Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/BHePJqVcVvazb1n7Ku9vhW7SiTY.roa
File:                     BHePJqVcVvazb1n7Ku9vhW7SiTY.roa (raw, json)
Hash identifier:          W3Npmb8O1otLTyaIunj0l2uOVNpGW19vyNCrbGn1KkM=
Subject key identifier:   04:77:8F:26:A5:5C:56:F6:B3:6F:59:FB:2A:EF:6F:85:6E:D2:89:36
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       047B
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/BHePJqVcVvazb1n7Ku9vhW7SiTY.roa
Signing time:             Thu 27 Jul 2023 16:44:09 +0000
ROA not before:           Thu 27 Jul 2023 16:44:09 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     9605
IP address blocks:        49.102.153.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1147 (0x47b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jul 27 16:44:09 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=04778F26A55C56F6B36F59FB2AEF6F856ED28936
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:4e:b8:4e:d1:6f:a6:b6:c5:0c:29:99:a9:6e:
                    69:05:eb:e8:c6:ce:48:94:88:68:72:4b:f2:4d:d9:
                    62:ea:2d:cb:e1:a0:e5:df:c5:2b:b5:fc:94:f2:dd:
                    13:39:12:ff:37:53:0d:c0:23:3a:75:9a:52:6c:23:
                    5b:6d:ef:8e:16:8a:6f:9c:ca:a1:9b:52:f6:ec:fb:
                    d5:4b:3b:35:ce:dd:a8:73:4b:c7:3a:f2:fb:1f:91:
                    30:10:ff:d2:01:b0:2f:f8:74:a0:09:dc:ed:63:98:
                    68:8a:c1:65:f8:78:15:b6:e0:27:44:ec:6d:a5:86:
                    48:cb:26:14:54:fd:42:e4:0b:f6:e3:1b:d9:e1:13:
                    b1:50:e7:bc:11:99:b9:b5:3a:2f:a9:df:e9:e1:47:
                    d0:54:d0:2b:27:c6:2b:eb:0f:eb:a8:f5:31:4d:74:
                    21:de:a8:74:a3:cb:e4:b2:66:89:7a:a8:da:a7:6e:
                    77:24:88:31:73:64:99:57:ea:89:67:19:38:d2:87:
                    c1:e6:9b:e7:bf:94:e3:42:36:2b:87:2c:40:3d:8f:
                    d6:3f:09:7b:d7:72:4f:06:a6:73:8e:50:b6:03:ff:
                    55:c6:e0:bc:1a:f7:49:53:b4:61:96:75:33:e1:ba:
                    8f:8f:fd:3a:3e:73:e4:a8:9e:88:6c:2f:66:cd:a2:
                    bb:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:77:8F:26:A5:5C:56:F6:B3:6F:59:FB:2A:EF:6F:85:6E:D2:89:36
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/BHePJqVcVvazb1n7Ku9vhW7SiTY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.102.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:14:48:36:2e:71:01:a0:51:81:a6:e3:02:b8:cc:bd:43:c3:
         9e:e1:64:71:ab:cb:40:26:af:7d:6f:d4:fa:ba:6d:2f:ad:42:
         4a:71:7f:5c:8c:95:72:b3:80:da:09:e6:e2:28:77:eb:32:6a:
         19:72:68:f1:d1:fc:b6:59:38:ad:6a:e3:94:52:2d:8a:7d:16:
         38:d6:e5:0a:f0:fa:66:10:5d:7b:c5:57:4f:d3:94:99:51:b0:
         82:27:17:fe:0e:eb:85:76:a5:2e:95:12:a4:12:0e:3b:23:d6:
         ce:06:a1:a7:ce:e5:86:22:7c:62:c9:7c:e8:aa:94:7b:9b:d9:
         f4:d6:79:fc:11:f0:85:93:e3:af:5a:0d:43:92:64:d2:8d:3a:
         3f:72:39:86:b3:e0:10:ca:51:52:70:bf:b2:43:cf:d9:74:52:
         08:f7:9f:e8:48:b2:5d:93:b9:1a:c8:67:25:e5:52:54:55:d6:
         11:36:9d:af:81:a1:89:59:7e:6b:28:ac:85:50:4f:b5:5e:99:
         48:8a:ab:e4:ff:97:83:e4:86:14:36:ae:e3:06:1b:f7:23:98:
         02:c4:1c:7f:45:56:ff:f1:31:3d:38:55:38:d2:f4:e1:59:61:
         df:2a:e0:52:c0:58:49:46:c8:36:00:2c:5d:73:ac:5f:ab:5a:
         e2:37:34:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:38:46 2024 by rpki-client on console-fra.rpki-client.org