Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/ysI41HjPib-tDHraCjuwwuXXmIo.roa
File:                     ysI41HjPib-tDHraCjuwwuXXmIo.roa (raw, json)
Hash identifier:          QQtYC+uGvrscwA8O2i2vwi7pbgeJ6AaOFzYbUgBxvww=
Subject key identifier:   CA:C2:38:D4:78:CF:89:BF:AD:0C:7A:DA:0A:3B:B0:C2:E5:D7:98:8A
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0726
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ysI41HjPib-tDHraCjuwwuXXmIo.roa
Signing time:             Tue 30 Apr 2024 01:55:54 +0000
ROA not before:           Tue 30 Apr 2024 01:55:53 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        1.76.192.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1830 (0x726)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr 30 01:55:53 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=CAC238D478CF89BFAD0C7ADA0A3BB0C2E5D7988A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:9f:24:22:a6:9e:ae:16:c4:cd:1e:80:4b:35:
                    31:4b:a3:2f:8a:5e:2b:66:0f:31:f5:9b:84:5f:15:
                    d2:cc:5d:a7:e5:0a:eb:8a:18:49:3a:e9:be:34:0b:
                    36:b3:75:57:22:81:bb:5b:51:19:69:0d:20:11:91:
                    06:0e:20:b2:04:ba:72:7c:bd:33:46:e1:ce:49:a5:
                    67:db:50:ba:ee:23:e0:3b:76:93:ed:fb:6a:30:c9:
                    93:47:e1:08:37:17:47:35:c5:04:0a:a6:13:ac:8a:
                    14:49:11:14:1e:f2:17:ea:54:5e:9c:26:f9:dd:af:
                    cd:63:51:29:48:a7:9a:03:50:4d:d2:98:b5:eb:ee:
                    03:c7:7e:fd:66:33:a6:2f:6d:24:69:77:dc:f9:aa:
                    57:92:2a:f7:7a:5b:d1:e8:ab:4e:18:ec:d6:6f:b3:
                    7b:ec:90:29:e1:7d:87:91:78:e6:a5:b9:b4:bc:1c:
                    b6:39:19:e6:6b:4f:cc:88:dd:8e:af:e4:b1:a5:fc:
                    07:53:15:3e:83:bf:96:25:9c:59:1c:01:cb:00:f8:
                    88:e3:6e:f7:cd:73:1b:2a:4b:18:a0:cb:71:1b:af:
                    51:b3:de:2a:4a:00:e2:cb:14:70:17:f5:96:19:ba:
                    36:1a:d3:4a:4f:d6:1f:5b:a9:41:8a:01:29:b2:30:
                    69:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:C2:38:D4:78:CF:89:BF:AD:0C:7A:DA:0A:3B:B0:C2:E5:D7:98:8A
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ysI41HjPib-tDHraCjuwwuXXmIo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.76.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         cd:c0:fe:9e:23:6c:0f:83:2b:ee:71:b6:ba:00:74:a3:f8:24:
         b9:68:2d:1c:44:07:2a:82:4a:6e:ac:1f:c8:6f:c7:73:43:18:
         a7:8c:75:b1:a9:90:87:db:0f:81:63:fa:d6:55:0a:29:ef:ba:
         5d:6f:36:22:fd:f7:76:e4:82:15:96:a3:21:d6:54:c9:ed:10:
         0d:77:bd:d9:a4:d4:48:1b:f9:0b:e6:3b:d4:35:ba:00:40:79:
         4f:81:43:3b:35:12:51:29:62:25:f0:7a:6e:70:6b:77:60:aa:
         c6:8b:20:af:ad:d6:dc:26:d5:a3:83:89:4f:6d:2f:39:c7:74:
         fb:c2:2c:2b:4b:50:7a:bc:d5:06:93:9c:5b:2c:38:f5:91:c2:
         8e:cc:3b:91:f8:e1:22:1b:1d:90:cd:8b:36:92:a9:45:21:bb:
         72:94:1e:7a:58:42:2b:e2:41:52:95:f3:4c:45:50:ce:af:5d:
         be:75:72:4d:37:d8:d6:c5:70:03:db:cf:1a:3e:bf:88:bf:fd:
         f4:e9:a1:22:97:4f:78:0b:9e:e6:2a:a3:3f:a9:d6:18:ac:2e:
         2a:65:b5:b9:d2:54:27:9f:60:bc:18:fa:83:aa:63:cd:2e:51:
         4b:16:1a:f6:69:df:e1:97:df:84:d7:bd:73:ec:4d:5a:a9:12:
         7d:dd:7d:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:54:43 2024 by rpki-client on console-ams.rpki-client.org