Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/1MaJD7Z6XvWtUjrVrorahX6XqNM.roa
File:                     1MaJD7Z6XvWtUjrVrorahX6XqNM.roa (raw, json)
Hash identifier:          N1zhFO/VMcDsx3LeHCTZbnHFXmTTC/khCq7GzuMQhYo=
Subject key identifier:   D4:C6:89:0F:B6:7A:5E:F5:AD:52:3A:D5:AE:8A:DA:85:7E:97:A8:D3
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0AAC
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/1MaJD7Z6XvWtUjrVrorahX6XqNM.roa
Signing time:             Sun 30 Jun 2024 01:54:28 +0000
ROA not before:           Sun 30 Jun 2024 01:54:28 +0000
ROA not after:            Tue 24 Jun 2025 10:46:45 +0000
asID:                     9605
IP address blocks:        211.14.95.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 12:58:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2732 (0xaac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun 30 01:54:28 2024 GMT
            Not After : Jun 24 10:46:45 2025 GMT
        Subject: CN=D4C6890FB67A5EF5AD523AD5AE8ADA857E97A8D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:75:e2:b0:e2:ee:b7:49:02:e3:63:4c:b3:c6:
                    e6:36:1d:46:f1:54:dd:93:8a:20:a1:48:c4:80:5a:
                    e9:21:6e:f4:44:cb:86:09:bb:13:36:14:25:0e:27:
                    09:e7:62:a2:f9:07:b8:70:e4:fc:fe:ac:3a:9d:e1:
                    8b:34:d8:5b:e9:c3:18:63:23:2b:f7:bd:65:44:33:
                    8a:01:c0:3b:99:3a:e4:04:11:99:dd:ee:23:72:3b:
                    61:51:f4:3f:ea:30:18:52:e4:f7:95:17:c7:aa:02:
                    18:a8:26:4c:01:fb:44:07:9c:74:2e:b9:d1:35:b3:
                    bf:80:a6:98:7b:b2:4d:7b:35:2c:23:bd:96:44:90:
                    0f:49:78:4b:cf:01:4f:d9:5c:35:6b:84:8f:10:04:
                    09:a1:2d:d8:44:9b:1e:43:d1:54:bb:c4:a9:56:ab:
                    83:14:4a:63:71:cb:01:4b:31:e2:ba:47:65:94:d1:
                    4a:26:92:2e:ca:6c:ba:43:2b:d4:78:8c:67:98:d9:
                    5e:d2:a8:6b:ed:fd:fd:c7:0c:75:c7:42:ec:78:72:
                    e4:16:f4:d2:d0:5f:dc:89:de:a6:2f:1a:4d:d1:20:
                    f1:01:06:6e:c0:fa:3d:a4:9a:25:7c:ea:a9:76:27:
                    4a:14:76:98:e1:f3:ca:06:00:93:cd:27:47:f6:fe:
                    fd:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:C6:89:0F:B6:7A:5E:F5:AD:52:3A:D5:AE:8A:DA:85:7E:97:A8:D3
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/1MaJD7Z6XvWtUjrVrorahX6XqNM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.14.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:f3:3f:bc:26:68:42:6c:98:41:93:15:1a:79:a6:9f:02:df:
         9c:a6:8f:df:fb:de:58:8b:ce:69:57:8d:3e:24:a5:a0:9e:ff:
         3e:6c:ab:8d:42:30:28:4a:72:17:dc:f0:b4:40:a1:06:1a:d7:
         0d:e0:6c:2d:bc:68:a7:85:e1:af:3c:0b:9b:70:19:50:9f:97:
         51:16:99:fc:62:cf:49:49:05:ae:11:63:8d:e0:34:b5:c6:8f:
         1d:5f:6a:c6:0d:a6:f9:e1:3a:a7:f2:a9:1a:7a:b7:64:6a:94:
         11:b9:80:77:ba:ca:ee:47:38:3d:2f:cf:b6:d6:c3:0b:b0:8a:
         45:26:dc:ac:0d:86:b2:13:9a:f1:c8:77:87:c8:99:80:ed:e9:
         3f:2d:79:eb:b0:b4:91:bf:a3:8f:76:88:cf:6e:72:6e:05:f4:
         e8:5f:ea:fb:f3:ec:c8:ee:86:95:45:dc:ab:20:df:bb:09:7f:
         88:89:d5:55:0c:e6:be:64:34:6b:1c:24:1d:1a:3c:d6:f9:e1:
         7d:cb:f7:07:d6:37:72:33:22:6c:59:57:1d:86:57:8f:11:e9:
         6a:7c:6f:0d:53:2c:3c:bf:4e:40:cb:3b:ed:5a:13:12:24:a0:
         42:f7:eb:98:dd:eb:3c:45:99:e6:2f:51:f2:3f:6d:c4:1e:ad:
         d1:a9:19:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:21:18 2024 by rpki-client on console-ams.rpki-client.org