Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/ttXTkjn9hGLWs8upbcQdiEtpaMQ.roa
File:                     ttXTkjn9hGLWs8upbcQdiEtpaMQ.roa (raw, json)
Hash identifier:          rJo+IK6JIyTrNUOh/u2FhLsbwWWpEb/Mx3gSFc5+GKc=
Subject key identifier:   B6:D5:D3:92:39:FD:84:62:D6:B3:CB:A9:6D:C4:1D:88:4B:69:68:C4
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       05E9
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ttXTkjn9hGLWs8upbcQdiEtpaMQ.roa
Signing time:             Thu 29 Feb 2024 01:35:37 +0000
ROA not before:           Thu 29 Feb 2024 01:35:37 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     9605
IP address blocks:        183.74.12.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1513 (0x5e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Feb 29 01:35:37 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=B6D5D39239FD8462D6B3CBA96DC41D884B6968C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:41:96:55:62:ff:7c:dd:3e:8d:01:8e:95:63:
                    63:bd:b9:4e:97:69:05:f9:f6:e8:6d:b4:e8:5e:08:
                    6c:45:b9:62:39:f6:68:79:17:01:d4:7e:8b:76:58:
                    51:01:d7:69:cc:7e:b0:97:04:1b:03:df:05:f0:aa:
                    70:41:3b:a4:55:43:da:51:ce:8d:0b:80:8f:d5:7f:
                    1c:0d:ce:4b:50:c2:a5:14:40:ca:19:75:e1:bd:59:
                    22:40:16:7e:d8:fc:99:15:54:eb:c7:ee:f9:18:b0:
                    09:0b:54:a6:9f:34:22:d6:1b:fa:3f:47:5f:04:76:
                    f2:c0:1b:b6:7e:d8:6f:78:10:3d:cc:a7:0b:a8:8a:
                    c2:76:0a:19:4c:f8:3d:fc:36:01:78:93:53:7e:a2:
                    d2:dd:fe:45:0b:5d:6e:be:d2:58:24:61:fe:0e:dc:
                    80:c3:c8:05:d1:99:81:18:63:99:46:83:ed:15:8f:
                    8b:23:fc:d0:30:97:2a:bb:1e:bb:de:f3:58:a1:6c:
                    16:99:a1:3e:65:1f:6a:33:74:0c:52:e1:c8:c4:9d:
                    f9:06:f7:00:3d:30:63:c6:b3:04:e5:85:62:1c:e5:
                    f3:b3:b0:43:57:73:5b:be:64:a4:1b:db:8d:c3:df:
                    d0:f6:82:c7:f6:23:30:ca:9e:f6:ab:00:38:92:57:
                    b4:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:D5:D3:92:39:FD:84:62:D6:B3:CB:A9:6D:C4:1D:88:4B:69:68:C4
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ttXTkjn9hGLWs8upbcQdiEtpaMQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.74.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0f:09:e4:a5:4b:c2:1d:03:fc:ad:52:d2:42:a9:de:01:4a:cb:
         72:9d:63:b7:90:0b:ce:66:c3:e2:84:d7:cb:2f:5f:f3:dc:e9:
         74:78:d7:53:a3:51:36:76:8c:b6:59:a6:c2:71:2f:c5:6d:dd:
         30:36:dc:ca:2e:51:14:98:c1:e9:46:f7:e3:d5:3a:50:23:62:
         13:8c:15:87:70:44:ee:33:36:99:3c:d6:f7:01:43:ab:2c:8d:
         a7:78:a6:ec:45:53:8c:e1:cf:b3:d9:6b:33:df:a2:82:3e:cb:
         df:dc:ac:84:fb:41:40:0f:a0:3d:1d:fa:fb:05:2f:39:92:47:
         75:66:fa:4a:39:72:a5:bf:c4:54:74:84:b8:a3:09:4d:be:ee:
         4e:8b:93:7a:f3:93:46:39:0f:6b:2e:f1:b8:40:82:7d:b4:9f:
         a4:5b:b3:4c:59:b0:f3:7d:10:07:b6:58:7b:52:6f:d3:74:55:
         47:0e:53:5c:03:a2:c2:ee:48:6c:81:30:00:38:0d:43:d6:18:
         72:c3:60:6b:30:22:74:6c:23:6c:e3:cb:ff:2d:1f:fd:7a:e6:
         35:80:06:22:fb:fd:13:2a:b1:e4:c2:ad:f4:5a:88:bf:ca:2a:
         77:e9:c5:57:b6:5d:8b:38:88:5c:6b:e2:ac:31:8e:02:d4:e2:
         14:f7:14:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 15:54:37 2024 by rpki-client on console-ams.rpki-client.org