Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/2g30bRKIMFYcYCe3f9D0kNrDiTc.roa
File:                     2g30bRKIMFYcYCe3f9D0kNrDiTc.roa (raw, json)
Hash identifier:          Rre4YPWr/NcassrIlVFjKNriIv86iGGDRYMnfBdUtsw=
Subject key identifier:   DA:0D:F4:6D:12:88:30:56:1C:60:27:B7:7F:D0:F4:90:DA:C3:89:37
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0960
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/2g30bRKIMFYcYCe3f9D0kNrDiTc.roa
Signing time:             Sun 30 Jun 2024 01:33:31 +0000
ROA not before:           Sun 30 Jun 2024 01:33:31 +0000
ROA not after:            Tue 24 Jun 2025 10:46:45 +0000
asID:                     9605
IP address blocks:        49.108.238.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2400 (0x960)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun 30 01:33:31 2024 GMT
            Not After : Jun 24 10:46:45 2025 GMT
        Subject: CN=DA0DF46D128830561C6027B77FD0F490DAC38937
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:c9:b2:7a:33:2b:dd:15:82:6c:b3:f5:f0:21:
                    a0:bd:ea:11:38:de:44:a2:68:8c:b3:ad:41:a1:a4:
                    a6:f3:5c:a4:85:aa:7f:3f:c1:5b:da:e0:e8:8e:a1:
                    98:98:9b:cc:88:17:06:53:a0:b1:65:4d:f8:4d:e9:
                    3f:99:9e:fd:db:32:89:6f:4f:d0:f6:a5:59:a2:f8:
                    c6:71:78:de:f4:e1:b5:36:48:ff:4a:1d:f2:a6:ff:
                    cd:7d:6d:ce:00:e6:0c:70:44:c4:5f:c3:c8:dd:6e:
                    40:90:bf:c9:db:64:bf:b6:2b:2c:dd:e2:ca:d7:54:
                    e8:df:ae:b3:c1:c6:04:db:89:f7:b0:63:87:ca:d0:
                    54:da:b9:82:42:47:27:7a:04:72:68:24:25:44:32:
                    cb:ab:c3:a0:1a:ad:15:7f:d4:aa:5b:12:59:ee:68:
                    50:07:f9:e5:3b:f2:6e:4b:9d:bb:65:5b:2d:b6:ff:
                    4e:cf:28:33:98:92:f5:a2:95:ff:4b:e3:37:9c:69:
                    2e:92:83:8f:7f:55:24:80:89:5c:54:ef:dc:9e:fb:
                    11:80:7d:70:6f:7e:9d:a5:15:f2:9d:3a:fe:39:53:
                    8a:da:99:f6:9c:3c:6e:aa:91:5c:17:ae:68:9d:1b:
                    c6:1d:48:22:65:e0:23:02:0d:60:b3:1c:68:55:a6:
                    a2:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:0D:F4:6D:12:88:30:56:1C:60:27:B7:7F:D0:F4:90:DA:C3:89:37
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/2g30bRKIMFYcYCe3f9D0kNrDiTc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.108.238.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:aa:d3:86:63:d2:7a:a4:20:de:fa:5d:ab:df:1a:39:f6:24:
         f4:56:eb:75:22:ee:6b:f1:f4:e6:8a:a3:7c:c8:b7:a1:c6:6c:
         f0:5a:a1:65:17:4d:94:82:76:1e:f2:26:be:5a:25:fe:1c:a3:
         5e:ff:3f:87:8d:05:29:78:47:f9:d3:6a:00:3b:65:29:6a:6b:
         20:bf:70:c3:da:f6:3a:d9:b6:09:4c:86:ab:0f:98:51:d4:bb:
         f9:df:1d:13:ff:4c:9d:45:d1:f7:76:ce:8e:8f:bb:c5:eb:ea:
         33:90:c3:8c:50:65:1e:cf:13:39:27:c0:01:e6:b6:53:10:8f:
         cf:35:f4:70:f1:82:12:d7:08:93:1d:96:bc:de:24:76:76:d4:
         ba:d9:61:02:15:fb:0d:e7:02:4f:af:f2:3c:c1:e1:00:2f:6f:
         3a:b4:e0:2c:a0:34:6b:a9:a1:46:77:fa:ee:a3:99:3c:3b:d4:
         a0:46:56:02:a3:3d:44:27:f4:37:85:0b:2b:25:bb:55:53:5c:
         60:ea:22:8e:fa:7c:43:44:75:4b:97:5e:fe:4a:e0:62:02:59:
         aa:10:78:ed:91:d3:ff:1e:37:57:4f:66:56:a9:6e:e9:f6:57:
         93:f6:bd:86:c1:ea:3c:b6:43:ee:35:c4:c9:fd:08:94:b5:82:
         05:e5:b0:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:54:35 2024 by rpki-client on console-ams.rpki-client.org