Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/wca4aWVcxidDNhNMNJbNQp13hpg.roa
File:                     wca4aWVcxidDNhNMNJbNQp13hpg.roa (raw, json)
Hash identifier:          3IuiVZaIrRhFXE/gKUxjlxL9U3+dB6Yo7ws6eUx94Nk=
Subject key identifier:   C1:C6:B8:69:65:5C:C6:27:43:36:13:4C:34:96:CD:42:9D:77:86:98
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       05E7
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/wca4aWVcxidDNhNMNJbNQp13hpg.roa
Signing time:             Thu 29 Feb 2024 01:35:35 +0000
ROA not before:           Thu 29 Feb 2024 01:35:35 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     9605
IP address blocks:        1.66.105.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1511 (0x5e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Feb 29 01:35:35 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=C1C6B869655CC6274336134C3496CD429D778698
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:a3:bd:61:ca:2e:4a:e7:18:5d:8c:e2:a0:3c:
                    49:28:cf:24:0b:fd:b1:e6:eb:34:5b:d6:70:88:f6:
                    c1:3c:48:9d:26:81:a8:40:6b:5c:da:d2:88:7a:e0:
                    51:80:d4:fa:cc:30:31:44:b8:db:17:55:39:f1:be:
                    ce:36:d6:0e:ab:85:63:42:47:3d:79:bd:bc:f5:8e:
                    ae:08:c6:a9:cc:d8:db:af:ed:35:2f:da:44:13:fe:
                    fc:78:14:1e:14:37:6d:4a:1b:19:56:06:3d:35:ed:
                    14:34:37:b0:4a:12:ed:a8:2f:42:06:a4:87:b5:0a:
                    d9:4e:4a:c5:c2:1d:72:8e:f0:82:9e:19:c8:a7:31:
                    0c:21:45:dd:42:4a:de:16:aa:22:13:2c:c9:55:d7:
                    62:22:07:dd:ec:17:42:ea:fc:b0:c7:20:66:cb:4c:
                    98:43:ec:aa:06:84:f4:f2:10:7b:b6:03:70:78:73:
                    76:25:ef:ed:4a:8d:18:6d:f8:90:5c:92:f1:97:aa:
                    ae:74:31:cb:0d:39:69:63:27:9f:2c:17:1c:9c:73:
                    5d:01:83:ec:7b:db:8e:98:d0:de:55:be:fd:4a:21:
                    50:bf:4a:c6:70:3f:0e:5f:a1:c4:f2:d6:d2:69:23:
                    a3:83:a5:a4:d5:68:f9:41:42:93:c4:7f:9f:5d:9f:
                    96:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:C6:B8:69:65:5C:C6:27:43:36:13:4C:34:96:CD:42:9D:77:86:98
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/wca4aWVcxidDNhNMNJbNQp13hpg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.66.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:ef:79:6b:ef:f8:a9:1c:19:e8:02:47:d1:5a:9a:79:28:32:
         b0:85:20:c9:3f:0e:2e:9b:b0:5f:52:d5:c8:49:fe:a3:9a:0e:
         86:6f:ab:f8:4b:7c:30:36:1e:98:ba:bd:c2:d6:ce:9e:a8:52:
         56:66:f1:5e:9a:bc:62:77:bb:4c:e4:ab:c1:69:d7:48:a6:5b:
         2e:15:52:e8:59:24:1d:0c:d0:c5:bb:a3:2d:70:77:4c:d6:7a:
         37:c7:92:08:75:33:fa:36:d4:91:a2:b4:9a:6c:0c:47:9d:be:
         7f:97:45:a7:51:ff:fd:b2:f7:46:44:92:d6:2b:b2:4a:5e:dd:
         60:c0:20:31:c7:c4:b5:ef:fb:59:ca:90:07:ca:34:03:e0:2c:
         75:16:d6:e2:13:01:77:c2:93:8d:ca:d0:e2:0b:78:90:c6:40:
         b0:09:2f:ac:aa:9e:b1:cf:d6:3f:32:44:89:4e:05:c9:e4:db:
         21:ba:b4:20:c5:3d:26:8a:bb:a2:8e:eb:31:ff:63:65:8d:20:
         7a:ff:18:de:2a:d6:6c:32:14:a4:34:f5:f1:5e:0d:fb:5a:16:
         64:50:a4:89:32:6a:4c:30:a3:3e:15:1f:57:13:e2:b8:fd:ce:
         11:c9:d1:60:a9:47:80:14:68:04:63:78:33:6f:a5:e0:b2:82:
         fe:d7:84:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 15:54:38 2024 by rpki-client on console-ams.rpki-client.org