Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/sf18aNgm8HQWozhLtziFs6bLgrk.roa
File:                     sf18aNgm8HQWozhLtziFs6bLgrk.roa (raw, json)
Hash identifier:          kSdB/LufriQMz8/Og2fbXj83D0vHKnjdRlp1oe9vUW8=
Subject key identifier:   B1:FD:7C:68:D8:26:F0:74:16:A3:38:4B:B7:38:85:B3:A6:CB:82:B9
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0599
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/sf18aNgm8HQWozhLtziFs6bLgrk.roa
Signing time:             Thu 27 Jul 2023 17:00:13 +0000
ROA not before:           Thu 27 Jul 2023 17:00:13 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     9605
IP address blocks:        1.72.48.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 23 Jun 2024 14:09:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1433 (0x599)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jul 27 17:00:13 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=B1FD7C68D826F07416A3384BB73885B3A6CB82B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:6d:c2:59:e2:68:02:85:97:2c:d6:11:51:06:
                    1a:75:6b:59:1d:0f:45:7c:37:7a:ca:b8:8a:ad:e4:
                    b5:e6:91:89:bc:2a:3b:32:ac:db:35:23:54:b0:bc:
                    b4:c9:03:0b:e0:c2:79:53:61:e9:9a:b0:35:3e:fa:
                    d7:85:eb:72:90:20:95:eb:19:3a:b6:6b:41:a4:c3:
                    cf:72:15:fa:d9:4d:0f:f9:bc:9a:45:66:df:48:6b:
                    0b:f5:6d:b5:1b:9e:da:4d:02:bf:76:c2:df:fd:82:
                    1c:ae:e6:1f:9a:8b:99:dc:2c:29:b2:4f:4a:41:10:
                    c8:48:23:f5:9a:dc:1a:34:06:f4:a2:3c:66:9b:00:
                    b0:c0:1c:34:15:23:24:94:b9:96:e5:f9:4e:19:5f:
                    02:1a:2c:f5:a9:e4:3b:01:12:b4:f7:08:a9:7c:0c:
                    02:31:bb:d1:3f:fb:4c:25:5a:95:f2:a1:13:39:bc:
                    ce:f3:95:c2:2f:49:01:9e:07:40:5d:58:d4:93:6e:
                    79:f5:7e:5d:4c:9e:43:15:26:f1:2a:ce:2e:21:2e:
                    69:35:9d:4c:68:e4:cb:0a:c4:cc:60:45:e0:50:e3:
                    57:29:ba:55:8f:74:9b:f6:ad:58:4e:19:32:c0:7f:
                    f9:8e:39:96:8d:0f:90:d6:3f:f2:0a:15:9a:fc:5a:
                    19:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:FD:7C:68:D8:26:F0:74:16:A3:38:4B:B7:38:85:B3:A6:CB:82:B9
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/sf18aNgm8HQWozhLtziFs6bLgrk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.72.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         49:04:40:40:a8:c5:db:16:a9:76:dc:40:5c:86:64:68:90:4e:
         d4:1e:18:bd:bb:d2:d9:86:6d:7a:e0:a7:0b:99:9f:76:26:cb:
         20:0a:40:56:d5:eb:a0:4d:cd:ef:77:62:cc:94:ee:00:b5:19:
         5b:3f:45:9e:8a:ee:20:a6:e2:a1:e7:f3:96:33:45:a8:7a:77:
         ec:ef:67:b3:80:d3:17:61:ff:0a:58:c1:57:73:29:04:22:ca:
         76:51:16:ba:b5:2b:7a:d7:22:95:9e:03:ef:63:74:d7:77:ff:
         cd:ff:f1:1e:b6:3d:8b:be:af:0f:ef:ae:2a:4d:62:94:5c:e2:
         c0:6c:22:1d:d0:ba:60:a0:c3:ff:52:e1:c6:c3:59:6f:49:c9:
         20:fd:d2:56:84:09:f9:e3:f2:13:91:04:95:68:79:e3:1e:62:
         7d:85:c0:6a:4a:a9:4f:cf:06:6d:cb:78:f1:5e:98:38:a3:a7:
         d6:a8:b5:cb:3b:46:b0:7e:64:0a:b4:32:c0:dd:98:b4:92:3e:
         0a:2a:2d:94:3f:72:5f:56:bf:22:2b:ab:3c:da:91:4f:bb:13:
         8f:6e:2c:72:8d:32:85:0a:5e:91:72:6d:ac:63:03:27:e2:46:
         00:46:c0:34:cd:7e:e0:83:a4:d6:57:ee:01:2b:f9:58:d6:92:
         f8:8a:64:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 14:52:15 2024 by rpki-client on console-ams.rpki-client.org