Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/84V4h5MmpJNKx_5VWjCex9OV0Ss.roa
File:                     84V4h5MmpJNKx_5VWjCex9OV0Ss.roa (raw, json)
Hash identifier:          eLb74qzaex/QPgXZRYxArmsUIwqro+kaZoneJwVxjkA=
Subject key identifier:   F3:85:78:87:93:26:A4:93:4A:C7:FE:55:5A:30:9E:C7:D3:95:D1:2B
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0654
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/84V4h5MmpJNKx_5VWjCex9OV0Ss.roa
Signing time:             Tue 30 Apr 2024 01:31:35 +0000
ROA not before:           Tue 30 Apr 2024 01:31:35 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        49.98.180.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:41:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1620 (0x654)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr 30 01:31:35 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=F38578879326A4934AC7FE555A309EC7D395D12B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:21:7f:4b:64:63:d4:05:2f:b5:ae:4b:5b:87:
                    b8:55:68:68:3f:a3:bd:8f:ea:3b:72:f5:6e:b4:b7:
                    08:24:65:73:4f:34:17:15:f4:50:d4:67:68:69:45:
                    2e:9f:82:45:80:e6:08:53:b1:29:ee:5c:3d:42:12:
                    89:96:66:52:ec:8f:1e:03:79:78:44:1c:5d:bf:6a:
                    fb:ac:d3:ac:5d:2e:c8:e2:ea:44:a1:ad:3d:e5:41:
                    bc:0d:6d:d6:ac:fc:c8:f6:76:6b:a1:97:8d:33:1d:
                    3d:39:5f:de:9c:9a:51:83:66:25:65:65:84:90:ab:
                    e2:21:c9:e2:be:d7:c5:e4:13:4d:14:a7:8f:e8:54:
                    42:fe:11:4e:d4:9f:9c:88:6c:af:f6:72:16:ac:b6:
                    22:85:02:e9:4f:e1:a1:cf:3b:be:20:64:89:ef:ef:
                    bd:77:de:7c:f5:ef:c9:00:bd:b6:fa:fb:bf:1e:dc:
                    57:45:d3:0d:51:0a:ba:f6:80:6a:a1:4f:93:13:9f:
                    66:43:b3:d0:0b:89:b9:c4:67:21:06:56:85:7b:04:
                    03:90:83:d5:86:23:7e:d6:19:e5:ca:15:a9:2b:c4:
                    5d:2e:74:74:cf:4f:f7:9d:90:ca:59:68:8d:bb:a4:
                    a2:33:dc:2d:9f:98:fa:20:a3:be:78:dd:a8:42:95:
                    fe:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:85:78:87:93:26:A4:93:4A:C7:FE:55:5A:30:9E:C7:D3:95:D1:2B
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/84V4h5MmpJNKx_5VWjCex9OV0Ss.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.98.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ab:f9:20:ce:7a:2f:61:12:43:41:d9:7b:f8:9e:29:85:12:1e:
         06:08:43:19:7b:38:41:72:9f:8c:aa:ad:3c:12:0d:11:87:20:
         1d:4e:61:ab:12:6c:c0:90:66:9b:88:8a:83:fa:a6:6c:4a:6c:
         c8:38:ff:ce:3b:14:3c:b2:14:51:68:5e:6d:16:03:47:d8:ac:
         be:60:e0:02:60:be:3b:9b:30:33:da:50:32:12:14:60:5b:4b:
         70:39:4c:c6:6d:ff:1c:29:85:b0:a1:df:5e:9c:31:db:23:94:
         63:38:0f:76:d1:6a:22:4a:9d:52:80:b3:11:91:2f:47:b6:13:
         28:6d:a8:b3:b7:44:17:02:c9:c6:7f:e9:dc:36:30:cf:06:34:
         9c:44:ce:af:62:83:11:8e:23:07:35:e9:28:86:b2:ec:57:71:
         08:fe:55:d2:8b:b5:07:1d:c5:59:59:14:c2:be:fb:80:69:12:
         ca:fd:08:bd:b1:7a:a9:8e:d8:44:9e:06:47:7d:fc:3d:59:a7:
         13:a7:ad:36:ed:31:16:d5:d0:ba:7a:48:b5:7a:c5:f8:18:04:
         e1:2b:ca:b0:af:a1:91:b1:ee:d0:f0:c5:cd:0e:fa:df:f3:e3:
         63:f3:fc:8c:3d:47:1e:01:02:bd:3e:65:f3:cb:71:54:49:98:
         53:84:5b:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:23:59 2024 by rpki-client on console-fra.rpki-client.org