Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/C93xdZIpDxpCdf0xUb7IpoNAlUQ.roa
File:                     C93xdZIpDxpCdf0xUb7IpoNAlUQ.roa (raw, json)
Hash identifier:          JpFMwXnLH/nu9HmlpsGCq5sra7ignUZWsiFOmengBcw=
Subject key identifier:   0B:DD:F1:75:92:29:0F:1A:42:75:FD:31:51:BE:C8:A6:83:40:95:44
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0A0F
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/C93xdZIpDxpCdf0xUb7IpoNAlUQ.roa
Signing time:             Sun 30 Jun 2024 01:44:19 +0000
ROA not before:           Sun 30 Jun 2024 01:44:19 +0000
ROA not after:            Tue 24 Jun 2025 10:46:45 +0000
asID:                     9605
IP address blocks:        49.105.15.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2575 (0xa0f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun 30 01:44:19 2024 GMT
            Not After : Jun 24 10:46:45 2025 GMT
        Subject: CN=0BDDF17592290F1A4275FD3151BEC8A683409544
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c6:ec:88:06:be:0d:fe:55:b1:43:23:ae:50:
                    46:65:88:6a:fe:27:c7:91:a9:86:77:04:e9:1e:3a:
                    64:19:d5:87:b1:d2:26:8e:3d:ba:94:1d:88:b3:a5:
                    34:bb:47:8c:0b:e5:af:7f:de:a1:f2:0c:3a:a3:49:
                    cc:19:eb:e6:c5:2a:7a:a2:80:69:42:f4:ec:ba:06:
                    40:24:11:25:d7:2d:5b:e7:8e:a9:a5:54:22:82:ff:
                    2a:cd:e1:da:fa:c7:51:11:73:1c:9e:00:9e:b9:c4:
                    72:23:c8:1b:9c:1f:db:20:1f:b5:82:15:91:56:9b:
                    4c:63:3e:38:0f:2b:56:20:61:08:87:c2:90:35:47:
                    f9:6a:ed:18:94:15:bb:b5:db:9b:53:da:7a:8b:04:
                    01:0d:8f:de:76:8b:2d:e9:a6:79:29:6e:d6:13:5e:
                    d6:cb:65:4f:3b:b1:4d:a6:f1:c7:80:f5:70:6a:53:
                    b9:11:ae:db:d2:17:07:6b:1c:ba:34:38:d0:50:a1:
                    18:9d:5b:39:1b:95:e9:6b:4a:d5:29:71:46:23:f8:
                    69:4b:73:bb:8c:fb:d4:f0:ff:d2:07:0a:8d:93:b3:
                    a8:6e:fc:13:3e:49:89:ac:13:31:aa:a3:b7:07:e6:
                    9e:7d:4c:33:ea:7c:3a:5b:51:15:9c:c6:57:87:1d:
                    78:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:DD:F1:75:92:29:0F:1A:42:75:FD:31:51:BE:C8:A6:83:40:95:44
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/C93xdZIpDxpCdf0xUb7IpoNAlUQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.105.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d3:fe:f0:ff:1c:2c:55:cf:73:65:dd:9c:5a:d3:7e:eb:fd:f3:
         2b:98:51:f2:c3:8f:67:3d:33:03:e5:65:59:34:5b:0a:4d:16:
         d0:51:54:07:73:c0:98:e8:7b:8a:ae:21:17:db:eb:c9:1e:98:
         83:5a:d5:34:dc:05:42:8b:9c:0b:1d:56:95:65:35:be:97:83:
         dd:e8:43:a7:d0:cd:28:9a:6a:33:51:13:73:7e:d5:84:5a:05:
         a4:af:dc:60:af:6e:76:8e:01:b1:67:e3:c2:f6:0d:53:3e:bc:
         82:38:9e:05:36:d9:f5:07:81:09:23:5a:e7:c3:79:53:0f:32:
         e4:6b:a8:fc:42:94:c7:de:1b:e0:37:77:f1:79:c4:19:80:73:
         94:e5:ba:91:d3:81:80:d8:2e:a8:34:fd:ba:d9:21:a9:ab:2e:
         46:b0:49:f0:db:fc:ec:a3:ff:67:5d:e9:ec:18:49:26:0a:63:
         e4:89:19:5d:4d:67:2a:d7:1f:e6:f1:fe:c2:5d:91:40:95:b5:
         a6:65:cf:6b:00:7f:f3:28:85:7e:37:25:4f:68:86:5a:03:23:
         18:3b:d8:3d:30:d1:91:38:0f:e6:65:d5:14:33:9e:fb:d0:36:
         14:64:5f:74:48:21:bd:cf:ad:fc:36:5d:d7:fc:0c:56:db:cf:
         cf:28:0e:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:54:40 2024 by rpki-client on console-ams.rpki-client.org