Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/8SA-GJDRtMpBIKDWDWcK0Pcc4ns.roa
File:                     8SA-GJDRtMpBIKDWDWcK0Pcc4ns.roa (raw, json)
Hash identifier:          q/na6paiuQxNtCcuJBRxu2Bp6PNm04E3mP9vr5y0rEM=
Subject key identifier:   F1:20:3E:18:90:D1:B4:CA:41:20:A0:D6:0D:67:0A:D0:F7:1C:E2:7B
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       09F5
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/8SA-GJDRtMpBIKDWDWcK0Pcc4ns.roa
Signing time:             Sun 30 Jun 2024 01:42:27 +0000
ROA not before:           Sun 30 Jun 2024 01:42:27 +0000
ROA not after:            Tue 24 Jun 2025 10:46:45 +0000
asID:                     9605
IP address blocks:        49.108.64.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2549 (0x9f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun 30 01:42:27 2024 GMT
            Not After : Jun 24 10:46:45 2025 GMT
        Subject: CN=F1203E1890D1B4CA4120A0D60D670AD0F71CE27B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d0:d5:d6:4b:2d:97:3b:68:18:cb:a8:4e:06:
                    18:f5:60:7b:8b:39:6c:c7:2f:c6:25:24:f7:9b:99:
                    85:0b:f9:d1:d4:8a:31:01:9e:c1:94:15:17:0d:ed:
                    91:9a:39:d0:4b:d7:4c:34:73:64:87:4c:e1:22:02:
                    45:87:93:9d:4b:a5:2e:19:bb:33:f9:d8:0f:63:a8:
                    90:08:48:22:ad:7d:b5:92:4a:90:8e:fe:23:a5:31:
                    0f:9d:b9:95:f6:3b:1d:73:b5:06:63:de:01:28:6c:
                    ad:a2:d3:39:0c:d4:87:34:fb:39:d5:26:34:74:a7:
                    b5:23:aa:1c:94:b0:d3:d1:31:6a:28:cd:65:0f:61:
                    00:a3:11:4b:95:ae:14:d6:cc:e2:14:e4:9a:d3:da:
                    3f:04:51:78:f5:fe:54:3e:6c:ac:62:ec:ee:52:18:
                    23:ce:e6:9f:b0:dd:6d:8e:25:1d:1a:1a:b5:f7:e6:
                    85:1a:23:fd:a8:68:b9:17:a4:53:8d:07:10:a0:56:
                    4e:91:60:7f:ed:4a:f6:af:df:b5:5d:2d:ca:75:93:
                    be:d8:4b:5e:ed:70:d9:00:c2:3c:6b:27:45:a8:9c:
                    30:fa:ac:03:0e:27:93:db:fe:d2:3b:e7:0f:90:b8:
                    93:69:a9:29:83:4a:c4:11:16:58:29:ba:18:99:7f:
                    54:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:20:3E:18:90:D1:B4:CA:41:20:A0:D6:0D:67:0A:D0:F7:1C:E2:7B
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/8SA-GJDRtMpBIKDWDWcK0Pcc4ns.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.108.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         30:2e:da:3b:db:05:45:20:44:e1:d0:85:d8:c4:f0:20:e5:5b:
         18:02:11:71:1c:9c:45:68:56:31:e1:e1:30:12:cc:9d:56:bf:
         bc:57:f4:68:0d:dd:5b:c6:79:22:25:c8:6a:38:99:c2:4f:2d:
         3c:35:4b:e8:23:e6:3c:cb:9a:ed:51:17:9d:fb:97:ca:48:6f:
         22:0e:46:79:75:d2:ba:0c:63:9c:08:ec:25:41:86:52:6d:a9:
         93:fe:8c:5e:8c:da:14:1a:d3:e8:37:9a:74:76:61:4c:05:a9:
         17:a2:ff:66:94:6d:8c:56:6e:7c:cf:bc:fb:a3:a4:7e:a0:28:
         7c:cf:23:32:9f:96:ef:9c:2a:15:c6:47:0b:08:d7:85:ce:a0:
         0e:a3:3c:c3:09:42:97:ad:35:1b:5d:42:94:53:1b:13:c2:45:
         b3:6d:61:cd:25:14:a6:e5:62:a0:96:e0:c3:e4:23:3c:fb:44:
         f2:2a:53:26:d2:7f:01:1a:6b:74:47:27:85:6f:e5:ac:09:dc:
         b0:b2:d9:bc:a1:0b:83:7c:5c:ec:90:a9:5a:ae:e6:e7:49:8b:
         42:6a:ee:f2:e8:43:a7:25:ae:2c:cc:d6:52:2a:82:45:0a:75:
         b1:6b:ee:4e:5c:f7:d5:18:fa:2c:13:af:ec:40:19:46:c6:bb:
         5e:4d:b4:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:45:39 2024 by rpki-client on console-ams.rpki-client.org