Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/1csCm0nXbZzODUIY_VEML65YcCY.roa
File:                     1csCm0nXbZzODUIY_VEML65YcCY.roa (raw, json)
Hash identifier:          vklzG6Ct7+7mj1FXN7nCdFAyjV0kuXpzXBKjOwGMKBo=
Subject key identifier:   D5:CB:02:9B:49:D7:6D:9C:CE:0D:42:18:FD:51:0C:2F:AE:58:70:26
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0445
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/1csCm0nXbZzODUIY_VEML65YcCY.roa
Signing time:             Thu 27 Jul 2023 16:43:09 +0000
ROA not before:           Thu 27 Jul 2023 16:43:09 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     9605
IP address blocks:        49.103.19.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1093 (0x445)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jul 27 16:43:09 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=D5CB029B49D76D9CCE0D4218FD510C2FAE587026
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:d9:88:83:e4:85:69:87:bf:3f:8e:e7:7b:d7:
                    aa:62:0b:b3:a6:4c:5d:22:fa:30:d9:97:58:93:3b:
                    c8:11:99:ab:e9:ee:b3:a8:af:b4:06:57:d9:67:a1:
                    e0:2a:59:13:76:f8:39:03:c7:58:52:71:95:a8:ba:
                    b7:ca:50:ce:c3:75:d4:b4:20:fc:b4:a9:67:37:a3:
                    bd:fb:21:60:37:3c:40:06:84:53:6d:1a:ab:54:da:
                    54:08:19:e9:4f:1c:78:83:b8:2b:4d:ca:c3:28:a2:
                    e5:d1:e1:e6:96:9f:cb:a6:64:a2:c6:d9:6d:67:97:
                    83:a6:90:f5:86:f8:9b:9c:8e:54:4e:ed:d9:1a:23:
                    d9:58:09:5e:41:09:d8:35:76:1a:e2:e7:26:99:e3:
                    a1:b3:7a:ff:3e:d9:9a:47:97:a8:8c:af:91:04:1f:
                    4e:02:e1:31:de:a2:a1:6e:da:47:7c:77:36:39:c1:
                    ab:47:53:ce:82:fd:7d:2d:5d:33:e4:eb:5e:18:55:
                    b2:23:60:47:a8:54:c7:04:29:63:1b:37:25:94:74:
                    ca:26:96:63:f7:84:0f:cf:e7:6c:dc:bc:69:3b:3a:
                    4f:8b:e5:ef:6f:b1:30:3e:b5:98:70:66:94:33:4c:
                    48:3a:8b:f7:5b:56:5d:1a:e6:f0:75:f7:68:69:0e:
                    71:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:CB:02:9B:49:D7:6D:9C:CE:0D:42:18:FD:51:0C:2F:AE:58:70:26
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/1csCm0nXbZzODUIY_VEML65YcCY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.103.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:9f:b0:e1:21:d8:13:2c:d2:78:b6:4e:23:50:ce:01:83:34:
         20:4b:41:21:e2:98:a5:1c:8e:7b:56:92:5d:29:63:a9:1b:cd:
         85:b3:56:71:53:89:db:0f:49:a7:a8:71:72:c2:76:19:f5:6a:
         6d:cf:14:c3:e8:a7:98:31:e8:82:9d:c6:6e:54:1a:c5:44:83:
         ed:94:27:3f:5a:51:a1:ba:ed:3b:5a:52:86:9d:9c:12:c6:d3:
         7e:dc:36:7c:b9:64:5b:87:d9:82:77:67:4f:ad:5c:eb:77:56:
         f4:d2:05:0d:c6:81:3f:88:d9:87:1b:12:bf:ff:12:c3:b3:77:
         03:98:df:e2:0f:62:c1:e0:e5:3e:5a:ed:76:11:f9:59:31:10:
         49:10:b4:44:ea:cc:3d:00:c9:2a:3b:d8:25:eb:17:60:b0:97:
         ec:19:a5:a2:11:0f:b1:4f:03:be:ec:d7:76:4b:d7:6e:b3:01:
         4f:1b:4d:c9:23:9b:34:74:89:5f:5a:a1:d6:7f:36:63:0d:a1:
         4d:05:3b:af:23:a4:12:9f:c2:1b:16:cc:39:53:aa:25:a0:a9:
         dc:aa:cb:7f:6d:8b:da:d7:ce:fc:d5:92:0a:ba:db:bd:16:c5:
         2a:27:91:7f:fd:e6:33:8e:04:57:c6:81:43:bd:11:30:34:8d:
         34:0e:27:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 15:54:29 2024 by rpki-client on console-ams.rpki-client.org