Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/-E__9SBP4_gJ03RhPEX3qrZDao4.roa
File:                     -E__9SBP4_gJ03RhPEX3qrZDao4.roa (raw, json)
Hash identifier:          Q6VsVoX6sq+t40aExENm28zbkyG2LSej4ign0bB6pxA=
Subject key identifier:   F8:4F:FF:F5:20:4F:E3:F8:09:D3:74:61:3C:45:F7:AA:B6:43:6A:8E
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       071F
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-E__9SBP4_gJ03RhPEX3qrZDao4.roa
Signing time:             Tue 30 Apr 2024 01:55:50 +0000
ROA not before:           Tue 30 Apr 2024 01:55:50 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        49.98.154.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 12:58:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1823 (0x71f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr 30 01:55:50 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=F84FFFF5204FE3F809D374613C45F7AAB6436A8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:a0:07:43:61:13:06:6e:10:5d:c0:19:03:61:
                    ac:af:98:82:a2:d4:e0:0f:1b:64:b3:64:54:e9:8c:
                    e4:4d:e7:08:1c:86:63:f4:4d:09:e6:a3:d6:32:aa:
                    50:63:ed:80:f7:50:bc:eb:28:61:d8:66:38:bf:23:
                    27:de:a7:10:53:7c:a0:2d:9b:9c:14:63:3c:13:78:
                    59:2e:25:90:e4:ae:37:5a:e9:e6:36:0b:87:0e:6c:
                    2a:74:2d:06:28:21:b0:68:9a:de:e1:0e:71:78:1a:
                    9f:bf:11:91:22:df:ae:1b:2e:96:24:da:c0:d9:f1:
                    0a:34:3f:cb:f7:01:a7:bd:ac:15:d2:65:ad:e5:62:
                    ae:5b:1d:f4:5b:b3:1c:9e:09:bc:d2:e0:03:49:ab:
                    12:b1:38:88:fe:af:54:37:a8:96:24:5b:2e:4d:d5:
                    26:be:42:14:1f:4d:07:5f:ef:6f:12:81:4b:0d:8c:
                    e4:f4:74:07:bb:a5:9b:93:b3:9a:c7:18:11:37:ba:
                    01:33:26:b1:b3:e2:26:b0:ec:9b:07:83:2e:1a:5f:
                    24:72:45:6f:00:2e:13:3c:9c:61:d3:0f:f4:c8:43:
                    f7:81:21:b0:1f:bd:bc:90:bb:4a:54:cc:28:9f:0b:
                    1a:1a:23:59:fc:aa:29:2b:68:9e:be:ea:ff:72:74:
                    66:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:4F:FF:F5:20:4F:E3:F8:09:D3:74:61:3C:45:F7:AA:B6:43:6A:8E
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-E__9SBP4_gJ03RhPEX3qrZDao4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.98.154.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7c:11:c8:30:18:68:00:4b:ed:5a:ce:0c:90:0c:1d:a4:8c:ff:
         ab:a5:94:58:cc:65:92:9e:10:85:9f:28:0e:14:ee:e5:1d:79:
         4c:38:f3:0f:cd:46:01:5e:ea:53:87:8c:4b:44:c9:5d:76:6e:
         14:03:aa:f3:fd:ed:b5:33:bd:f8:46:63:65:da:ee:58:5c:b2:
         74:0d:2d:39:b8:66:d3:6a:84:dd:e3:eb:83:bc:bd:64:77:0b:
         31:f6:95:f9:10:52:5c:34:0f:fd:be:5a:60:91:c6:49:f3:61:
         9d:ad:67:5a:c1:a2:14:a5:39:ed:e4:7b:bc:01:b7:2a:d2:95:
         71:86:57:bc:e7:17:db:90:b6:8c:d1:50:c2:46:92:aa:02:f9:
         67:c3:81:91:dd:ed:56:47:55:6c:1f:1b:ed:b2:53:cb:6b:3f:
         be:11:bb:a9:6f:bd:f8:9f:a4:6f:df:c2:f7:c1:04:f7:97:e5:
         b2:6a:cb:46:f6:15:26:0a:fc:70:5e:e2:8f:51:56:3f:e8:f1:
         7c:d5:de:6e:3c:0c:1c:44:2d:07:35:e0:8e:ed:c7:6e:01:5f:
         c0:8a:77:e6:37:18:2e:af:d3:93:0f:c4:6a:42:2e:ad:78:37:
         3d:dc:88:81:e1:ee:3e:ca:c0:a2:a6:be:1b:43:e3:4c:2c:07:
         92:42:95:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:21:18 2024 by rpki-client on console-ams.rpki-client.org