Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/ARwUtU6aZbO8UhyWHfdVyLfRa1Y.roa
File:                     ARwUtU6aZbO8UhyWHfdVyLfRa1Y.roa (raw, json)
Hash identifier:          QLdWTMS0tU3cwbkppGLLtGZrXZG0l9FS31cDWOm99kA=
Subject key identifier:   01:1C:14:B5:4E:9A:65:B3:BC:52:1C:96:1D:F7:55:C8:B7:D1:6B:56
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       082D
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ARwUtU6aZbO8UhyWHfdVyLfRa1Y.roa
Signing time:             Tue 30 Apr 2024 02:14:24 +0000
ROA not before:           Tue 30 Apr 2024 02:14:24 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        49.106.234.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2093 (0x82d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr 30 02:14:24 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=011C14B54E9A65B3BC521C961DF755C8B7D16B56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:07:00:ea:2a:2e:e4:c5:f3:ae:50:80:30:b1:
                    c5:50:33:34:bb:7b:6c:20:76:15:4f:30:e5:ee:3f:
                    8e:e7:58:38:b9:2d:11:ff:84:14:88:11:d0:11:51:
                    4a:49:27:9d:c9:e6:9c:00:a4:33:3b:22:64:52:b8:
                    84:1f:4f:4a:b2:ff:90:90:e3:5e:63:03:b4:77:5c:
                    c7:73:c7:d0:ef:02:0f:67:3b:98:ab:77:ad:6f:61:
                    62:04:22:9c:8c:61:0a:9e:23:6c:e0:16:fe:56:59:
                    db:9f:48:f1:93:1e:ec:fa:af:11:00:23:fb:59:19:
                    5a:2a:d2:b8:ec:58:34:4a:14:3d:46:9a:3e:8c:b5:
                    35:58:49:5f:33:dc:28:4c:2f:4c:74:05:36:3c:c7:
                    f9:d0:dd:ad:8f:da:59:ec:a9:4c:b2:dc:45:22:69:
                    89:90:d4:37:c7:0d:dd:75:f7:0c:f9:74:c7:b6:d9:
                    0d:db:29:bc:46:79:98:d6:1a:30:51:4e:76:7f:71:
                    53:a2:19:5c:fb:63:c7:f6:14:45:04:87:85:38:4d:
                    2e:29:3d:43:65:8c:44:b7:72:a9:26:fd:5f:f7:cb:
                    a7:63:fe:00:2f:06:06:cc:58:06:c6:77:ac:f1:a0:
                    a5:16:24:8a:35:71:0b:93:ee:2a:09:e3:cb:0a:6a:
                    b8:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:1C:14:B5:4E:9A:65:B3:BC:52:1C:96:1D:F7:55:C8:B7:D1:6B:56
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ARwUtU6aZbO8UhyWHfdVyLfRa1Y.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.106.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d6:51:45:d2:19:00:62:1f:21:bf:76:be:54:d0:da:b4:26:f2:
         f0:7c:d6:ad:43:e7:5b:d0:de:ac:72:e9:46:93:88:bd:68:c8:
         2a:32:9c:5b:da:30:c4:b1:a1:2e:46:57:f9:db:99:43:41:9b:
         fc:01:8a:fd:9c:22:59:c9:05:76:0f:4b:94:67:a1:75:3c:5d:
         db:52:e9:8e:3e:7d:5b:39:bd:f8:33:5a:71:f4:41:8f:f1:31:
         14:39:2a:3a:51:c3:d2:38:38:f8:be:e9:71:c6:4c:a0:76:07:
         ce:ce:b3:33:b5:64:06:03:c8:d2:e8:f0:fb:ae:b0:99:38:b4:
         cc:f8:32:a3:61:8a:9f:ae:2d:15:37:8c:9e:89:9e:a4:87:6a:
         73:ba:e4:58:a6:9e:f6:80:f1:85:f8:3a:86:2e:28:f4:9f:69:
         84:9d:a9:86:26:36:48:90:98:95:dd:65:51:55:96:cf:30:0c:
         d4:19:44:b7:6d:76:e8:f5:81:d8:9a:c0:d4:2a:31:c6:1a:47:
         fd:d0:c1:cd:c7:e6:25:9a:fc:0a:48:cd:a7:42:b7:51:9d:b8:
         86:f9:d4:0a:f4:cc:ad:36:46:b3:3c:3c:61:8e:57:30:33:9c:
         21:d1:95:8f:d7:af:5f:d7:6a:02:bb:95:2d:b1:3f:ce:a1:14:
         12:06:6e:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:38:46 2024 by rpki-client on console-fra.rpki-client.org