Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/A3hYVQ3juH4dCtgYJGsmpDpS_Nk.roa
File:                     A3hYVQ3juH4dCtgYJGsmpDpS_Nk.roa (raw, json)
Hash identifier:          j4cAPQXt37B5pDPg74f0DB0tzhd6Pw2OTM6qWmSXmZo=
Subject key identifier:   03:78:58:55:0D:E3:B8:7E:1D:0A:D8:18:24:6B:26:A4:3A:52:FC:D9
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0424
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/A3hYVQ3juH4dCtgYJGsmpDpS_Nk.roa
Signing time:             Tue 06 Jun 2023 16:09:06 +0000
ROA not before:           Tue 06 Jun 2023 16:09:06 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.104.36.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 May 2024 13:36:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1060 (0x424)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun  6 16:09:06 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=037858550DE3B87E1D0AD818246B26A43A52FCD9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d0:8c:8b:94:e1:28:84:78:c1:35:c4:c6:d2:
                    18:5d:0f:ee:0b:b9:73:58:49:bb:a2:dc:9b:68:50:
                    c3:bd:c2:84:e3:cd:79:49:a1:f0:b8:bb:fd:a6:f6:
                    6d:02:4b:07:cb:b3:f2:3e:b5:14:c2:6d:59:8c:8f:
                    25:f7:92:bf:5a:99:e3:d5:16:92:1a:ec:fe:63:97:
                    70:42:17:b1:3e:1d:33:13:d4:94:46:dc:b0:11:ea:
                    74:68:2e:de:18:b8:dc:c3:20:57:ff:18:a2:be:16:
                    04:38:04:dd:41:44:fa:58:c7:4d:a7:d5:42:15:dc:
                    9c:2a:11:07:5b:f1:7e:1e:98:a5:eb:50:9f:f7:1c:
                    86:40:de:1f:a4:51:33:4f:0c:31:a7:ed:c8:88:92:
                    55:54:4d:b4:f5:96:71:5f:43:96:84:7e:d4:1b:79:
                    31:ff:3b:23:21:61:f5:d8:53:23:af:2e:b1:72:1b:
                    5b:1f:e7:0b:3f:1e:01:85:45:01:91:17:17:69:32:
                    b6:0f:fe:c8:9e:fc:36:09:36:f9:f6:9f:36:71:55:
                    8f:83:74:a7:7a:cd:c9:c1:c0:fd:d7:ff:3b:43:95:
                    ee:9a:4b:1e:09:64:54:00:80:8d:f9:a5:05:30:a3:
                    ec:b4:b7:4b:72:92:e5:b0:3f:e6:a2:08:4a:8f:91:
                    10:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:78:58:55:0D:E3:B8:7E:1D:0A:D8:18:24:6B:26:A4:3A:52:FC:D9
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/A3hYVQ3juH4dCtgYJGsmpDpS_Nk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.104.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         78:88:1d:79:b3:d0:95:47:db:57:e6:ad:dc:a6:6b:66:0d:e4:
         c7:7e:d7:98:ee:c7:7b:1c:31:8a:2b:ca:1f:dd:34:ff:08:1a:
         11:d8:ad:21:f2:23:66:3d:70:6f:e1:44:7c:76:92:eb:f8:a2:
         39:45:4b:ea:f7:7d:40:21:cd:24:f3:f6:94:b8:84:20:96:cf:
         47:14:d6:c1:30:0a:7d:82:28:78:19:13:2c:53:46:cf:60:b4:
         0f:4c:77:b5:50:b8:fa:94:73:5e:84:23:a9:e9:a0:b9:89:cd:
         fd:96:df:85:b7:68:a2:76:aa:60:7b:f2:3b:f0:37:33:95:4c:
         d8:64:54:61:19:f4:94:54:5a:32:21:f1:ce:6c:74:85:77:27:
         0d:cd:f8:b7:33:67:8b:f3:f6:8a:73:c7:bc:06:d0:bb:6c:e4:
         b2:d1:ff:a4:02:9f:a8:a4:43:47:31:07:06:36:36:56:56:4b:
         10:cf:46:8f:aa:af:54:ff:5f:a5:11:56:7e:e1:7f:53:97:ba:
         23:4c:24:61:9f:98:88:af:98:9b:55:65:ca:7b:06:26:08:ef:
         96:ed:c8:bd:f3:d4:48:be:7d:ea:d4:c5:c9:ec:61:4b:f1:4e:
         7a:81:26:72:0e:1f:80:65:ff:aa:2c:18:bd:ef:86:d5:db:c5:
         fc:0d:76:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:15:55 2024 by rpki-client on console-ams.rpki-client.org