Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/DmY-5POQIbLh6dVN60J7J9YOd3k.roa
File:                     DmY-5POQIbLh6dVN60J7J9YOd3k.roa (raw, json)
Hash identifier:          yXDCN0FHuyFq0RPD29udU+4DShRKToLMRY+s7Zi9Fys=
Subject key identifier:   0E:66:3E:E4:F3:90:21:B2:E1:E9:D5:4D:EB:42:7B:27:D6:0E:77:79
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0802
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/DmY-5POQIbLh6dVN60J7J9YOd3k.roa
Signing time:             Tue 30 Apr 2024 02:12:20 +0000
ROA not before:           Tue 30 Apr 2024 02:12:20 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        49.98.64.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 12:58:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2050 (0x802)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr 30 02:12:20 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=0E663EE4F39021B2E1E9D54DEB427B27D60E7779
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:b9:b9:c5:1b:03:c8:ac:3d:be:a5:55:c5:8e:
                    70:b1:7c:13:29:7c:aa:6c:b9:a9:7f:e8:d5:c5:d4:
                    a0:53:1e:72:81:92:cf:e9:8b:9f:ac:1e:6d:35:a2:
                    5b:dd:4d:b1:7f:e6:70:91:6a:ff:81:d8:62:c8:66:
                    83:e9:8e:8f:b2:2b:ff:df:af:b1:53:69:d2:ad:86:
                    57:76:6e:e5:38:51:b7:dd:7f:20:56:b7:32:bc:3d:
                    18:55:aa:af:5c:c2:f5:ec:a9:60:e2:34:a4:30:77:
                    be:2f:7a:14:57:b8:7f:cf:3c:d8:91:35:3b:51:b3:
                    3c:4d:78:6e:e6:ce:1f:27:78:f3:10:d8:2a:a8:ff:
                    35:a7:22:09:47:24:9e:97:dd:d2:10:d7:e5:e6:65:
                    f5:53:05:b1:e2:af:dc:2b:70:6d:b5:26:de:e6:5c:
                    e5:10:0d:52:98:a2:e3:33:4d:ae:63:05:3f:4f:ab:
                    d8:80:af:2a:3e:93:49:25:e5:a2:51:12:b0:a8:4e:
                    0f:c6:7d:89:90:7b:02:10:37:10:f5:ca:06:7d:43:
                    c2:1b:7d:f4:fb:f7:84:87:40:11:fd:7e:9e:35:5d:
                    41:5e:f7:46:4b:89:08:47:b8:f5:d4:7a:79:f5:e2:
                    de:12:3c:f4:3c:ee:02:8d:c5:58:db:b6:a4:b4:7e:
                    7f:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:66:3E:E4:F3:90:21:B2:E1:E9:D5:4D:EB:42:7B:27:D6:0E:77:79
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/DmY-5POQIbLh6dVN60J7J9YOd3k.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.98.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9e:1e:36:28:fc:1c:a3:22:96:ed:6c:e8:9e:63:79:19:f2:94:
         00:db:4d:3c:d2:99:f4:88:c4:73:83:c2:09:09:7c:87:ab:4a:
         02:99:3e:ac:77:61:1a:ac:cc:1a:25:b3:cf:6e:ea:8f:63:8b:
         2e:a5:1d:67:7f:9d:74:f7:16:c5:c5:78:1f:ee:4c:f7:eb:c0:
         f8:33:f3:cf:ac:4e:a3:01:ef:30:1f:f9:62:6b:ad:e6:ab:48:
         ed:4a:c1:11:36:9a:2b:8f:f6:55:56:81:37:40:30:ad:7c:1e:
         f4:3f:54:b9:ca:ba:26:9f:84:62:cd:35:c4:44:16:fa:20:c5:
         2b:8c:d5:81:3c:33:c5:e3:37:02:87:cd:73:57:2b:12:92:22:
         80:7d:fa:8c:f1:1b:1c:2c:95:ca:92:93:8a:0d:61:58:bc:5e:
         39:0a:ec:06:60:07:69:5a:ef:5d:9e:85:bb:ec:44:36:80:ff:
         5d:e3:6f:6a:ae:32:6a:32:8a:7b:ad:28:15:ff:33:56:90:01:
         7b:46:5b:b6:5f:4a:87:db:2c:67:03:54:6f:d8:ce:28:c2:0e:
         e1:b0:49:2b:3a:ad:dc:be:b2:91:22:c9:c9:da:a6:f3:99:98:
         76:21:2f:fd:4d:6f:55:8f:0d:3e:a7:37:d8:5f:0a:a9:c2:a5:
         d5:cb:df:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:21:19 2024 by rpki-client on console-ams.rpki-client.org