Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/AH25VJ9331pTxvpRSPcvSYGYJ4k.roa
File:                     AH25VJ9331pTxvpRSPcvSYGYJ4k.roa (raw, json)
Hash identifier:          LE1YnrIhKlTSRt7bH8LoP4vAV/auNKo8aIEMRUplcT0=
Subject key identifier:   00:7D:B9:54:9F:77:DF:5A:53:C6:FA:51:48:F7:2F:49:81:98:27:89
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       09E2
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/AH25VJ9331pTxvpRSPcvSYGYJ4k.roa
Signing time:             Sun 30 Jun 2024 01:42:19 +0000
ROA not before:           Sun 30 Jun 2024 01:42:19 +0000
ROA not after:            Tue 24 Jun 2025 10:46:45 +0000
asID:                     9605
IP address blocks:        49.103.128.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2530 (0x9e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun 30 01:42:19 2024 GMT
            Not After : Jun 24 10:46:45 2025 GMT
        Subject: CN=007DB9549F77DF5A53C6FA5148F72F4981982789
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:be:db:2a:73:0a:a0:e8:c4:77:6f:fa:50:27:
                    54:d3:b0:93:75:8e:54:6d:c6:a9:26:26:97:4b:41:
                    4e:f9:94:e6:02:05:c5:3e:34:d3:29:84:11:2f:86:
                    c3:46:44:d0:b7:19:86:a0:8f:4e:66:9c:2a:0a:bd:
                    46:9d:86:c2:43:60:d7:8f:e0:37:4c:7e:ce:d4:06:
                    ec:36:cd:26:a4:0b:fb:2f:af:7a:4e:9b:c0:95:1d:
                    d2:94:ee:65:9e:1c:95:95:31:be:3e:b5:48:aa:a6:
                    1f:3c:9f:c4:c4:e1:e4:31:e3:91:26:55:58:4e:02:
                    91:cf:7e:43:f8:1d:38:18:f9:cb:83:0f:af:f2:23:
                    ae:76:fa:f0:3c:70:af:9e:44:3c:e6:80:89:70:8d:
                    ba:a2:a1:0c:ec:cc:d7:15:4c:a3:98:57:0a:e3:83:
                    e0:c9:24:e0:e9:88:f4:ed:64:39:13:30:98:a7:ff:
                    c5:ad:64:7c:19:30:d9:86:b9:d7:6b:1c:7d:9f:7a:
                    17:11:ac:25:66:3d:8d:1a:e0:0f:b2:ab:4e:14:4f:
                    bf:c9:82:cc:87:6f:f8:b4:03:27:23:96:e5:da:17:
                    2d:4c:ca:de:0e:0d:a3:3e:16:b0:b5:ff:5d:af:b5:
                    cb:95:0c:f5:e3:13:7e:0a:e9:f7:70:57:c1:1c:be:
                    fb:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:7D:B9:54:9F:77:DF:5A:53:C6:FA:51:48:F7:2F:49:81:98:27:89
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/AH25VJ9331pTxvpRSPcvSYGYJ4k.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.103.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         7d:fc:0e:41:e0:ea:7b:7a:cd:39:2a:54:91:e1:52:01:b0:06:
         7c:76:a8:93:6d:bc:33:b7:c8:3c:b4:86:3b:6f:79:11:d5:89:
         d8:a4:b8:0a:bf:86:1b:3f:f9:8c:99:68:5a:97:64:2a:0f:b8:
         dd:6d:27:e2:28:6d:b9:ac:35:c0:e5:62:a0:55:22:ff:c4:05:
         58:a6:e4:1a:d8:ce:52:43:03:08:db:00:23:68:dd:f3:53:ec:
         af:de:66:a2:c1:c1:37:0b:a7:a3:77:49:ca:17:a8:1a:74:10:
         19:2c:26:ef:8c:03:b5:d5:8a:b3:7d:62:ac:d8:f9:78:ed:0d:
         2f:4b:fb:99:df:20:99:9b:80:3e:71:53:c2:c6:d3:07:2b:cd:
         32:11:36:04:c5:24:74:71:ca:ff:eb:0f:a0:53:a4:c9:e4:f4:
         0b:ad:a0:6f:95:dd:cd:26:10:9c:2f:13:fa:dc:0f:df:6c:b7:
         ca:c4:be:27:ab:18:57:57:ba:8b:0e:03:09:b8:fe:42:62:4f:
         b9:8c:d7:fb:e0:15:0a:37:2d:ee:b5:11:b9:e4:e0:38:a4:98:
         ce:56:a3:fa:77:59:28:ea:bd:dd:48:80:b1:a7:10:64:fa:ce:
         8b:21:49:de:e3:a0:c2:78:37:cf:92:7a:ff:f8:7c:53:9a:d6:
         e6:26:87:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:59:09 2024 by rpki-client on console-fra.rpki-client.org