Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/5iN8-RHwQLQnx2T5vHFkQrgy0iI.roa
File:                     5iN8-RHwQLQnx2T5vHFkQrgy0iI.roa (raw, json)
Hash identifier:          jZM8G76TAiu8Z9VHlLRWcsc15iHx7oijwbaHOawyME0=
Subject key identifier:   E6:23:7C:F9:11:F0:40:B4:27:C7:64:F9:BC:71:64:42:B8:32:D2:22
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       091A
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/5iN8-RHwQLQnx2T5vHFkQrgy0iI.roa
Signing time:             Tue 30 Apr 2024 02:28:48 +0000
ROA not before:           Tue 30 Apr 2024 02:28:48 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        49.98.152.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2330 (0x91a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr 30 02:28:48 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=E6237CF911F040B427C764F9BC716442B832D222
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:e7:90:e5:37:4f:11:58:e4:4a:c0:4c:ce:87:
                    b1:1b:58:d9:64:8d:9c:07:dd:87:7b:44:92:cb:9d:
                    99:4c:50:3a:5c:27:a9:d0:38:5f:a0:29:18:b3:08:
                    8d:c5:bc:b4:c4:df:61:21:aa:ed:aa:0f:c9:27:07:
                    45:fb:3d:99:38:28:c1:e2:8f:e8:ea:e5:d3:45:25:
                    f2:e6:af:53:0d:68:5f:b3:68:76:18:c6:32:8f:8b:
                    63:05:2d:23:34:41:24:80:79:e3:7b:4b:d5:c6:5c:
                    2b:5f:a0:b5:81:80:d1:da:9d:19:cf:4f:3a:fd:a6:
                    c6:59:c1:a0:ea:ea:b5:d0:1c:aa:d9:48:73:e9:9c:
                    be:bd:cc:76:ed:98:29:a6:d9:af:89:5a:6a:39:a7:
                    94:e7:84:8c:5a:a9:6a:2c:05:7c:c1:80:fe:07:8c:
                    a0:83:aa:41:fa:50:20:74:71:bf:95:c6:78:07:b8:
                    a2:a5:32:be:7d:73:e7:58:a4:da:1e:8c:65:b7:cc:
                    35:75:43:c5:82:d4:ac:c0:34:ce:42:3e:ee:5f:a3:
                    3a:04:e7:97:8d:1f:c5:a1:04:1b:a6:17:89:c0:40:
                    f2:01:0a:1c:fc:3a:44:0e:ad:98:4b:87:b3:41:8a:
                    24:82:78:39:44:91:e1:4b:71:d1:f9:41:2f:39:27:
                    94:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:23:7C:F9:11:F0:40:B4:27:C7:64:F9:BC:71:64:42:B8:32:D2:22
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/5iN8-RHwQLQnx2T5vHFkQrgy0iI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.98.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2c:65:9d:9c:7c:44:9a:f9:ed:b2:6f:a5:f5:2d:89:0e:bb:19:
         d0:c6:b7:4b:a5:0e:3e:3f:02:f3:a1:b1:84:36:a2:56:ae:27:
         b2:02:8b:f8:60:b9:03:fb:c8:1b:ae:e4:f0:b5:7f:67:a2:cf:
         94:3f:2c:3c:37:fa:0a:be:b7:ff:e3:2b:f6:05:94:2b:0c:da:
         0d:3d:46:06:61:72:e1:fe:59:91:d7:15:d3:d2:96:32:ee:e5:
         48:94:64:46:46:d2:9c:c3:f3:c3:dc:e1:70:50:b3:ee:7a:48:
         bb:f5:ce:c2:7c:9b:78:1c:6a:8a:e8:2b:0a:74:6a:27:c4:ae:
         0a:95:a2:cc:fa:ef:ad:01:9a:3f:a3:26:4e:d5:47:d3:78:8a:
         40:57:59:c2:af:8b:c1:51:26:09:fc:7c:89:99:31:4e:bd:08:
         28:c3:15:a4:8a:70:28:bb:c2:f6:cc:94:e0:67:6f:96:52:0e:
         de:f8:18:b8:aa:ef:9b:32:d4:2e:93:fe:f2:c7:fc:e2:54:44:
         b0:ea:39:c2:fd:cb:ac:f8:ce:d2:70:44:b2:b4:5a:ac:3c:4a:
         18:da:c8:55:6d:8d:73:19:47:22:07:ed:92:4c:f7:08:87:f7:
         0c:6d:35:a4:b3:bf:e4:01:99:27:12:1a:b1:d6:48:a0:80:91:
         2b:e0:47:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:45:39 2024 by rpki-client on console-ams.rpki-client.org