Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/5_gU3iVEsIQLSSbUUBHWJ-lmI_U.roa
File:                     5_gU3iVEsIQLSSbUUBHWJ-lmI_U.roa (raw, json)
Hash identifier:          DbSgyphYqz/4VLc5ZViMtmziBWHKIsC5qPcc2gLoQvM=
Subject key identifier:   E7:F8:14:DE:25:44:B0:84:0B:49:26:D4:50:11:D6:27:E9:66:23:F5
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       069B
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/5_gU3iVEsIQLSSbUUBHWJ-lmI_U.roa
Signing time:             Tue 30 Apr 2024 01:43:11 +0000
ROA not before:           Tue 30 Apr 2024 01:43:11 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        49.97.46.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1691 (0x69b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr 30 01:43:11 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=E7F814DE2544B0840B4926D45011D627E96623F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:61:68:06:c1:c0:4e:1c:15:ab:d2:82:8f:fb:
                    69:7b:42:db:a5:b9:d9:43:36:04:54:61:c9:39:de:
                    3a:71:c8:48:1d:dc:7e:46:7a:00:8b:88:6a:79:8e:
                    c0:c2:18:b7:83:ca:0b:de:58:b0:65:22:02:1a:70:
                    94:b9:4b:e5:26:ce:fe:78:f2:17:9c:1d:f2:78:32:
                    e0:d7:38:93:d7:b5:79:2b:71:f7:d2:43:4d:d7:4a:
                    21:d1:bc:73:cd:be:7f:7e:b8:13:0a:ac:80:a1:ad:
                    17:f1:88:3e:59:e2:c9:67:7f:5c:26:81:40:ac:ff:
                    d9:12:d6:fc:3a:40:6a:f3:5a:19:8a:d1:7e:bb:1c:
                    86:ab:6c:5d:5b:0c:3a:d2:78:7e:57:e6:34:38:77:
                    1b:d7:79:6a:2b:a1:d4:b8:4d:8a:87:f8:fc:9f:7e:
                    df:38:30:f2:82:cd:96:6a:bf:74:29:a7:ea:e1:01:
                    cd:42:25:54:89:4d:9a:71:cf:6f:2d:a6:f7:9d:63:
                    5f:6d:88:f8:e9:b9:9d:6a:e7:14:9d:e2:0f:0b:03:
                    e6:49:81:e7:3d:f4:44:a4:9b:63:79:ca:95:4d:e2:
                    7c:75:1a:fe:9a:08:01:cd:61:e2:77:97:27:e1:e1:
                    8f:3e:4a:ac:4e:42:ca:8b:d8:01:40:59:95:2a:b2:
                    f1:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:F8:14:DE:25:44:B0:84:0B:49:26:D4:50:11:D6:27:E9:66:23:F5
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/5_gU3iVEsIQLSSbUUBHWJ-lmI_U.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.97.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:61:43:b4:ef:4f:94:2f:f0:fd:f0:f0:40:9f:6b:af:67:54:
         d6:86:1b:34:fd:13:33:58:03:9a:85:2f:48:07:d1:47:46:6b:
         98:b1:d9:8e:57:ec:8f:f0:24:80:01:dd:a8:ad:61:32:a7:84:
         18:e8:f1:23:91:3b:ae:23:b9:a4:b2:00:46:89:5d:88:b7:d6:
         f0:e0:99:6f:d7:fb:4d:2b:48:09:75:35:1d:18:0e:c8:a3:29:
         cf:b7:02:fb:10:6c:0c:e1:59:ad:55:60:6a:03:f5:37:ec:03:
         6a:17:79:02:bf:be:39:38:75:07:5d:2d:7a:91:b6:ec:bd:52:
         dc:b6:08:6f:43:d9:9a:78:e8:30:22:dc:fd:65:78:85:c3:df:
         8e:23:46:cf:b4:8a:1a:24:e5:d1:a2:6a:34:96:dd:6f:58:e1:
         82:37:0f:bc:23:dc:5b:c4:ac:db:5c:33:eb:44:c1:72:06:7f:
         ee:83:c7:0b:4c:93:80:60:e7:de:9e:86:f5:83:77:01:25:bd:
         3b:c3:fd:d9:3d:ef:9d:2e:1d:51:b8:e0:cb:90:80:c5:3c:c3:
         e9:3f:78:be:60:c7:f8:16:c8:4e:a1:99:1b:36:ac:6d:e5:82:
         99:42:fa:30:f4:89:0a:f1:dd:8a:05:8f:0e:d4:9b:01:6c:37:
         d8:79:3e:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:38:46 2024 by rpki-client on console-fra.rpki-client.org