Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/61TLdNTQ1PSjxPg7DPpSN_dfeVg.roa
File:                     61TLdNTQ1PSjxPg7DPpSN_dfeVg.roa (raw, json)
Hash identifier:          OOtDvrPxn/8Z3mebChTcczKfaXS0WOhjKY+66vnHgR0=
Subject key identifier:   EB:54:CB:74:D4:D0:D4:F4:A3:C4:F8:3B:0C:FA:52:37:F7:5F:79:58
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       07DD
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/61TLdNTQ1PSjxPg7DPpSN_dfeVg.roa
Signing time:             Tue 30 Apr 2024 02:10:28 +0000
ROA not before:           Tue 30 Apr 2024 02:10:28 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        49.104.48.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Dec 2024 00:11:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2013 (0x7dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr 30 02:10:28 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=EB54CB74D4D0D4F4A3C4F83B0CFA5237F75F7958
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:91:fc:f3:a8:77:0c:0d:51:5a:43:c9:e3:1b:
                    bb:f7:b4:6f:77:7e:0d:d2:24:49:23:3f:0b:4c:16:
                    07:00:21:02:2c:d4:a9:ac:5c:fa:ae:1a:e6:06:94:
                    bf:3f:82:cd:04:18:2a:68:24:67:34:fe:fc:d9:5b:
                    00:6b:bc:73:ac:1d:41:30:ec:3d:f0:07:ef:38:19:
                    ab:51:08:82:54:d7:70:e9:91:b5:c7:b5:3c:5e:37:
                    57:b2:75:f1:c7:d8:bf:7d:db:9a:54:2f:d0:a0:dc:
                    67:e5:b7:b7:6d:e0:7e:8a:11:1e:c2:af:46:cb:12:
                    df:1b:2f:3b:2f:85:e5:c0:11:5d:7c:41:be:8e:00:
                    09:d8:7a:4b:a0:27:f6:1f:dd:0c:ed:82:f9:2c:71:
                    94:7e:d7:fa:82:3c:c6:65:b4:55:ba:1d:10:2b:f4:
                    2f:6f:4a:46:08:bd:df:d8:da:99:92:b7:e0:23:0a:
                    71:f3:56:3b:bf:9c:47:0e:03:41:aa:57:b1:34:90:
                    ef:a2:f5:e0:5c:d8:2b:06:52:79:e9:eb:ac:ca:99:
                    44:cf:b2:37:79:d8:62:79:2d:35:e5:67:8e:d2:38:
                    93:66:b8:08:47:4a:10:33:5b:1f:f1:74:01:20:bf:
                    c9:44:d6:d6:a9:3c:1e:b1:1d:5b:78:b4:f6:78:20:
                    a1:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:54:CB:74:D4:D0:D4:F4:A3:C4:F8:3B:0C:FA:52:37:F7:5F:79:58
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/61TLdNTQ1PSjxPg7DPpSN_dfeVg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.104.48.0/23

    Signature Algorithm: sha256WithRSAEncryption
         65:65:57:db:4f:3e:d9:ae:99:1f:6c:9b:ae:a4:17:10:a9:57:
         59:82:42:c9:23:f1:b5:8f:3e:8f:8f:3e:4b:92:ad:be:66:54:
         64:82:c7:2a:d0:bd:0f:6d:2c:e0:8a:3c:d3:c1:b1:79:37:9b:
         5a:81:01:2b:5d:fc:9e:b3:eb:be:36:3b:71:07:4d:d6:68:09:
         3c:26:9c:87:be:be:d0:fc:b0:22:70:f2:fa:74:1e:19:f2:00:
         fd:f9:96:87:60:3d:e1:46:84:5d:ce:dc:6c:96:3c:94:38:f8:
         eb:4f:f9:62:6b:60:99:fd:52:b9:1f:43:08:9e:7c:13:5b:55:
         8e:b3:ae:05:ea:5c:4c:d3:68:15:d8:76:22:45:c3:20:3f:25:
         e6:40:13:27:38:d4:bf:d0:34:99:88:0f:7c:b1:af:9a:5d:7f:
         3b:e1:f6:1e:78:98:7a:73:f3:1e:7f:c8:90:45:66:f2:94:94:
         75:7b:4e:09:43:ee:4c:30:ad:a4:c1:5a:7b:e4:d7:93:68:2f:
         83:30:38:32:97:93:9d:de:09:b4:45:77:e3:49:b0:8b:24:97:
         f0:27:9d:ba:90:e0:ac:ce:57:6e:e8:4e:62:d9:6d:90:65:04:
         36:c3:04:12:b6:62:c2:f8:aa:ba:e0:05:59:d9:83:de:b1:92:
         43:a7:b0:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 02:27:13 2024 by rpki-client on console-ams.rpki-client.org