Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/5zgyYo_oQNzi9gC9B6ksWt4JJzs.roa
File:                     5zgyYo_oQNzi9gC9B6ksWt4JJzs.roa (raw, json)
Hash identifier:          RoGi/CPJ2lh39QXo8E2zhFmqqy12BEvbxV50KK34s7Y=
Subject key identifier:   E7:38:32:62:8F:E8:40:DC:E2:F6:00:BD:07:A9:2C:5A:DE:09:27:3B
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0732
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/5zgyYo_oQNzi9gC9B6ksWt4JJzs.roa
Signing time:             Tue 30 Apr 2024 01:55:59 +0000
ROA not before:           Tue 30 Apr 2024 01:55:59 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        49.96.38.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 23 Jun 2024 11:53:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1842 (0x732)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr 30 01:55:59 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=E73832628FE840DCE2F600BD07A92C5ADE09273B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:61:d4:17:16:36:05:95:00:71:11:37:d6:0a:
                    15:81:08:20:31:1e:01:2d:27:41:aa:e7:84:b3:f9:
                    38:fb:f8:c8:cf:99:09:f5:f6:a2:eb:3e:5f:49:a1:
                    20:0d:61:c5:29:23:7e:d1:bb:e5:c6:90:79:6f:51:
                    47:53:fc:c5:5b:63:4b:7a:48:15:19:a1:d3:7c:ad:
                    47:f1:16:82:2c:e8:ed:76:2f:74:88:8a:e6:a2:08:
                    80:3d:1c:cb:b5:d0:6f:c2:63:0d:9b:92:b7:8c:c7:
                    1c:e2:d8:bf:ec:92:17:f1:95:90:cd:a0:16:8d:f5:
                    5b:31:f5:8d:48:5d:47:12:a9:8e:7d:77:8c:31:ab:
                    d8:67:1c:a8:89:5d:ef:bd:6b:d0:83:a9:84:bf:cc:
                    d9:55:e1:f4:f1:68:54:64:98:79:72:02:50:d8:e6:
                    cf:bf:9c:03:52:82:5b:be:0b:0f:bb:69:8f:9e:bc:
                    11:14:98:b2:ec:60:8e:02:e5:57:d4:95:41:f6:81:
                    0c:ed:d4:c7:6c:20:f3:3f:71:8e:76:d6:75:7f:85:
                    f1:8c:5f:48:6b:2f:7c:7d:16:7e:6a:05:ee:10:16:
                    64:55:50:5f:43:f7:f5:28:b3:c1:3a:b7:29:84:20:
                    71:8c:f7:fc:e7:c1:33:4e:13:a6:74:55:90:ec:3b:
                    62:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:38:32:62:8F:E8:40:DC:E2:F6:00:BD:07:A9:2C:5A:DE:09:27:3B
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/5zgyYo_oQNzi9gC9B6ksWt4JJzs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.96.38.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3e:10:59:be:f1:19:25:ed:21:87:31:bf:ae:08:d0:c0:6b:7a:
         b2:c7:15:1f:cb:49:fe:93:bd:f1:6a:a0:2d:3b:f3:e7:c2:ed:
         36:4f:a8:b5:01:f3:20:a4:27:40:66:b0:6b:d2:16:b5:2b:ba:
         49:80:64:dc:f4:c6:ec:53:01:50:b2:39:1c:db:a7:d4:22:e7:
         0c:a1:70:d9:29:2c:85:3b:99:93:21:47:3f:cc:de:b1:a7:fe:
         0b:65:0a:12:c3:a7:74:84:16:f2:64:52:e7:d7:88:f0:47:ff:
         b1:e3:c6:cc:7b:5d:8f:d5:f8:ec:41:1c:95:17:75:23:16:49:
         85:c0:21:b6:9b:3c:b1:b1:e1:8a:d0:21:d9:f9:89:bf:85:19:
         3d:aa:82:07:c7:1c:fa:a8:e0:de:86:68:f1:c2:c3:f6:e0:7f:
         57:74:8b:b5:94:31:d4:28:fb:b0:d6:20:98:33:b6:c3:b4:24:
         bc:01:f1:2c:d0:24:3c:8f:c6:5e:72:a4:07:25:09:6a:42:7e:
         c6:83:84:a3:1b:33:5a:02:b9:8d:c4:f3:26:b4:ba:b1:20:77:
         5b:be:a8:0d:6e:af:61:2b:23:65:f2:1f:e3:83:e1:58:a0:19:
         a7:21:f6:5f:4d:ce:98:d0:56:e7:e2:0a:31:2a:38:4e:2b:df:
         e2:71:0a:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 14:31:52 2024 by rpki-client on console-ams.rpki-client.org