Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/shyjFHVamnyR0eoDYJiCCczfurs.roa
File:                     shyjFHVamnyR0eoDYJiCCczfurs.roa (raw, json)
Hash identifier:          PwV9NGrl62Tij57HLd8dK/Ys3G4F/spjPG8LzHlYnD0=
Subject key identifier:   B2:1C:A3:14:75:5A:9A:7C:91:D1:EA:03:60:98:82:09:CC:DF:BA:BB
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0A06
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/shyjFHVamnyR0eoDYJiCCczfurs.roa
Signing time:             Sun 30 Jun 2024 01:44:14 +0000
ROA not before:           Sun 30 Jun 2024 01:44:14 +0000
ROA not after:            Tue 24 Jun 2025 10:46:45 +0000
asID:                     9605
IP address blocks:        183.75.64.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2566 (0xa06)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun 30 01:44:14 2024 GMT
            Not After : Jun 24 10:46:45 2025 GMT
        Subject: CN=B21CA314755A9A7C91D1EA0360988209CCDFBABB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:e6:d0:81:a9:e4:4c:a2:87:27:9f:4a:c5:eb:
                    ab:70:c9:3b:65:f3:81:44:24:55:b3:55:d6:a3:0d:
                    e2:7c:b3:d7:de:f5:7b:11:5f:a4:a0:30:8f:d6:51:
                    bb:46:6d:4b:1d:d7:01:7f:08:81:62:98:47:05:84:
                    a1:05:4c:bf:59:6d:c7:26:82:a3:07:5e:3e:9d:c3:
                    b5:75:ff:8c:c0:16:78:8d:71:86:37:d8:6d:4f:50:
                    a9:40:fd:e8:7f:aa:4d:2a:75:72:25:62:7f:70:23:
                    73:72:5e:29:ec:88:7d:37:2a:70:92:5b:b7:94:81:
                    18:3c:87:59:91:6d:59:0f:05:94:19:dd:48:4b:aa:
                    37:65:75:b4:07:30:02:78:fd:36:e6:77:35:e0:89:
                    eb:be:65:67:33:d6:55:5f:3b:0c:62:3d:d0:85:d9:
                    72:f0:c7:d6:8d:14:8a:eb:89:10:bf:49:ec:16:c5:
                    f9:c8:48:a5:33:fe:5d:92:5a:f5:3f:9a:08:82:73:
                    8a:c6:59:1d:ba:8b:c4:27:21:ac:da:2f:e8:36:25:
                    5c:e4:2f:c1:88:88:1b:e0:36:ad:47:c9:7a:0e:8e:
                    24:54:fb:c8:7a:49:ad:ae:02:60:d8:a0:91:fa:44:
                    71:26:39:19:37:92:8d:6e:bc:e2:c6:74:a0:b9:2e:
                    f8:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:1C:A3:14:75:5A:9A:7C:91:D1:EA:03:60:98:82:09:CC:DF:BA:BB
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/shyjFHVamnyR0eoDYJiCCczfurs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.75.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         d4:83:f0:35:10:d9:ed:f5:2f:86:7f:62:6c:82:7e:e7:88:3a:
         ed:9a:3b:4e:b6:df:2f:f8:64:b6:9d:ef:cb:c1:85:3c:0d:79:
         27:05:b8:f5:a9:b1:a6:1d:0f:7d:df:03:1c:f0:3a:71:8d:19:
         5f:8d:80:6f:29:e7:9d:c8:69:dc:75:16:3b:63:93:de:ca:91:
         74:4c:68:42:81:3a:eb:62:1a:b5:58:72:2e:19:db:1e:bd:56:
         3b:09:7d:ab:93:7e:15:ef:0d:78:d4:71:aa:b4:f0:d6:17:f2:
         33:cc:27:a2:ae:e7:14:2b:e0:5b:73:20:3b:0c:96:16:ae:74:
         42:54:93:47:3c:97:52:33:29:43:14:da:02:2f:e0:26:bd:5f:
         25:61:01:77:d9:86:00:48:a5:0f:74:23:34:d9:b4:47:77:1b:
         66:5e:bf:11:a4:f9:52:69:1e:23:dc:6b:3e:43:1b:e4:7d:b2:
         34:0f:ea:c1:99:04:da:c5:e4:fc:22:23:fa:cf:c9:a8:e3:f1:
         46:97:35:24:2c:bc:e0:9d:f6:b9:e8:13:dd:f0:5e:0a:32:1a:
         e7:d9:08:3f:f6:8f:70:9c:e0:80:54:c9:ae:7b:83:21:4a:99:
         e3:a2:d0:7f:3f:29:87:e3:83:e9:89:5b:42:04:36:6d:81:83:
         f7:87:6c:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:59:12 2024 by rpki-client on console-fra.rpki-client.org