Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/0sSkzmJn4DcZhI88dpl7r4pfiE4.roa
File:                     0sSkzmJn4DcZhI88dpl7r4pfiE4.roa (raw, json)
Hash identifier:          tLVEewEnmguUkID77DxT+BwK5Jv3LbrZA3ZHcDbYMbs=
Subject key identifier:   D2:C4:A4:CE:62:67:E0:37:19:84:8F:3C:76:99:7B:AF:8A:5F:88:4E
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       065A
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/0sSkzmJn4DcZhI88dpl7r4pfiE4.roa
Signing time:             Tue 30 Apr 2024 01:34:46 +0000
ROA not before:           Tue 30 Apr 2024 01:34:46 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        49.106.202.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Dec 2024 00:11:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1626 (0x65a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr 30 01:34:46 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=D2C4A4CE6267E03719848F3C76997BAF8A5F884E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:3b:80:7c:fa:d9:01:d2:d4:a6:10:b1:7c:fd:
                    5d:10:8a:02:15:94:10:00:67:22:36:fe:d1:2a:b8:
                    a5:4b:eb:bf:72:a4:45:aa:ca:4b:41:55:55:1f:bd:
                    52:08:11:d6:9e:04:74:4b:2a:c7:6e:7b:ae:3b:33:
                    5e:4e:fd:05:e7:54:10:3f:28:89:e5:d9:77:0f:b6:
                    d4:83:c4:f7:25:7d:74:4e:da:62:fe:b3:7e:2b:3c:
                    7f:e4:02:40:8a:fe:f9:cf:70:64:8b:f5:a0:27:51:
                    14:22:4f:92:ad:25:7b:2c:ee:21:58:73:0c:c4:5b:
                    bb:9a:15:9e:8b:95:a0:2b:a4:ec:b9:22:e8:00:47:
                    6d:29:76:7b:85:ee:38:fa:66:4d:97:1a:47:41:07:
                    e0:82:88:df:ae:56:2c:61:3f:30:83:df:7a:34:87:
                    7a:f4:b8:93:90:95:64:77:a6:4c:fc:32:75:4a:ad:
                    45:50:ad:e9:c1:af:27:05:6e:66:aa:48:22:8d:9c:
                    7c:f4:05:a8:c1:97:96:33:da:02:65:0e:ef:8d:97:
                    3d:86:a2:95:28:fd:ac:f0:ce:0c:e8:dd:fb:41:0a:
                    af:78:be:c7:a0:6a:41:67:20:7f:10:6c:0e:b9:f2:
                    34:9e:6f:db:e2:70:c4:8d:5e:00:6f:b7:55:bc:00:
                    9d:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:C4:A4:CE:62:67:E0:37:19:84:8F:3C:76:99:7B:AF:8A:5F:88:4E
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/0sSkzmJn4DcZhI88dpl7r4pfiE4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.106.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c0:55:ce:41:c2:b4:4f:0e:54:e7:69:23:aa:98:aa:a7:2d:50:
         5e:94:cd:3f:5e:c1:b0:d9:0a:0e:de:e4:a0:b4:f8:f2:c4:3a:
         bd:01:99:4b:7e:56:76:f6:44:bb:30:c7:73:89:73:7f:b6:09:
         3f:0a:48:c8:27:dc:81:a5:17:33:65:03:06:76:89:3f:33:21:
         7b:01:50:2c:27:35:81:96:7d:91:08:86:5b:a4:41:c3:ca:15:
         71:6e:13:f1:71:f1:6c:29:ee:b6:f2:96:87:27:e8:f9:05:79:
         78:18:30:e4:8b:b4:26:cd:e9:a9:19:ae:96:e5:e8:10:00:65:
         ae:da:b2:08:e3:fa:91:d0:e7:3b:46:3c:c1:8f:90:2b:2e:66:
         db:4c:f6:b3:8a:9c:3a:63:fd:28:f7:8b:fe:ea:80:90:da:5c:
         52:9b:83:d2:94:3d:41:33:49:90:6e:f2:58:dd:ae:f0:86:82:
         6e:bb:15:78:5e:48:c3:42:a9:32:f8:cf:b8:2e:0b:ae:64:be:
         9f:47:e4:3c:fc:dd:c3:80:35:28:d9:1f:00:b6:2e:b1:95:97:
         7f:75:7c:61:f0:16:7d:b5:cb:96:5a:1b:3b:12:96:5b:4f:8e:
         79:8a:57:08:77:62:6c:5b:01:69:d0:88:78:d9:ad:83:64:be:
         b5:e4:83:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 02:17:08 2024 by rpki-client on console-fra.rpki-client.org