Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/6vlmUi603_85OGpqAsCMNtU0gO4.roa
File:                     6vlmUi603_85OGpqAsCMNtU0gO4.roa (raw, json)
Hash identifier:          KFNxo7wJnfVu97z4d/I5E5NoLae9LLVKGT4qnH4qsw4=
Subject key identifier:   EA:F9:66:52:2E:B4:DF:FF:39:38:6A:6A:02:C0:8C:36:D5:34:80:EE
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       060B
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/6vlmUi603_85OGpqAsCMNtU0gO4.roa
Signing time:             Thu 29 Feb 2024 01:38:25 +0000
ROA not before:           Thu 29 Feb 2024 01:38:25 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     9605
IP address blocks:        49.98.24.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1547 (0x60b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Feb 29 01:38:25 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=EAF966522EB4DFFF39386A6A02C08C36D53480EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:f6:ea:4c:e5:d5:19:f6:63:04:f2:29:ee:e8:
                    1b:5a:e2:1a:08:60:7e:11:73:74:e1:fb:c1:42:65:
                    4b:93:96:45:db:e6:47:b3:a4:77:05:d8:fd:e5:47:
                    84:af:80:4a:31:41:1d:57:2d:77:da:c2:35:06:59:
                    1a:98:98:c8:e6:77:02:5e:f0:17:ee:91:c4:30:3c:
                    65:d5:bb:64:1b:6b:47:46:0b:03:e6:af:57:ce:4d:
                    f4:82:5d:2b:2c:1c:e9:9b:fd:7f:b1:e9:50:c7:aa:
                    6a:c4:3b:0d:3b:82:f5:b2:13:61:6d:8d:f3:66:61:
                    b8:51:81:c4:b1:6b:ab:65:7d:04:96:cd:d6:e7:0f:
                    a7:9e:53:ec:74:29:1f:a4:cf:56:ba:a3:0d:95:07:
                    35:8b:90:ec:71:e0:7a:5a:ab:6d:ed:44:cf:1e:69:
                    21:3b:4c:d7:c1:5c:5a:57:4a:1c:3f:30:d1:b1:4d:
                    4a:d7:cb:6c:54:3f:65:98:a9:19:d2:cc:38:3e:8e:
                    7f:96:3c:2a:f3:f0:da:e5:72:d4:63:d5:00:25:ae:
                    3b:55:d6:4c:66:82:a2:79:34:67:fc:93:f7:55:4f:
                    6a:55:5b:53:a5:bd:13:23:41:86:c5:01:2a:ad:a2:
                    21:40:aa:72:2a:6f:09:23:42:da:d2:85:06:4d:f1:
                    6d:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:F9:66:52:2E:B4:DF:FF:39:38:6A:6A:02:C0:8C:36:D5:34:80:EE
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/6vlmUi603_85OGpqAsCMNtU0gO4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.98.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:4a:84:e4:2c:34:82:60:09:26:6f:f7:c9:07:37:40:50:90:
         3f:22:95:45:12:ad:c2:aa:98:22:49:4a:93:75:95:0b:09:d1:
         e2:05:d7:3f:83:cd:53:1a:e2:8a:b1:08:5f:f2:7f:04:ce:9a:
         81:09:c5:72:a9:4b:00:28:d1:9b:63:67:c4:76:cb:fa:2f:1f:
         55:df:db:6d:5f:d8:b0:ea:91:06:21:27:ff:1a:d8:92:e6:9d:
         85:3f:29:29:79:19:1f:4c:82:3c:eb:b4:98:03:f9:c9:17:33:
         14:6e:e8:ea:17:ab:09:59:d4:eb:17:ee:b2:7c:b2:c9:cc:c9:
         e1:a8:1a:c0:da:4b:a1:f1:33:15:ca:62:89:bb:c1:89:cd:9c:
         65:1f:5e:74:ed:33:ac:d3:73:7c:2d:fa:37:8f:90:92:d0:d3:
         eb:6c:6c:fe:b8:ff:cc:57:24:e4:0b:1f:53:6e:07:2d:b4:bf:
         81:51:20:76:63:9e:43:f7:74:ef:2b:3b:08:3d:bc:3b:86:0a:
         02:59:f8:50:ae:f2:92:cd:4f:ed:60:6c:a9:10:70:af:75:2c:
         8a:92:d0:c6:b5:16:93:47:4e:6f:c0:bf:f0:6d:2e:f9:24:ec:
         1a:3f:c9:d4:68:38:42:91:07:8a:49:04:07:af:38:2d:74:92:
         f4:26:ef:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:59:09 2024 by rpki-client on console-fra.rpki-client.org