Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/w_rtLcT-of2qZYi558n5W5SYSEU.roa
File:                     w_rtLcT-of2qZYi558n5W5SYSEU.roa (raw, json)
Hash identifier:          ClCEJqUEA93KbWZQa50Sh9G1XvXx+/nM43zvmXJF1Fc=
Subject key identifier:   C3:FA:ED:2D:C4:FE:A1:FD:AA:65:88:B9:E7:C9:F9:5B:94:98:48:45
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       05F2
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/w_rtLcT-of2qZYi558n5W5SYSEU.roa
Signing time:             Thu 29 Feb 2024 01:35:41 +0000
ROA not before:           Thu 29 Feb 2024 01:35:41 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     9605
IP address blocks:        1.72.0.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:41:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1522 (0x5f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Feb 29 01:35:41 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=C3FAED2DC4FEA1FDAA6588B9E7C9F95B94984845
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:9e:f5:f7:2d:e6:e9:a1:85:35:fd:3a:cb:46:
                    3d:32:52:03:12:1f:e2:d6:ad:6d:a1:ba:b4:71:fc:
                    d2:c5:ce:04:c1:4e:d7:6a:04:03:d8:9c:b1:91:58:
                    87:a4:47:56:48:78:d0:ee:47:da:22:84:e3:82:ba:
                    f8:3f:da:d7:39:60:ca:0d:9d:5b:25:dc:67:dc:73:
                    03:ea:55:3b:9f:80:25:e5:17:47:6f:46:f3:da:7f:
                    c9:36:99:bb:9e:1a:d5:9c:88:47:bb:bc:76:36:c4:
                    ff:56:67:76:9b:86:95:0d:26:ba:76:27:91:ce:87:
                    76:3c:12:5c:3b:92:17:55:1b:5a:45:49:9a:de:d1:
                    33:26:59:a6:3b:3d:7f:b2:90:ee:73:d7:7a:ae:a9:
                    d2:b9:02:fd:eb:76:57:e4:b1:33:c8:46:39:d5:43:
                    74:fc:79:c7:17:d8:ae:ba:4a:36:3d:59:ea:e1:78:
                    60:d6:21:dd:55:7d:e7:d3:79:22:e5:b7:54:a1:7d:
                    07:c5:fb:6b:27:8e:14:44:d3:86:74:84:fb:98:29:
                    bc:aa:bf:e2:6c:0e:5a:13:81:b2:f5:52:d6:6c:28:
                    8e:34:97:57:cb:f9:a5:fc:99:51:76:c2:a0:65:69:
                    23:6d:64:42:71:c0:1a:0a:c1:84:6d:2e:9b:95:c0:
                    a5:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:FA:ED:2D:C4:FE:A1:FD:AA:65:88:B9:E7:C9:F9:5B:94:98:48:45
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/w_rtLcT-of2qZYi558n5W5SYSEU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.72.0.0/23

    Signature Algorithm: sha256WithRSAEncryption
         90:8d:78:79:84:c6:16:62:da:d2:86:53:df:44:5f:d2:b9:8b:
         30:6c:dc:01:40:28:80:9c:aa:a3:0b:1c:dd:ef:43:66:04:73:
         ad:87:4d:a1:80:ae:c8:ce:2a:02:84:bb:7f:4a:71:5d:a5:17:
         41:8f:ee:cb:86:4d:24:ae:6e:02:11:e1:51:dc:ca:eb:6c:17:
         01:ec:9f:a7:05:05:ed:a7:53:9e:33:3c:3e:13:8a:36:8b:90:
         a8:85:6f:c5:1e:50:52:45:db:bc:7f:19:6b:e4:bd:37:45:db:
         28:86:2b:eb:2f:35:9b:f8:9a:ed:43:93:ff:e3:6e:9a:f3:c9:
         c2:51:cf:00:a6:a0:37:3d:fd:05:6d:48:f3:45:4e:e3:85:ee:
         0a:e5:9e:93:ed:65:08:e2:ee:d8:67:3b:74:82:43:3f:72:ef:
         66:53:03:cd:3b:e1:1f:f9:d8:b7:cd:06:72:a8:de:a7:89:65:
         27:c8:eb:0a:11:92:83:9d:e2:ee:66:35:72:70:48:76:2b:05:
         9c:ab:72:d6:de:fa:b5:f4:ad:f8:0b:49:33:d7:5e:33:3b:d1:
         82:9d:2f:da:0e:c6:4f:06:03:6c:55:bd:1a:bf:d5:dc:68:7f:
         b1:3e:6f:c1:63:c6:76:5a:ea:48:9b:30:b7:5c:77:64:ee:a4:
         27:2f:80:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:24:03 2024 by rpki-client on console-fra.rpki-client.org