Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/6i1EB3_mx8IE0gFVyHv9fRGgBpc.roa
File:                     6i1EB3_mx8IE0gFVyHv9fRGgBpc.roa (raw, json)
Hash identifier:          ltf6Zh0I2Pq7br3FLZI9VGX8czO3d3hQmKJP8zqjAMI=
Subject key identifier:   EA:2D:44:07:7F:E6:C7:C2:04:D2:01:55:C8:7B:FD:7D:11:A0:06:97
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0792
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/6i1EB3_mx8IE0gFVyHv9fRGgBpc.roa
Signing time:             Tue 30 Apr 2024 02:04:47 +0000
ROA not before:           Tue 30 Apr 2024 02:04:47 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        49.102.160.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:41:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1938 (0x792)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr 30 02:04:47 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=EA2D44077FE6C7C204D20155C87BFD7D11A00697
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:2f:c0:50:85:ba:9c:7b:a4:4d:c3:f5:7c:d0:
                    9e:e6:4a:d1:d5:4c:72:0e:98:95:a3:c6:96:72:83:
                    f7:d4:0d:e9:97:71:30:db:3b:25:9e:de:cc:ce:5e:
                    5c:6b:6c:e9:ef:d6:aa:98:3b:fc:08:d9:c7:af:e5:
                    0f:55:d7:ea:94:e9:fa:da:15:05:21:f9:9b:72:f4:
                    b2:9b:82:9a:eb:fd:d7:6e:03:24:f5:bf:d0:c6:a5:
                    db:bf:f3:94:4a:f4:17:f8:52:de:ba:17:7c:1f:af:
                    7b:64:56:6e:99:b4:bd:c7:3f:98:ac:bd:51:c0:21:
                    fa:65:e0:06:65:29:17:51:7e:f6:53:0d:ba:2b:0e:
                    d7:11:7a:b9:57:9d:5a:76:c4:61:c4:70:15:63:9d:
                    3c:ca:e3:68:15:6a:26:71:46:ed:fc:00:00:6e:1b:
                    73:85:17:70:77:31:df:9d:d8:c2:b5:93:00:8b:a0:
                    74:b0:e8:24:2e:91:a6:1b:93:3d:55:bd:73:89:54:
                    0b:3d:58:c0:d4:53:85:fb:8c:85:79:df:f3:b4:10:
                    8f:e7:a7:3e:7e:f5:e6:10:89:df:ab:5a:68:64:18:
                    01:5f:f3:3b:fe:c8:a4:d8:dc:3e:9e:12:ac:5a:e9:
                    72:eb:bb:f1:f3:d8:57:fc:ee:a6:2f:3d:9b:22:7d:
                    b9:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:2D:44:07:7F:E6:C7:C2:04:D2:01:55:C8:7B:FD:7D:11:A0:06:97
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/6i1EB3_mx8IE0gFVyHv9fRGgBpc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.102.160.0/23

    Signature Algorithm: sha256WithRSAEncryption
         90:99:bb:7f:f7:ba:7b:f9:95:42:ff:6d:3b:64:01:b0:70:8d:
         6c:32:e1:7d:0d:fb:a3:33:04:d5:0c:7b:e8:e6:8a:47:f2:26:
         99:28:5b:5f:4c:31:4d:fd:9c:fc:a5:e7:9e:ea:cf:34:77:eb:
         b1:55:e4:e7:c7:20:e7:18:d3:4d:9e:c0:78:a7:2a:23:47:d3:
         1f:78:43:bf:21:cc:c0:8f:90:e1:44:25:6b:67:bc:54:5b:44:
         cc:8f:4c:eb:2e:35:44:6e:5c:af:90:88:16:30:40:39:a2:b8:
         f3:d2:9f:2a:34:35:20:b3:48:1b:de:33:6b:e7:8f:2a:fd:11:
         5f:d0:e0:1e:48:fb:58:0a:d8:e0:19:6a:b7:ee:cd:42:e0:e1:
         96:62:e3:d2:8c:72:a4:94:38:b4:df:0e:3d:4f:c8:97:fb:05:
         45:b1:69:8d:04:5b:51:ab:c8:fd:96:42:f7:87:cd:05:92:06:
         56:0e:82:03:40:4d:e1:06:4f:73:12:16:dc:d8:af:5d:f4:a4:
         77:3a:08:9f:50:15:e3:3d:67:db:5c:2f:c8:ef:1c:fc:a0:03:
         94:7e:02:1e:5b:1e:32:84:0b:61:9a:f8:56:b2:62:64:0d:39:
         c8:e8:f9:7a:3b:a9:73:e7:de:0c:53:5b:7a:af:55:88:18:d2:
         a2:d1:80:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:23:59 2024 by rpki-client on console-fra.rpki-client.org