Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/ugiL7_QxuO-7t_lGHeL6PwixFCY.roa
File:                     ugiL7_QxuO-7t_lGHeL6PwixFCY.roa (raw, json)
Hash identifier:          g81HwHpFl68RnOIxGsorFdAGKlL2DLVuUyaF8rEIuiQ=
Subject key identifier:   BA:08:8B:EF:F4:31:B8:EF:BB:B7:F9:46:1D:E2:FA:3F:08:B1:14:26
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       013C
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ugiL7_QxuO-7t_lGHeL6PwixFCY.roa
Signing time:             Wed 24 May 2023 16:31:10 +0000
ROA not before:           Wed 24 May 2023 16:31:10 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        1.78.18.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 May 2024 13:36:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 316 (0x13c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: May 24 16:31:10 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=BA088BEFF431B8EFBBB7F9461DE2FA3F08B11426
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:2f:85:8e:28:63:f0:0b:8a:c6:1f:47:fd:8d:
                    4c:9a:3b:e8:88:d3:30:2d:3a:ad:69:35:91:6b:0a:
                    f4:91:83:dd:7f:da:ec:74:d2:8c:db:c6:b6:51:4d:
                    9b:16:04:22:20:1a:ce:f9:d9:67:2c:c3:d7:5c:19:
                    ba:3c:56:16:66:12:fc:28:af:07:ba:12:6d:aa:e3:
                    f4:01:50:37:c5:3e:d9:b3:0c:2d:e3:07:38:a6:ce:
                    01:b3:80:47:f1:d7:c3:eb:f0:5b:31:60:9a:43:5b:
                    1b:9f:63:6a:e8:ae:81:45:23:89:8c:e5:07:59:ee:
                    ec:47:8e:da:b5:8c:5f:e3:e2:c8:6a:41:32:6f:73:
                    92:df:ce:34:46:bf:9e:c6:95:06:40:32:8f:8b:ed:
                    99:60:1a:65:42:e4:a4:ae:de:1c:08:c7:3e:b3:fc:
                    fe:35:e8:ff:0c:c4:6b:0a:1d:d0:49:73:e2:db:74:
                    2e:d8:5a:76:8c:ee:b7:cd:0b:1b:c2:af:66:96:34:
                    67:e3:f1:c6:f7:20:47:9b:3a:bd:d9:bd:f0:7c:b5:
                    da:a4:30:62:00:11:c5:09:dc:ec:61:d7:f0:b9:47:
                    43:c5:7e:0c:be:bf:fc:be:81:d0:10:67:a1:88:9c:
                    9d:2c:63:72:2f:2d:d9:4a:c0:7e:d6:96:f3:d5:0c:
                    d0:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:08:8B:EF:F4:31:B8:EF:BB:B7:F9:46:1D:E2:FA:3F:08:B1:14:26
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ugiL7_QxuO-7t_lGHeL6PwixFCY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.78.18.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4e:41:ef:86:c7:f7:b8:71:c3:2e:78:be:f3:6d:cc:b0:f2:c0:
         d0:37:39:17:24:32:2c:dd:1c:49:96:3f:a3:54:42:d3:1e:3e:
         d9:1c:85:86:e1:5e:b0:88:ee:dc:fb:4b:6b:99:29:ed:97:f1:
         a8:09:0b:a6:b0:05:11:0b:cd:82:48:47:6a:43:fe:ab:04:18:
         32:72:2e:29:64:16:ab:6a:c0:41:8b:16:4b:02:37:cd:4e:e1:
         ef:ba:49:ee:f4:8c:00:5a:d7:de:6f:10:86:c0:3a:c1:dd:de:
         9a:d5:d2:83:5c:79:49:7b:a6:87:6b:b8:83:bb:51:a6:54:3b:
         0a:4c:b7:bb:39:39:82:99:d8:ea:6c:ca:2f:ac:a8:7e:03:1e:
         17:ba:5c:88:dc:c2:36:fd:96:f8:df:ec:86:15:7b:17:c4:20:
         ce:5d:26:91:8d:e0:6b:72:b6:26:a7:01:f1:08:b0:73:c9:c0:
         22:e2:07:ca:5c:68:38:fa:67:3d:5a:54:70:6e:5c:93:72:a9:
         c0:34:b5:1d:66:23:22:c1:85:81:74:6d:a2:32:fe:1f:8a:da:
         d1:0b:e9:2b:7c:63:1e:a8:da:e2:02:a3:25:e5:9c:72:e2:bc:
         2f:2f:70:9f:04:01:2b:fa:be:35:fa:2c:16:e4:ac:fe:87:89:
         b3:6c:1b:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:15:58 2024 by rpki-client on console-ams.rpki-client.org