Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/9jNNe_Ov_XMkRlneKUI8t_PrPXM.roa
File:                     9jNNe_Ov_XMkRlneKUI8t_PrPXM.roa (raw, json)
Hash identifier:          Dwc0R8QLxp1XIG2fTAJ6cg1UhIZ4B8PaIdZO8L36Aog=
Subject key identifier:   F6:33:4D:7B:F3:AF:FD:73:24:46:59:DE:29:42:3C:B7:F3:EB:3D:73
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       04D0
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/9jNNe_Ov_XMkRlneKUI8t_PrPXM.roa
Signing time:             Thu 27 Jul 2023 16:48:20 +0000
ROA not before:           Thu 27 Jul 2023 16:48:20 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     9605
IP address blocks:        49.106.186.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 23 Jun 2024 11:53:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1232 (0x4d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jul 27 16:48:20 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=F6334D7BF3AFFD73244659DE29423CB7F3EB3D73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b5:d2:da:ec:1b:b6:d5:0c:3f:6f:e5:d9:1a:
                    e7:aa:e4:8e:fa:7b:ee:7c:26:63:0a:7d:63:91:27:
                    fe:8e:34:cd:2a:ab:3a:c7:b6:90:0a:27:10:cf:b0:
                    65:b8:08:cc:73:06:cd:47:45:c5:89:2d:79:a7:fb:
                    bd:f4:b1:3a:dd:38:51:78:db:ff:d0:6d:dd:28:ef:
                    a4:ee:09:36:eb:97:0a:50:c4:2a:9b:55:ad:6f:90:
                    1d:5b:81:07:97:9d:8e:4c:8d:f8:b4:6e:70:f2:cb:
                    71:0f:3d:70:9f:d2:31:ee:de:62:6b:ca:9e:d1:d5:
                    cb:e0:cb:d7:0c:53:f9:d5:54:81:7f:75:d3:14:e2:
                    bf:81:76:6d:df:6d:5f:5c:ee:f6:36:04:ff:05:39:
                    2b:1b:a7:0b:30:30:04:92:b5:a5:82:ef:32:c8:0d:
                    45:93:87:ec:f3:28:78:9f:61:b0:55:8d:c1:27:0c:
                    a9:18:ed:c9:e5:91:ef:55:9b:34:d2:40:61:e8:dc:
                    6d:f9:7e:d5:32:49:42:b5:31:93:94:c4:fa:d5:8e:
                    14:70:45:17:66:9c:19:cc:44:e0:da:f7:3c:93:60:
                    78:9a:fa:cb:c2:31:d8:22:2a:33:bd:fa:c3:75:8f:
                    5d:f5:6a:01:7f:8a:bf:4a:bf:4b:ee:5e:d7:ba:be:
                    23:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:33:4D:7B:F3:AF:FD:73:24:46:59:DE:29:42:3C:B7:F3:EB:3D:73
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/9jNNe_Ov_XMkRlneKUI8t_PrPXM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.106.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b7:2d:12:98:a4:d8:a0:52:63:f0:fd:56:df:99:42:d3:e3:b7:
         2f:60:65:c7:dc:62:85:9a:79:be:d2:70:d4:84:2c:09:41:47:
         89:9d:bc:ab:fa:1e:d0:05:7d:2f:1b:b2:dd:d7:35:a7:b9:10:
         90:3a:1e:7e:ff:0c:e6:ba:e2:20:9f:88:1e:5c:7a:dd:c7:8c:
         36:db:88:85:2f:c1:95:5c:f1:94:66:69:b4:cf:e6:93:67:4b:
         c6:94:ff:f2:04:85:57:d2:87:59:14:84:8d:2b:6a:41:07:30:
         76:29:cd:77:00:2f:e2:f6:6b:9a:0c:a9:e8:3e:be:33:3b:47:
         1e:67:f5:6a:18:28:98:d9:8f:3e:1b:65:d3:14:f8:d4:75:b3:
         05:13:09:28:47:08:af:de:31:bd:5c:6e:58:4a:2f:e1:38:99:
         50:38:62:32:dc:3e:ac:b3:c4:6a:6e:48:a9:21:89:7d:30:32:
         a6:5d:5b:df:98:1e:9a:10:37:82:c2:43:5a:80:07:96:0e:71:
         c4:4d:3f:85:1c:dd:64:fa:1f:ad:96:bc:0c:da:4a:7a:38:e3:
         96:d0:04:bc:7b:00:ad:af:eb:e3:12:90:94:18:b4:21:58:d4:
         06:fe:d9:91:45:2c:fb:bc:77:7d:1a:59:b7:99:5c:d0:91:ed:
         89:22:c4:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 12:57:20 2024 by rpki-client on console-fra.rpki-client.org