Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/v_eBdftrPafL9AJXna7v4oZ9ZM8.roa
File:                     v_eBdftrPafL9AJXna7v4oZ9ZM8.roa (raw, json)
Hash identifier:          eh8iOoUAv+cJ3NSUuUKNq73aUPDcpjI8SwgfztE1p2E=
Subject key identifier:   BF:F7:81:75:FB:6B:3D:A7:CB:F4:02:57:9D:AE:EF:E2:86:7D:64:CF
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       02BA
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/v_eBdftrPafL9AJXna7v4oZ9ZM8.roa
Signing time:             Tue 30 May 2023 17:17:33 +0000
ROA not before:           Tue 30 May 2023 17:17:33 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        219.114.128.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 May 2024 13:36:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 698 (0x2ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: May 30 17:17:33 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=BFF78175FB6B3DA7CBF402579DAEEFE2867D64CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:05:2f:a7:21:05:77:39:7c:da:df:40:4f:28:
                    9f:6e:65:6d:a6:89:fd:61:73:42:64:48:a0:56:37:
                    00:85:fa:c2:1f:42:e4:39:27:bf:a4:b1:8b:b5:fa:
                    d8:5b:b2:99:08:4e:00:4e:5f:5e:57:14:07:67:ad:
                    f8:42:0f:0b:74:d8:a1:f8:7c:6b:7b:01:a2:07:7d:
                    b2:64:cd:c5:24:14:b1:a3:ad:ab:d0:36:1f:cc:c4:
                    88:f2:12:78:b1:18:d5:c4:c4:ff:a5:fb:4c:85:0a:
                    2d:23:cc:9c:1e:4e:20:f5:3e:a7:a9:e6:bf:2c:ec:
                    52:da:a8:dd:9a:48:52:c8:95:20:56:95:74:75:d5:
                    e2:dc:5e:80:2f:ab:ed:78:78:ba:82:a3:d9:a9:ce:
                    78:c0:ec:99:46:66:23:38:a4:98:01:4b:b1:37:1e:
                    54:2d:d7:42:bf:2d:45:21:a0:d6:a9:29:28:33:35:
                    1e:a7:47:31:aa:b8:9c:dd:29:fa:30:54:e1:1f:c8:
                    3b:fe:11:8b:05:e3:ad:43:fb:16:ee:83:d5:e3:21:
                    42:09:72:20:d6:5d:fd:11:67:4f:65:ab:3d:43:c6:
                    a1:65:46:d2:f1:32:84:e8:16:27:b0:3f:72:08:86:
                    e6:34:f1:d8:51:4a:19:8f:53:a7:49:f7:fe:44:6e:
                    20:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:F7:81:75:FB:6B:3D:A7:CB:F4:02:57:9D:AE:EF:E2:86:7D:64:CF
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/v_eBdftrPafL9AJXna7v4oZ9ZM8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.114.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         cf:f1:df:fd:f7:30:dd:8a:80:a1:4c:28:86:29:d6:4c:f7:93:
         d3:f1:c2:a8:e7:95:19:c7:bf:f9:d9:b7:48:65:59:e1:a9:40:
         1a:1f:6e:89:98:86:18:bf:c3:37:f4:fd:46:7e:41:1d:6f:6f:
         a6:af:07:b7:12:99:3a:aa:37:74:9f:22:c6:2c:e6:01:67:b5:
         0d:52:19:a3:6f:2d:20:ef:3e:20:58:61:9c:37:7f:98:92:a3:
         a5:77:c7:16:0f:29:45:90:3d:1d:f9:66:bd:b4:9d:a6:6d:ba:
         e6:3e:66:eb:99:7c:42:51:b1:2d:88:e8:61:d6:f4:6a:e7:ab:
         7a:af:f3:05:31:d7:68:6d:d0:5b:f2:ac:1f:7e:e7:5e:08:d9:
         51:71:d1:7c:17:ab:13:2a:36:e1:24:1e:f7:11:db:c7:c2:e5:
         99:64:0f:8c:71:da:8f:63:70:d0:b9:8d:c2:e5:0e:c1:84:26:
         bf:fb:91:16:ba:3e:bc:c4:77:82:7b:f2:b8:cb:97:79:16:12:
         8f:ec:c2:43:76:fb:56:5c:ce:95:f3:2c:9b:62:30:3e:b2:97:
         64:e2:4e:95:00:a9:ed:6f:ab:c9:f4:ce:27:6f:73:31:55:2f:
         eb:0c:83:73:6a:71:bd:91:d2:4c:9e:c5:80:dc:79:6f:dd:6f:
         01:22:55:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:15:58 2024 by rpki-client on console-ams.rpki-client.org