Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/660PMRPtlDtgb2DSinEL3cUC_ws.roa
File:                     660PMRPtlDtgb2DSinEL3cUC_ws.roa (raw, json)
Hash identifier:          5TkTlZRk4sZf8ZaFPXH8cqlGuaPNrbrL+U7/BxlEPf0=
Subject key identifier:   EB:AD:0F:31:13:ED:94:3B:60:6F:60:D2:8A:71:0B:DD:C5:02:FF:0B
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0844
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/660PMRPtlDtgb2DSinEL3cUC_ws.roa
Signing time:             Tue 30 Apr 2024 02:16:23 +0000
ROA not before:           Tue 30 Apr 2024 02:16:23 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        49.98.30.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 12:58:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2116 (0x844)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr 30 02:16:23 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=EBAD0F3113ED943B606F60D28A710BDDC502FF0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:67:ca:bb:e2:e4:a9:fd:ba:af:ea:e7:21:8f:
                    63:90:71:0c:5c:00:2d:55:5a:1e:e1:c6:f4:e7:ae:
                    5a:a1:04:7c:7d:a9:a9:42:d1:c9:8f:65:24:c5:f1:
                    ea:89:7a:3c:91:af:96:16:8a:bb:11:f2:d9:44:d9:
                    f0:5d:f8:32:38:34:a7:b2:65:98:03:34:e8:29:db:
                    e3:ba:50:f1:39:e4:6a:af:cd:04:81:6f:9a:6c:4f:
                    6e:4a:be:ad:34:3a:a7:4c:a1:11:50:54:d4:b4:c4:
                    cf:10:62:46:bd:25:97:c8:01:a1:ec:ac:3b:18:1c:
                    92:f2:3e:f4:02:d8:3e:b8:db:2c:7c:f5:da:a8:50:
                    0f:89:5f:2c:7d:9f:c2:5f:5f:70:bc:cc:76:57:22:
                    52:8a:0c:79:1d:ab:2c:4d:79:3e:67:48:db:4a:d3:
                    45:f0:17:4b:74:64:e9:6d:18:bf:46:f0:38:62:4c:
                    37:2c:68:6d:aa:8e:22:69:3e:ac:e5:ff:89:74:d4:
                    70:55:6d:62:20:8d:5d:7a:56:d6:ab:05:66:1b:de:
                    9b:41:55:10:f0:7a:37:87:90:d6:39:6b:ec:ef:67:
                    b2:f9:de:3b:fc:30:03:e7:3a:77:91:dc:2e:3c:07:
                    de:f9:f8:45:48:ec:ef:5f:9e:74:f6:bd:3a:5d:61:
                    53:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:AD:0F:31:13:ED:94:3B:60:6F:60:D2:8A:71:0B:DD:C5:02:FF:0B
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/660PMRPtlDtgb2DSinEL3cUC_ws.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.98.30.0/23

    Signature Algorithm: sha256WithRSAEncryption
         df:a0:62:d7:c2:37:47:44:e6:ba:be:09:c2:8e:c5:79:ad:29:
         8f:30:39:ba:40:db:10:fd:8f:26:05:d5:d8:61:91:3c:46:d1:
         f1:2d:d4:71:84:88:b7:d0:9a:25:c3:7a:71:aa:eb:1a:90:bc:
         81:ec:10:1c:9a:65:5c:58:04:2a:8b:cd:f3:f5:73:27:9a:73:
         1f:ca:ca:b5:d0:25:f4:89:e1:32:3f:35:40:d7:9c:74:55:9e:
         80:db:a7:f7:3b:55:0a:fc:9f:55:b8:f6:1b:e3:dc:d5:55:f0:
         d6:dd:02:77:08:92:ca:e8:a2:0d:8f:74:96:7f:e4:e5:70:d8:
         47:03:30:c5:48:ef:89:1e:af:f9:6c:b2:41:3d:43:0a:f1:3c:
         49:a7:97:de:1c:6f:04:7c:5b:e2:f4:1a:a8:97:29:b4:e3:87:
         bc:3c:00:e7:e2:eb:d0:ab:b7:32:51:7f:03:ed:9f:fb:aa:7f:
         58:1b:a2:56:c9:8d:c6:5d:c3:bd:d5:17:18:71:20:af:0e:e2:
         eb:c3:16:9a:75:bb:24:14:59:e3:ac:27:70:f7:73:56:eb:4e:
         78:cb:db:75:8d:e1:01:2f:75:ad:4d:55:55:71:2d:e7:59:de:
         34:6b:e0:ef:47:56:bf:7e:b7:ea:53:e5:ec:43:c6:98:fd:25:
         8f:2d:32:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:21:18 2024 by rpki-client on console-ams.rpki-client.org