Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/zGYB8wsPVHq4tk7iiomjHxjXud8.roa
File:                     zGYB8wsPVHq4tk7iiomjHxjXud8.roa (raw, json)
Hash identifier:          wM6RQsXYMzTzTXYNpdWJR2JfxTHGnipETedx99XllQE=
Subject key identifier:   CC:66:01:F3:0B:0F:54:7A:B8:B6:4E:E2:8A:89:A3:1F:18:D7:B9:DF
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       06BA
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/zGYB8wsPVHq4tk7iiomjHxjXud8.roa
Signing time:             Tue 30 Apr 2024 01:46:52 +0000
ROA not before:           Tue 30 Apr 2024 01:46:52 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        1.79.76.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:41:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1722 (0x6ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr 30 01:46:52 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=CC6601F30B0F547AB8B64EE28A89A31F18D7B9DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b3:57:2f:62:c7:3f:7d:38:49:63:28:de:57:
                    f3:7b:42:54:87:d0:28:73:e9:74:84:9c:d0:0a:28:
                    b2:07:17:0b:84:8e:87:59:01:81:3b:0a:ad:f6:f7:
                    66:b0:83:06:39:a9:98:63:48:55:63:50:0b:1f:f5:
                    0b:9d:3a:c5:2f:bd:1b:a4:d9:36:2f:3a:61:98:6b:
                    a5:1b:4a:0a:bf:d4:20:6d:3a:2e:d2:bb:4a:16:5d:
                    54:be:c2:de:f2:5a:05:3d:0c:95:2b:3c:c9:c7:ba:
                    03:92:6a:72:37:a8:6d:81:39:d6:22:f7:bb:4b:09:
                    e0:45:89:16:17:0d:3e:f4:33:24:58:5d:3a:28:da:
                    97:a8:7f:d0:b8:cc:50:58:cb:4d:7f:ed:ad:68:f0:
                    49:39:82:13:99:81:f6:07:a9:78:c3:f9:e3:c0:81:
                    95:dc:40:ff:ac:29:b9:d7:b7:32:6f:1b:5a:a5:2e:
                    d7:be:ed:22:69:5c:58:c1:be:a7:62:57:79:ef:af:
                    cb:b3:b9:19:c0:27:c3:88:81:45:b0:f5:4d:4f:6a:
                    81:8c:07:b8:47:5c:44:3d:cb:61:20:2e:45:ed:3d:
                    e0:7b:61:76:ec:ce:3b:03:12:28:79:bc:b9:05:c5:
                    eb:5e:39:a8:b5:a1:88:7e:26:9a:37:e5:3f:a4:f4:
                    39:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:66:01:F3:0B:0F:54:7A:B8:B6:4E:E2:8A:89:A3:1F:18:D7:B9:DF
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/zGYB8wsPVHq4tk7iiomjHxjXud8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.79.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         db:65:48:1c:ad:2b:07:c0:a4:2d:01:e4:a2:8e:84:2a:98:86:
         50:7e:4d:a7:f5:66:bf:44:bd:e2:ee:7e:11:5c:ea:44:1c:a9:
         23:0b:20:10:d8:cb:ac:d4:ac:d3:a9:08:d2:ee:83:e3:ba:90:
         e3:d9:77:71:51:63:62:aa:f0:ef:f9:2d:d7:3e:57:eb:00:34:
         0c:fc:fb:80:46:f2:75:18:6f:81:f3:b3:71:0a:87:86:6c:95:
         fd:72:b8:c3:d0:fe:2c:2f:a7:75:9d:8d:2a:ec:5a:3e:ce:c5:
         88:c6:22:4f:cf:a7:02:10:8e:88:7c:15:0a:90:67:28:25:9c:
         6c:d5:31:7f:be:75:d1:dd:77:26:3c:a6:69:b3:2d:d2:d1:23:
         2d:36:d7:4a:fe:c7:5f:e8:3e:4f:97:69:6b:7b:78:0d:b7:bd:
         2c:a0:8c:b2:a6:8d:9e:36:ba:df:2b:cb:b4:59:21:49:e1:7a:
         bd:5f:90:45:6d:53:25:85:d3:cd:7a:72:5e:d1:7d:cf:0c:b2:
         72:da:ce:7f:fe:f9:ba:02:ab:f9:cc:71:34:7f:a6:ab:73:e4:
         54:0a:52:09:b6:ad:7a:ef:b9:28:37:35:ac:f7:d2:dc:f9:e8:
         a4:45:c7:9d:eb:93:f6:df:71:ce:11:d6:68:84:13:8b:49:ac:
         37:0e:39:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:24:03 2024 by rpki-client on console-fra.rpki-client.org