Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/vrNvkTvnAsH0tw8SsGru8JpLjdU.roa
File:                     vrNvkTvnAsH0tw8SsGru8JpLjdU.roa (raw, json)
Hash identifier:          mMqsqSBh6Cf77ZFmd0k6OV5n23upUfzysdKK4+ZQEG8=
Subject key identifier:   BE:B3:6F:91:3B:E7:02:C1:F4:B7:0F:12:B0:6A:EE:F0:9A:4B:8D:D5
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       058D
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/vrNvkTvnAsH0tw8SsGru8JpLjdU.roa
Signing time:             Thu 27 Jul 2023 16:58:15 +0000
ROA not before:           Thu 27 Jul 2023 16:58:15 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     9605
IP address blocks:        1.79.112.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1421 (0x58d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jul 27 16:58:15 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=BEB36F913BE702C1F4B70F12B06AEEF09A4B8DD5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f7:b3:f3:11:7f:53:f7:22:25:a9:17:cf:61:
                    e2:74:c5:62:e4:2e:82:57:7c:9c:10:78:e6:23:da:
                    ea:4f:48:38:f9:ca:51:54:62:7d:b0:9c:40:9d:2d:
                    39:34:bd:a1:da:6d:3e:02:c6:5d:57:51:0a:f1:00:
                    2f:64:3a:b7:97:0a:eb:9e:59:3d:32:e1:fe:5b:c5:
                    ea:7c:52:6a:d6:73:30:c8:93:be:13:3a:00:94:35:
                    f6:8d:0b:c1:1d:e7:1f:b1:84:c5:8c:79:58:5c:86:
                    c8:70:26:cb:c1:35:12:74:08:90:89:53:64:bd:2e:
                    6e:2c:ca:e9:ff:1a:65:7a:ff:db:91:68:7f:6f:39:
                    2f:e5:4f:ba:21:52:cb:74:fa:26:71:56:55:15:f0:
                    40:6c:f6:19:fa:c6:a5:6f:4d:92:b5:4d:53:da:c0:
                    12:56:bf:1a:de:7a:e4:f5:03:d2:c8:c5:44:4e:14:
                    bf:9c:a1:55:35:0f:8e:12:49:1d:49:b2:11:36:d5:
                    2b:5a:fc:cc:4d:a9:58:ec:0f:d6:f1:8f:1f:4f:a2:
                    cc:80:b0:8c:77:67:ba:65:0c:a9:d9:01:10:e1:5f:
                    61:55:35:10:f2:53:b0:e2:dd:31:f5:16:f3:38:65:
                    69:31:c2:5a:25:9d:55:59:c1:ca:88:e9:50:7e:00:
                    5f:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:B3:6F:91:3B:E7:02:C1:F4:B7:0F:12:B0:6A:EE:F0:9A:4B:8D:D5
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/vrNvkTvnAsH0tw8SsGru8JpLjdU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.79.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a8:f3:16:d6:ad:0e:4f:38:cc:7b:a8:91:67:19:9f:54:9c:ef:
         ef:6b:fc:21:33:7e:65:7c:60:45:12:3b:fa:f2:ab:d8:a1:ff:
         60:b8:12:60:e1:ed:67:7d:f0:54:80:f9:7d:65:7e:16:ec:a2:
         37:fe:e1:01:5d:f0:fa:b7:87:72:e0:54:27:d9:41:1a:71:15:
         73:e2:78:9c:4e:ec:8c:0f:5a:b1:e9:91:64:df:ca:68:5a:f3:
         33:60:60:6f:e8:c0:b4:37:d4:b6:3b:49:14:ec:77:84:8c:d2:
         36:92:a4:00:1d:bf:53:b8:ea:0b:92:8e:da:33:eb:32:c7:10:
         3e:9f:1a:f7:32:1b:ca:11:aa:ff:33:1d:0b:b1:61:8a:46:32:
         4f:32:62:a7:75:56:a1:87:11:fe:5e:1c:e4:b7:0a:e9:05:4d:
         8f:36:f0:a3:e4:95:d2:6c:2e:ad:c2:1c:1c:ef:bd:01:f9:fb:
         ee:5f:68:2b:85:22:e8:90:d0:08:4c:06:02:29:f9:6b:93:92:
         64:46:ee:f9:f2:39:88:a2:ac:91:f7:72:61:97:7d:32:e2:d4:
         10:33:78:ad:52:ee:3d:77:72:02:d6:86:ef:0b:5c:87:1a:23:
         08:4f:b5:24:2a:3b:c9:6c:56:35:12:ce:5d:fe:16:54:9b:ae:
         34:d4:06:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:38:48 2024 by rpki-client on console-fra.rpki-client.org