Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/8ywRH88ZBYfGWZAKRCc1vYM4EfY.roa
File:                     8ywRH88ZBYfGWZAKRCc1vYM4EfY.roa (raw, json)
Hash identifier:          HFP8ohWrblgskuq/M9vCopgrwdkRnDRatAuT9dB34Ug=
Subject key identifier:   F3:2C:11:1F:CF:19:05:87:C6:59:90:0A:44:27:35:BD:83:38:11:F6
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       07D4
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/8ywRH88ZBYfGWZAKRCc1vYM4EfY.roa
Signing time:             Tue 30 Apr 2024 02:08:53 +0000
ROA not before:           Tue 30 Apr 2024 02:08:53 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        49.104.192.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2004 (0x7d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr 30 02:08:53 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=F32C111FCF190587C659900A442735BD833811F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:09:9f:75:42:c9:a4:f9:46:dc:69:3b:73:0e:
                    ce:1b:d5:30:7b:88:d2:03:4f:ef:d1:d4:1d:75:dd:
                    3d:a4:d7:f6:36:d7:8d:0a:6f:f5:19:9a:b8:e1:a7:
                    dd:4e:f0:4e:fd:9d:7f:37:7b:66:82:d9:66:93:12:
                    3c:c9:ab:f5:ab:cd:b7:08:f0:b8:6c:e0:be:7a:86:
                    14:4b:9a:42:b7:a4:6e:93:8b:26:19:4b:86:bb:74:
                    5e:c6:64:14:45:f5:2c:c2:fb:7b:ea:21:78:c4:11:
                    68:a7:50:36:a3:21:d9:18:7a:a1:b4:4b:c6:4b:06:
                    09:7d:73:c4:f5:31:41:78:19:c1:4d:79:01:e5:88:
                    b6:16:92:34:20:c9:02:ae:1d:89:7f:e1:88:6a:57:
                    e3:d7:32:ef:1a:d9:e4:4a:c3:ff:77:b8:50:68:83:
                    29:3c:6f:32:80:72:16:48:b2:d2:52:a4:b7:1e:56:
                    8c:a1:39:ba:91:19:39:6f:ee:87:0c:d0:eb:d6:a5:
                    87:63:35:44:18:04:7f:1e:46:78:76:86:c5:7f:72:
                    2f:da:d4:ac:c9:d6:51:b8:76:d7:3c:0d:d9:f1:25:
                    19:fe:21:99:39:33:70:5c:3f:49:17:18:c0:4f:15:
                    ac:34:ef:f2:32:48:3b:64:40:19:cd:29:ff:85:7f:
                    6a:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:2C:11:1F:CF:19:05:87:C6:59:90:0A:44:27:35:BD:83:38:11:F6
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/8ywRH88ZBYfGWZAKRCc1vYM4EfY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.104.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         28:bb:2e:81:a9:9c:19:e2:03:33:3b:6f:69:63:e9:f1:a0:8b:
         86:80:3a:df:0a:42:69:3b:d1:d4:9b:e2:79:38:b4:2c:a7:6f:
         30:24:c7:fc:12:e4:c7:69:a9:0b:35:57:3d:ef:f8:7b:f6:10:
         65:e7:8a:29:63:4e:fa:ba:f2:dc:12:de:af:4f:38:9a:34:09:
         f3:b3:eb:4c:fe:08:c2:53:82:b9:4f:c3:b1:d8:a1:87:2a:47:
         b1:b3:38:b8:e0:43:94:e6:58:3c:ea:4c:e8:ef:43:d9:20:fa:
         02:50:4c:f0:41:cc:e5:2a:6c:6f:78:74:98:ae:98:68:fe:e3:
         55:d1:fd:d8:da:9b:26:6b:2c:bd:19:21:e1:41:0a:8d:e8:0b:
         8d:0b:b6:72:f1:bf:09:c0:fa:43:39:2f:c0:00:26:8e:7d:47:
         4d:42:bc:7e:ff:be:28:da:d4:91:e1:5f:bf:41:3f:97:aa:ae:
         0e:93:08:15:35:0e:d4:64:97:ed:a6:11:98:b7:28:02:d7:18:
         92:5e:5e:1b:dd:71:9c:9a:bc:9e:63:5c:43:20:29:b2:8e:27:
         0c:6f:60:2d:24:02:e6:36:13:e6:12:80:2f:33:57:b1:a0:0e:
         0a:ea:1d:3c:0e:47:6c:90:2a:f4:1a:75:6e:1d:33:b4:e8:70:
         48:52:5f:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:45:39 2024 by rpki-client on console-ams.rpki-client.org