Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/zrp-ZDK9LeUbmWB2yne3by6gIMo.roa
File:                     zrp-ZDK9LeUbmWB2yne3by6gIMo.roa (raw, json)
Hash identifier:          omvLduS/bKrV0beZrE9hQ9VWDn80rQ2IdeU352za75c=
Subject key identifier:   CE:BA:7E:64:32:BD:2D:E5:1B:99:60:76:CA:77:B7:6F:2E:A0:20:CA
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0823
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/zrp-ZDK9LeUbmWB2yne3by6gIMo.roa
Signing time:             Tue 30 Apr 2024 02:14:20 +0000
ROA not before:           Tue 30 Apr 2024 02:14:20 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        1.78.48.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2083 (0x823)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr 30 02:14:20 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=CEBA7E6432BD2DE51B996076CA77B76F2EA020CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:16:bd:bb:8b:17:24:cc:1f:a3:56:9c:21:7f:
                    17:0b:e5:8d:68:78:40:a5:ab:f4:dc:fa:da:3b:ac:
                    b9:3a:a9:48:4f:4e:d1:a9:93:15:27:d8:3d:53:e5:
                    2e:25:20:20:4a:26:f1:a1:1d:65:6a:ad:0b:ad:06:
                    57:a7:6e:40:41:0d:85:96:10:eb:f0:47:ab:86:09:
                    8c:78:f2:78:1f:bb:ae:ca:17:74:42:b4:f7:75:ca:
                    50:14:ed:b9:c6:9d:ff:69:a7:e3:e1:e9:0e:0c:7f:
                    a4:d7:7a:24:01:7a:59:49:7c:80:d0:da:50:62:a8:
                    0e:73:19:eb:4e:2f:71:24:06:57:fa:84:5f:08:d8:
                    bf:70:73:fd:c6:ac:4b:7d:79:3d:ff:46:9a:ce:cb:
                    74:d6:f7:8d:b4:3f:5f:85:70:b6:28:fc:81:fe:df:
                    c8:a4:d4:60:16:ae:88:e6:d4:4a:f9:f4:2c:bc:16:
                    e4:b0:a4:12:8b:18:69:eb:20:26:e9:fa:76:49:07:
                    8d:76:61:99:fb:34:8f:2b:5a:3c:26:c8:0f:24:df:
                    ad:f4:a5:bf:3f:11:9d:b5:7e:bc:a9:04:a2:31:be:
                    9b:66:d7:c4:98:bb:55:05:09:f9:e3:73:06:bb:00:
                    5b:0b:30:7c:c3:31:9d:c5:7a:29:bd:c0:40:3f:51:
                    74:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:BA:7E:64:32:BD:2D:E5:1B:99:60:76:CA:77:B7:6F:2E:A0:20:CA
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/zrp-ZDK9LeUbmWB2yne3by6gIMo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.78.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         7a:00:4d:80:2d:3c:b9:d7:57:1f:76:04:20:54:54:1d:5f:41:
         8b:15:cc:da:2b:fa:e6:79:99:7d:7d:84:a4:e4:67:41:26:59:
         4c:f3:88:d0:4d:18:58:f3:27:03:a8:ed:1b:a6:a0:a5:13:e4:
         1b:49:0f:50:75:44:15:8c:97:48:b0:71:9f:5f:d8:ee:4d:18:
         58:e2:95:e4:23:d8:65:e8:c4:54:a3:88:70:4a:96:f7:bf:98:
         4a:a2:04:d5:cb:bf:6f:7b:58:e7:2c:79:88:c8:4a:a0:e6:3f:
         a0:11:52:9b:ce:be:53:d4:69:6d:30:ea:e5:98:66:f3:cd:f5:
         8b:ba:dc:e4:b5:e4:24:7e:1b:ba:01:c6:72:56:28:bc:6e:12:
         1b:da:9f:45:96:42:54:18:53:e5:42:06:83:3c:f3:ba:e7:e2:
         62:4e:ac:df:7c:e6:d9:31:a2:5b:ba:40:1b:10:ea:8c:4d:f8:
         db:d8:f2:49:7c:17:ac:17:7e:96:2a:4f:d3:6c:f3:2e:e4:50:
         f0:c3:69:e7:6c:42:a1:8d:92:dc:23:74:79:4d:59:0b:ac:e8:
         82:32:1f:6d:02:e7:9c:c2:4e:61:b8:7d:2d:9d:16:76:72:a3:
         bb:41:85:44:21:d0:d5:2f:a9:65:0b:19:05:06:a9:58:e6:28:
         5c:88:0a:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:45:42 2024 by rpki-client on console-ams.rpki-client.org