Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/6LDhFl8cBlnNlkNkFqNj1fvkwJE.roa
File:                     6LDhFl8cBlnNlkNkFqNj1fvkwJE.roa (raw, json)
Hash identifier:          8PeHgzCZgX9z18AuwUx4DQ6WYvkSJCcjdCrH4EYhWtY=
Subject key identifier:   E8:B0:E1:16:5F:1C:06:59:CD:96:43:64:16:A3:63:D5:FB:E4:C0:91
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       047E
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/6LDhFl8cBlnNlkNkFqNj1fvkwJE.roa
Signing time:             Thu 27 Jul 2023 16:44:10 +0000
ROA not before:           Thu 27 Jul 2023 16:44:10 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     9605
IP address blocks:        49.106.240.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 23 Jun 2024 14:09:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1150 (0x47e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jul 27 16:44:10 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=E8B0E1165F1C0659CD96436416A363D5FBE4C091
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:4b:08:2a:3e:69:4a:b6:ba:7b:b6:84:87:59:
                    3d:e4:3c:86:e9:bb:66:30:6f:78:f0:5e:4e:c3:b8:
                    ec:52:ef:ab:33:86:12:71:35:56:7e:15:a9:07:13:
                    ab:08:7b:f3:d2:82:6c:3c:1c:ee:7e:46:cd:c6:19:
                    45:06:e2:bd:a8:6e:b9:3c:f1:ab:ad:22:37:51:64:
                    b6:a6:b7:18:bb:bd:bf:4d:36:1c:d0:ee:12:6d:80:
                    9d:7a:00:fc:3d:4e:c6:21:eb:5a:1a:16:80:3c:cb:
                    3e:5b:8a:86:d7:02:22:fb:ca:ad:7f:86:e6:c6:ab:
                    9d:b1:f8:f1:0f:02:17:8a:b1:51:a2:34:c3:8c:d7:
                    a9:c7:3d:60:2b:6d:6e:78:c0:c8:98:45:82:20:d1:
                    4f:b9:2e:97:03:da:ae:1b:fe:ad:b6:53:a8:61:6e:
                    61:1a:ba:1e:b2:2f:27:1f:a2:34:82:3a:62:b7:60:
                    79:95:b5:88:e4:f6:22:6d:6b:fc:dd:44:af:47:da:
                    09:2f:27:6b:48:56:9b:7d:8d:9f:bf:db:80:8b:9c:
                    26:15:42:78:e3:38:b2:14:cf:99:cf:e7:9c:34:3e:
                    05:cc:bd:76:74:55:97:c2:af:f7:ef:1b:f6:47:9c:
                    c4:dd:61:86:76:8c:5a:9a:69:b4:89:76:08:82:e6:
                    66:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:B0:E1:16:5F:1C:06:59:CD:96:43:64:16:A3:63:D5:FB:E4:C0:91
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/6LDhFl8cBlnNlkNkFqNj1fvkwJE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.106.240.0/21

    Signature Algorithm: sha256WithRSAEncryption
         86:d8:bf:1c:a1:df:0f:85:cc:5e:5c:ec:b6:33:31:b9:de:f3:
         0c:d2:c0:f5:ed:89:4c:c1:c0:6b:8d:e5:8e:cd:99:b4:c1:48:
         7b:fc:6b:a3:bc:be:6a:25:4e:0e:66:95:49:36:65:7c:11:6f:
         d7:9e:1e:7c:11:f8:b1:ea:b3:86:6a:bc:e9:cd:78:bc:47:0e:
         c5:6b:d8:62:f0:f5:aa:22:b0:71:6f:f7:43:95:35:d0:6f:3d:
         2c:a3:32:84:e2:e8:64:59:6e:c2:7d:44:c6:dd:dd:18:cc:c6:
         b1:c5:be:b8:3d:1c:7c:e3:5f:ea:99:7e:ac:37:18:3d:70:17:
         c0:c9:7e:fe:d6:87:6c:f9:3f:31:f4:17:0a:65:83:da:5a:84:
         da:97:62:11:a1:38:03:b4:da:70:19:dd:2b:d0:96:74:08:98:
         a2:a1:54:98:66:b3:59:20:96:55:9e:79:e4:7f:f8:d7:21:4f:
         8e:1e:eb:83:88:cf:3b:b2:4d:cf:63:82:58:fc:0d:ea:cb:b6:
         23:0b:22:86:4d:03:da:83:c0:bf:16:4d:83:a2:49:4f:54:09:
         4a:12:ea:31:e4:01:8f:9a:ea:88:0e:f7:ce:15:b3:9d:9f:11:
         ea:fa:89:ce:c3:ec:b3:9d:c0:18:a4:56:51:48:49:62:98:e3:
         be:e5:2c:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 11:41:34 2024 by rpki-client on console-ams.rpki-client.org