Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/5JN_LzJ2H5TBc9fDh5EIaNt5QC8.roa
File:                     5JN_LzJ2H5TBc9fDh5EIaNt5QC8.roa (raw, json)
Hash identifier:          n14Mfp9arQ4eWe2rb8A4qzZiIYAWuHNEy//Pl0nDVVE=
Subject key identifier:   E4:93:7F:2F:32:76:1F:94:C1:73:D7:C3:87:91:08:68:DB:79:40:2F
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0A94
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/5JN_LzJ2H5TBc9fDh5EIaNt5QC8.roa
Signing time:             Sun 30 Jun 2024 01:52:41 +0000
ROA not before:           Sun 30 Jun 2024 01:52:41 +0000
ROA not after:            Tue 24 Jun 2025 10:46:45 +0000
asID:                     9605
IP address blocks:        49.106.175.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Dec 2024 00:11:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2708 (0xa94)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun 30 01:52:41 2024 GMT
            Not After : Jun 24 10:46:45 2025 GMT
        Subject: CN=E4937F2F32761F94C173D7C387910868DB79402F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:47:95:08:76:f9:e2:44:00:82:d2:2e:b0:34:
                    90:0f:d6:51:1b:70:9a:3c:05:a6:d0:79:b0:10:ed:
                    0e:aa:8a:30:a3:28:3b:fe:af:7e:b9:d8:e4:98:b4:
                    51:1c:d3:cc:cc:aa:e6:e7:1e:1c:88:26:7f:57:55:
                    32:b0:86:6e:48:d8:da:ec:de:ef:43:c6:e1:ac:85:
                    aa:28:fa:55:ef:0b:4a:dc:a8:7b:8c:fe:12:3a:d8:
                    39:3c:4d:4d:f1:f4:fe:e7:15:d5:73:7a:e4:8d:2a:
                    57:b9:f0:c5:b2:fc:74:c4:d8:01:c7:f3:76:ff:c8:
                    e6:22:3c:86:76:0c:e5:b0:04:35:79:e7:29:95:7f:
                    c2:b6:06:46:0a:17:23:6e:c0:40:7d:0e:83:ab:33:
                    73:8e:57:ae:2f:ee:a2:0b:7d:31:ee:a9:38:13:bd:
                    22:98:08:cb:ab:16:70:54:e9:e3:98:2c:67:09:53:
                    04:00:16:66:db:9f:f1:85:fa:36:cf:59:4e:d5:40:
                    ce:70:46:90:9f:71:9a:aa:01:47:d0:cc:28:22:c6:
                    f1:f2:2e:57:85:9f:73:51:9d:6f:75:1a:54:89:00:
                    89:33:9e:9e:3e:7d:d9:5f:a4:57:8b:5f:02:7a:09:
                    c6:d5:f4:bc:d8:f6:12:38:76:24:90:3c:e7:f3:69:
                    48:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:93:7F:2F:32:76:1F:94:C1:73:D7:C3:87:91:08:68:DB:79:40:2F
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/5JN_LzJ2H5TBc9fDh5EIaNt5QC8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.106.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:0e:74:9e:4a:c1:cf:38:c1:50:a0:9d:71:7b:95:7b:cb:a0:
         65:56:ef:77:bc:56:ca:30:4f:dc:03:70:b6:49:a9:09:44:58:
         99:9f:19:90:d3:e5:f5:aa:28:0e:6b:8f:b4:81:d9:49:f0:b2:
         f8:f2:02:be:9b:5d:7b:37:e3:29:67:9a:df:42:9d:e8:52:10:
         b2:ee:89:cb:c0:c0:6b:0f:eb:fe:7e:74:0b:92:9b:a2:40:a1:
         2c:06:3f:c6:e8:fe:6a:9e:af:ee:8e:24:b6:cc:08:81:90:e4:
         3e:37:3c:4e:44:3f:a1:70:c5:19:87:78:87:9e:61:f7:e6:01:
         96:dc:81:c2:13:cd:c5:27:70:c8:3e:15:11:c5:38:dc:4a:f4:
         70:f6:b3:3a:5b:88:3a:a8:68:3e:d3:91:03:ac:54:08:d5:49:
         24:a7:b5:83:74:33:bd:e2:91:59:a4:58:cb:6d:62:86:ff:a8:
         7c:f8:7c:c8:83:2d:24:5a:a9:5b:70:81:58:12:66:3f:65:cf:
         82:d1:e7:c6:fa:f1:b7:5d:1d:9b:0c:55:b0:85:11:7b:e1:63:
         5c:cd:59:89:a6:b3:c8:63:7c:36:04:7c:64:74:8b:c3:5a:08:
         86:e2:4b:11:dc:16:91:b7:fc:48:9a:a1:2e:a2:43:a3:e4:ba:
         7a:88:e4:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 02:27:13 2024 by rpki-client on console-ams.rpki-client.org