Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/rmfn6n9zF_Iu-sOP702KU7FSVpw.roa
File:                     rmfn6n9zF_Iu-sOP702KU7FSVpw.roa (raw, json)
Hash identifier:          JOTwhSYNW3T2mNFWvci08/xhIQFNQDM4M6DUpBzkGZc=
Subject key identifier:   AE:67:E7:EA:7F:73:17:F2:2E:FA:C3:8F:EF:4D:8A:53:B1:52:56:9C
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0741
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/rmfn6n9zF_Iu-sOP702KU7FSVpw.roa
Signing time:             Tue 30 Apr 2024 01:58:47 +0000
ROA not before:           Tue 30 Apr 2024 01:58:47 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        1.72.192.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1857 (0x741)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr 30 01:58:47 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=AE67E7EA7F7317F22EFAC38FEF4D8A53B152569C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:f1:e2:ef:99:3e:68:53:72:5c:87:7d:d6:03:
                    99:39:cd:c3:96:58:29:ed:03:06:4d:ff:21:d3:63:
                    ef:21:7b:2c:c4:02:73:87:c0:41:a0:33:81:59:32:
                    61:f4:94:ed:c0:35:a2:91:9d:79:86:d6:82:7f:9c:
                    78:c9:a7:08:ba:ca:5b:bb:50:5d:52:62:e7:62:03:
                    5e:75:e3:27:fc:fa:c0:59:de:3a:8f:08:84:4c:49:
                    fa:a8:f9:0f:96:48:f9:aa:ba:ae:31:bd:6b:78:d9:
                    6b:bb:a4:47:3f:ae:6e:48:3c:23:4f:d7:d1:86:73:
                    11:a3:e2:03:3d:af:bb:30:cd:e7:3c:af:fe:59:7a:
                    38:0c:e6:47:63:53:81:2a:5e:dc:65:5a:d4:e6:b5:
                    a6:cc:1e:6b:e4:73:9c:fd:4b:d0:3f:ed:80:1a:eb:
                    26:f0:70:24:90:5e:eb:64:f7:4d:99:2a:89:ac:75:
                    71:39:ba:c9:b7:14:3d:0b:8b:75:96:40:0c:44:35:
                    9a:25:04:51:97:1a:1a:39:3f:e8:0d:50:de:2e:36:
                    07:e7:e0:01:7e:5b:00:1a:22:6f:31:9e:d0:ec:60:
                    ae:9b:f0:d5:71:60:55:44:20:92:75:a1:2c:35:fd:
                    26:2d:8c:92:19:35:3c:6d:96:3b:aa:06:6e:49:dc:
                    95:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:67:E7:EA:7F:73:17:F2:2E:FA:C3:8F:EF:4D:8A:53:B1:52:56:9C
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/rmfn6n9zF_Iu-sOP702KU7FSVpw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.72.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         59:74:3a:f9:18:c8:2a:b2:83:81:5a:a8:a4:b7:33:ed:0b:3c:
         31:ad:40:23:9c:f8:f6:82:59:01:7f:c0:da:ee:3d:2d:2f:f6:
         87:ac:0d:ae:38:19:a4:fa:9d:e4:16:24:67:6f:6d:bb:89:74:
         9c:85:ee:a4:34:ba:93:b0:00:11:89:de:30:9e:24:8c:2b:23:
         be:b7:28:72:46:d8:ec:9f:4f:6a:b3:a2:d6:54:c2:42:aa:0f:
         1a:49:17:5d:67:b8:94:af:ac:bf:8f:34:72:3f:0c:e7:a0:42:
         97:b6:2e:50:7b:af:3e:61:54:ed:9b:0a:42:75:de:77:7c:be:
         4d:bd:d9:4b:54:57:a0:28:03:bc:57:6e:e3:e4:5f:f1:7d:a8:
         21:d1:3a:07:81:b4:24:27:13:ba:2c:a5:6c:94:42:af:ae:c9:
         2f:00:a3:4c:c4:8a:a6:9d:29:94:b9:09:ff:17:40:5a:ca:f5:
         e6:d8:09:cf:a4:61:69:71:b1:eb:de:f8:de:84:91:7f:84:6e:
         bc:0b:42:9d:bb:a7:66:17:11:71:3c:3a:40:8e:a5:c1:e4:b7:
         db:59:0b:68:bc:c3:0f:58:eb:57:3a:d5:83:89:c7:60:ad:d2:
         85:94:ab:3f:f8:bd:da:c2:e2:5e:08:ff:62:2d:d9:35:8a:1f:
         83:28:c1:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 15:54:32 2024 by rpki-client on console-ams.rpki-client.org