWVlmm0=
Subject key identifier:   AD:4D:7A:52:40:D0:11:87:D6:85:73:28:AC:53:BC:45:85:76:A6:1F
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       060C
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/rU16UkDQEYfWhXMorFO8RYV2ph8.roa
Signing time:             Thu 29 Feb 2024 01:38:25 +0000
ROA not before:           Thu 29 Feb 2024 01:38:25 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     9605
IP address blocks:        1.73.128.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1548 (0x60c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Feb 29 01:38:25 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=AD4D7A5240D01187D6857328AC53BC458576A61F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:78:9b:c2:93:b3:33:36:91:29:2a:e9:42:18:
                    c6:12:33:5e:d8:37:32:49:7b:32:89:a9:c8:26:a8:
                    bb:d9:76:3a:31:9b:c5:65:94:27:ed:c2:bd:01:8a:
                    2a:d5:9e:03:3e:de:74:bd:b4:37:e2:71:9b:e7:33:
                    39:62:9a:4a:ef:b2:ca:9f:e5:c8:05:1a:98:71:62:
                    ac:6d:56:5d:90:91:58:4d:c6:eb:2a:d8:78:0f:14:
                    f5:eb:0b:00:e0:51:ae:0b:47:eb:b0:94:73:2d:8b:
                    37:58:a4:b8:b2:9f:3a:01:b6:42:85:d8:fd:05:50:
                    6d:37:5d:75:1a:48:74:be:6f:1a:61:69:95:04:41:
                    fe:cf:69:d8:ef:e8:bc:59:d7:f9:5f:65:ad:93:73:
                    64:10:77:71:dd:40:73:ce:cc:eb:96:0c:6c:8b:2d:
                    84:9c:64:9b:42:89:65:17:7d:4a:df:67:55:4f:bf:
                    29:90:bb:41:d4:26:24:b5:62:ab:c4:ae:f0:22:0c:
                    f6:01:16:f5:67:76:b4:86:e1:73:6e:96:4e:a9:c5:
                    80:0e:6b:ad:0a:49:08:b5:1c:e3:8e:36:d7:1e:8d:
                    e7:d4:35:83:25:96:da:bd:9c:eb:04:ad:63:b5:55:
                    35:53:11:eb:9b:f0:2a:b6:67:16:4b:d1:14:f1:57:
                    fd:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:4D:7A:52:40:D0:11:87:D6:85:73:28:AC:53:BC:45:85:76:A6:1F
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/rU16UkDQEYfWhXMorFO8RYV2ph8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.73.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         a2:8f:95:e6:49:fe:df:db:1e:1c:e8:14:11:a8:5f:b1:1f:f5:
         f6:8e:eb:ad:b3:5a:e3:5e:f6:6c:79:ce:81:a5:ba:75:14:00:
         80:a1:48:ad:7b:4f:ee:4a:a9:89:51:b6:0a:87:8c:3a:25:d4:
         0f:c3:f5:dc:bb:9c:39:ed:54:57:97:26:0e:d0:0e:09:e9:bb:
         4f:30:45:1c:07:a9:62:1b:9b:94:ac:1f:34:54:2c:b8:fa:3b:
         94:81:f2:42:eb:bc:cb:88:7f:e8:16:e2:18:68:39:aa:e2:53:
         56:0c:ba:88:92:79:48:a2:77:96:c3:a1:e2:50:ae:e9:db:9c:
         89:00:33:20:47:08:a8:19:0c:30:c1:4b:69:c2:73:42:dc:f3:
         cf:a8:80:e8:a1:fe:af:19:c7:4c:81:82:0a:91:89:a2:13:3e:
         bf:fc:37:20:a4:db:12:e2:45:3b:6a:5c:d0:26:e8:3d:d1:ef:
         1c:62:44:d7:a5:a1:95:5f:ec:58:82:58:ef:7f:39:ac:09:d0:
         64:fa:e0:4d:f9:48:b7:16:9e:1f:64:0a:2c:25:89:9f:8d:39:
         54:e3:32:37:4c:1f:79:f0:d5:41:84:d6:31:93:4f:b1:09:2b:
         69:45:82:25:ae:15:ca:47:c7:22:0d:ae:7d:05:8d:b6:ce:13:
         23:da:1a:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:54:42 2024 by rpki-client on console-ams.rpki-client.org