Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/s1qTYUrddXzr2ufBdnqVodYeOmA.roa
File:                     s1qTYUrddXzr2ufBdnqVodYeOmA.roa (raw, json)
Hash identifier:          HwhQM8ZLZLhFl007r2i/j0s803qiDbf0AQmcnRNa6Ws=
Subject key identifier:   B3:5A:93:61:4A:DD:75:7C:EB:DA:E7:C1:76:7A:95:A1:D6:1E:3A:60
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       05B0
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/s1qTYUrddXzr2ufBdnqVodYeOmA.roa
Signing time:             Thu 27 Jul 2023 17:00:23 +0000
ROA not before:           Thu 27 Jul 2023 17:00:23 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     9605
IP address blocks:        1.79.174.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 22 Jun 2024 01:32:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1456 (0x5b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jul 27 17:00:23 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=B35A93614ADD757CEBDAE7C1767A95A1D61E3A60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:42:91:14:62:fd:2e:01:e6:49:f8:ec:44:3f:
                    ec:0d:bd:9d:94:81:4b:f1:1f:85:5f:d0:8c:b9:63:
                    53:05:26:e4:14:c5:e0:1f:e4:9d:3e:c8:65:e1:56:
                    21:e2:f7:ad:24:c0:c2:81:22:f4:f2:66:36:42:c1:
                    de:97:ad:35:51:0d:22:61:c7:41:4e:bf:3a:ea:65:
                    50:91:40:31:fd:5d:0f:db:14:fa:1b:37:70:da:cc:
                    84:7b:fe:96:f7:0b:5d:62:5b:c0:1e:96:4e:dc:46:
                    5b:3b:84:ff:a8:b7:46:78:b8:87:87:8d:4f:26:51:
                    f1:a4:d2:95:77:53:66:fa:9f:ab:bd:07:06:0b:bc:
                    e2:71:2c:53:e8:4a:8f:1f:3c:32:6d:02:25:87:41:
                    3f:56:d6:80:7e:f6:c7:48:81:65:f1:d2:ca:12:99:
                    7b:77:80:69:a0:7b:43:95:5c:48:17:88:e5:ae:62:
                    ca:44:e8:bf:ec:0b:81:5d:22:35:24:ea:7f:4b:98:
                    dc:b2:f1:76:4a:f5:e5:1c:50:9b:57:d0:ab:15:a3:
                    bc:b5:07:f0:ea:4b:1c:e7:8f:f4:5b:db:da:13:67:
                    fa:7b:4e:7e:b6:99:5e:78:83:68:97:37:52:e2:4a:
                    d4:45:41:93:9c:09:33:5f:17:dd:c1:80:62:d7:87:
                    ab:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:5A:93:61:4A:DD:75:7C:EB:DA:E7:C1:76:7A:95:A1:D6:1E:3A:60
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/s1qTYUrddXzr2ufBdnqVodYeOmA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.79.174.0/23

    Signature Algorithm: sha256WithRSAEncryption
         85:30:4e:7a:1f:30:69:6f:e1:88:55:9f:f9:0b:8a:7b:47:3e:
         f7:60:3d:31:61:fe:3e:60:bc:9a:9c:90:da:11:0b:9f:71:35:
         de:11:bc:95:ec:63:d7:ad:21:ac:3c:4f:6c:bd:72:1d:c7:fb:
         55:bb:e1:90:c0:78:b4:67:31:cd:db:6e:e6:fa:a7:c8:97:e2:
         66:14:52:2c:1b:c0:51:9f:e0:a3:e0:05:c3:28:a6:cf:44:c2:
         70:86:db:76:20:50:f5:28:9e:9b:04:e9:7c:ff:85:f2:25:c0:
         d4:30:7b:ed:b9:2e:8f:9c:39:3c:3f:ec:db:50:0a:6e:0a:a0:
         03:97:06:89:3f:9f:55:6a:75:dc:16:1a:b6:87:42:39:51:83:
         c0:76:43:d6:9f:91:59:23:ef:2f:d6:c4:cd:4c:aa:e4:97:24:
         e0:c5:59:28:8e:07:10:f2:6c:bc:b2:f7:a8:cd:17:ff:a0:6c:
         48:50:b7:05:a9:c3:da:ab:91:9e:f5:76:df:93:13:d8:e9:df:
         f2:88:a7:e9:15:05:62:85:8b:de:01:80:dd:1c:d3:67:6c:e5:
         78:16:b6:c7:7f:af:fd:db:29:ca:31:ae:0f:af:c2:e8:65:9c:
         60:6e:e2:97:3e:b8:8c:12:de:9c:42:39:c5:85:4f:bd:5d:bb:
         d3:6c:90:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 02:41:55 2024 by rpki-client on console-ams.rpki-client.org