Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/232YzaecFuWI5KwBqU8eHhSUwo4.roa
File:                     232YzaecFuWI5KwBqU8eHhSUwo4.roa (raw, json)
Hash identifier:          mOvt0DvSE4vU9zpZ7h+mhCEHOGD2L/kYZRt+XZIyzR4=
Subject key identifier:   DB:7D:98:CD:A7:9C:16:E5:88:E4:AC:01:A9:4F:1E:1E:14:94:C2:8E
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       098E
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/232YzaecFuWI5KwBqU8eHhSUwo4.roa
Signing time:             Sun 30 Jun 2024 01:36:26 +0000
ROA not before:           Sun 30 Jun 2024 01:36:26 +0000
ROA not after:            Tue 24 Jun 2025 10:46:45 +0000
asID:                     9605
IP address blocks:        211.14.79.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 12:58:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2446 (0x98e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun 30 01:36:26 2024 GMT
            Not After : Jun 24 10:46:45 2025 GMT
        Subject: CN=DB7D98CDA79C16E588E4AC01A94F1E1E1494C28E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:28:b2:a3:5b:ab:09:97:73:ce:72:1e:b3:85:
                    ee:c3:fc:e1:2d:b3:fb:f6:44:20:3a:d8:e4:1d:c3:
                    15:73:eb:67:42:ba:d4:55:d8:e7:e4:f1:2b:6b:15:
                    b4:07:e9:74:58:f6:f7:48:09:67:28:45:59:3f:85:
                    f7:f6:d0:49:0e:0b:17:f1:00:09:54:0b:40:7b:79:
                    49:ae:38:1c:92:b4:52:e6:90:8d:55:40:3f:a8:6b:
                    92:90:6d:f1:32:79:a4:dd:2c:c7:59:7b:16:dc:37:
                    e4:0c:f2:71:43:78:5f:9a:8a:9d:1b:26:10:89:ed:
                    8a:81:51:5d:4d:ff:12:d0:b2:8d:47:13:e8:35:99:
                    64:c5:9f:8a:6e:a5:d6:0c:41:e7:a2:4b:6e:52:1d:
                    60:d1:ec:16:4a:0e:e7:ad:05:f4:90:a4:a3:c3:48:
                    02:ac:1b:a1:64:cf:a6:47:97:bb:79:fb:f9:b5:0a:
                    88:fd:d9:9b:ac:60:70:7f:af:61:4b:99:ca:03:8f:
                    71:f8:20:86:9e:35:15:1f:1d:7b:78:8f:78:80:de:
                    a5:15:8d:3b:17:7d:4c:a1:e2:70:29:63:89:21:84:
                    4c:33:2b:7b:7f:1f:b7:f1:84:9a:14:ed:35:bc:d0:
                    7a:ed:90:da:d9:5f:8e:e2:61:5e:71:02:ce:a4:fd:
                    ed:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:7D:98:CD:A7:9C:16:E5:88:E4:AC:01:A9:4F:1E:1E:14:94:C2:8E
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/232YzaecFuWI5KwBqU8eHhSUwo4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.14.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:04:04:9e:c0:f0:25:2c:eb:b7:5e:c9:01:20:31:b0:83:1f:
         4d:e4:21:2e:33:2e:6a:08:58:f9:1b:92:c9:9e:b2:c7:42:de:
         f9:a8:08:4f:a1:86:23:d2:74:45:63:cc:2b:b2:12:65:74:ac:
         28:38:75:91:3c:cc:b5:3b:a4:82:d1:a3:fc:95:11:f5:9e:f6:
         4b:22:05:11:60:82:28:91:ed:5e:80:b5:7b:34:1f:db:fe:51:
         4b:b5:31:51:51:7d:ed:fd:ca:d2:34:67:71:de:44:9f:d2:ab:
         f9:cc:4c:e7:25:66:33:eb:68:f3:59:5a:a1:3e:0d:75:ee:c0:
         1c:48:51:4e:3e:15:33:43:ad:d1:75:f3:43:39:63:b7:0c:c5:
         ef:47:32:28:4c:c8:7b:3c:04:9f:84:82:fd:6b:93:23:0a:1e:
         66:4f:57:7e:53:a9:e9:e8:eb:74:78:6a:9c:3b:fb:fe:55:3c:
         73:21:0c:ef:80:b4:8c:53:ab:ea:a2:a8:ce:a1:97:22:79:9d:
         72:76:8f:63:a6:12:c9:f2:b3:5f:20:2c:e7:58:30:55:15:33:
         24:81:58:bc:ea:27:d5:55:c0:3b:a8:b6:77:f7:18:b1:ff:18:
         1e:cc:33:f8:f9:b8:1d:39:71:1a:01:de:99:52:ba:bf:ee:41:
         9d:d1:33:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:21:18 2024 by rpki-client on console-ams.rpki-client.org