Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/7dF_-88tsozRd1o1F_yqJCxuz7s.roa
File:                     7dF_-88tsozRd1o1F_yqJCxuz7s.roa (raw, json)
Hash identifier:          Avp0SoaW2Wy/+mzrdsW6iTaWPFlo/UCjLoXJ0E6dQlQ=
Subject key identifier:   ED:D1:7F:FB:CF:2D:B2:8C:D1:77:5A:35:17:FC:AA:24:2C:6E:CF:BB
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0407
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/7dF_-88tsozRd1o1F_yqJCxuz7s.roa
Signing time:             Tue 06 Jun 2023 16:05:50 +0000
ROA not before:           Tue 06 Jun 2023 16:05:50 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.104.76.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 May 2024 13:36:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1031 (0x407)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun  6 16:05:50 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=EDD17FFBCF2DB28CD1775A3517FCAA242C6ECFBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:48:c8:0c:e4:8a:85:48:6e:db:fd:de:e4:fd:
                    4f:d9:cb:84:fb:a4:07:cc:44:03:b3:83:f0:6c:16:
                    26:f4:07:79:5f:9f:fa:fe:0e:86:40:0e:f0:3e:b1:
                    65:89:09:40:33:d8:a0:60:5f:76:8c:44:fc:58:bf:
                    80:da:f3:9e:d9:98:fd:69:86:17:17:fb:28:08:09:
                    5e:6f:88:8a:af:96:59:77:65:08:9c:7b:15:b0:13:
                    2e:25:a0:76:6f:bf:42:c8:21:f3:51:e4:4b:7d:97:
                    61:14:0b:cf:9a:80:69:8a:c1:d7:35:e5:52:70:9a:
                    e0:02:e4:12:d6:10:46:0c:7f:a9:03:5b:06:36:68:
                    07:87:0f:78:b1:6d:b0:33:4e:b7:91:fe:cd:b4:4b:
                    98:46:28:b9:66:89:d4:e4:ca:6a:20:53:60:15:02:
                    dc:af:22:b7:89:76:da:17:4c:58:0d:86:03:c2:27:
                    a1:63:c1:13:1c:eb:80:2d:94:b7:1b:96:f5:c7:48:
                    c8:78:bb:51:09:61:41:97:c0:56:55:38:34:30:29:
                    2e:4f:cc:bd:08:d6:a5:0a:61:73:70:71:54:3b:9b:
                    0c:96:27:59:f4:2c:ba:4e:54:97:92:a4:81:af:a8:
                    16:d4:52:32:d0:8a:4c:e4:79:13:a0:dd:bf:a9:1e:
                    fd:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:D1:7F:FB:CF:2D:B2:8C:D1:77:5A:35:17:FC:AA:24:2C:6E:CF:BB
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/7dF_-88tsozRd1o1F_yqJCxuz7s.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.104.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         15:c0:fc:18:26:05:8d:d8:72:b5:51:df:a3:61:80:0c:99:6c:
         be:3c:d4:35:4a:6c:a6:67:52:1f:47:4f:45:b3:44:ac:9a:f9:
         73:35:f1:39:21:c1:67:76:46:a3:b7:02:7c:14:65:dc:99:d0:
         53:c8:ed:6c:4b:b4:29:f7:ee:1b:7a:23:94:d2:0b:6d:70:50:
         09:eb:bd:d4:4b:ce:e6:17:82:5c:09:66:4c:2f:df:c1:fc:5d:
         61:e3:ab:21:93:24:2e:9b:f8:6f:e3:4d:b4:f8:6c:47:74:8f:
         5c:e1:22:47:6b:97:dc:f5:23:6c:21:f3:14:49:56:a5:3a:8c:
         f9:4b:4c:14:18:8a:81:34:f0:b5:f2:cb:e2:0a:21:cb:fb:03:
         fa:fc:72:97:a5:77:f8:98:49:74:7b:0c:4c:35:15:09:00:bd:
         ca:d7:48:2f:07:1e:8e:1f:b6:3d:05:5c:e1:d0:e5:90:42:b6:
         02:70:a5:a5:67:54:3c:c7:54:e4:15:f4:e7:11:8e:82:af:5e:
         6b:a8:a2:fd:9f:1f:c3:d9:54:07:4f:3c:26:d7:c2:3a:43:ba:
         91:91:37:b3:d3:dd:12:bd:ce:3e:ae:31:a9:cc:7c:fa:0b:3c:
         a8:b6:7f:37:8d:0b:c5:f1:a8:1b:bd:1c:b5:08:bf:f2:f5:38:
         91:97:63:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:15:55 2024 by rpki-client on console-ams.rpki-client.org