Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/DpbuE3V42jLPN8ogDdWmqmN5MFU.roa
File:                     DpbuE3V42jLPN8ogDdWmqmN5MFU.roa (raw, json)
Hash identifier:          6R4ZJL/gZIG3uRuwZqD7QVDsRPy9z/UdqWfEJuVCgJE=
Subject key identifier:   0E:96:EE:13:75:78:DA:32:CF:37:CA:20:0D:D5:A6:AA:63:79:30:55
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       064E
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/DpbuE3V42jLPN8ogDdWmqmN5MFU.roa
Signing time:             Tue 30 Apr 2024 01:31:32 +0000
ROA not before:           Tue 30 Apr 2024 01:31:32 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        49.110.124.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1614 (0x64e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr 30 01:31:32 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=0E96EE137578DA32CF37CA200DD5A6AA63793055
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e1:4f:1c:a2:22:58:ca:14:3a:1b:34:7f:06:
                    3b:31:27:48:6c:36:65:b3:b8:95:93:68:38:25:8b:
                    ab:f7:1f:42:67:30:fe:b9:a1:40:f2:7e:1c:cb:69:
                    39:f4:2d:96:19:7d:b3:18:9f:52:e1:10:05:e8:ab:
                    c0:09:84:fb:32:30:a4:4e:5c:88:45:72:0b:48:8f:
                    c6:a1:1b:e1:21:9f:58:d7:c8:07:e8:f9:40:8b:5d:
                    41:03:6b:01:82:42:a8:c4:ea:21:99:e1:df:8b:91:
                    4b:dc:ee:48:f4:72:7a:5f:57:e6:90:6a:11:49:ec:
                    f0:a9:f2:a8:c2:ef:81:cc:df:cd:44:bf:e0:d8:ac:
                    f5:a9:d8:9a:0f:c3:0c:b9:41:0d:dd:90:33:fd:84:
                    fe:63:ec:02:a3:17:d4:bf:21:de:b8:3c:64:94:2f:
                    55:47:e9:34:87:3a:0c:0b:5b:76:68:c4:36:96:8b:
                    39:e7:93:6f:42:f1:b0:7b:b0:00:19:6a:f7:3a:13:
                    be:5c:22:11:37:c0:fe:b3:f5:12:6c:75:f0:43:23:
                    5d:41:35:89:fb:20:81:46:d0:24:f9:36:40:cb:12:
                    e6:15:03:76:30:9f:74:52:20:dc:30:f2:36:68:1e:
                    3f:e6:a0:02:c7:c0:2b:99:d1:29:8a:1e:7e:87:4a:
                    93:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:96:EE:13:75:78:DA:32:CF:37:CA:20:0D:D5:A6:AA:63:79:30:55
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/DpbuE3V42jLPN8ogDdWmqmN5MFU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.110.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6c:de:43:5d:30:1c:d8:65:df:e0:6e:fd:17:e9:d9:9b:26:72:
         a5:f9:0f:21:47:f6:d2:db:f1:82:1a:ff:42:95:fd:47:bb:3a:
         1c:18:26:df:95:f4:47:3a:24:5b:38:26:be:0e:c3:92:4f:0c:
         06:07:04:67:22:79:bc:d0:c5:4e:c3:7b:5c:b6:e0:31:87:ff:
         e0:91:37:03:ff:98:67:4d:79:31:16:48:9f:f7:1e:6b:d0:58:
         69:75:f2:74:a7:e1:0d:66:6e:6d:01:1b:4c:e3:ee:d8:cb:4d:
         79:32:82:64:98:59:f1:2d:52:be:cd:92:ca:b8:0a:be:b8:6d:
         b8:8e:e6:8e:c0:b1:5b:f8:03:8a:d3:53:06:be:af:71:bf:a1:
         fb:e9:54:05:d6:60:ba:52:67:b0:02:83:08:a7:c7:67:af:e6:
         31:53:fd:16:c1:b9:26:57:5f:c5:91:31:ff:2c:1e:d9:38:93:
         9b:5a:d0:55:aa:c9:43:d8:da:c0:f1:da:54:f3:97:96:44:a9:
         c3:a4:62:ec:67:a1:0a:57:ea:64:8e:7f:e0:c4:54:df:2e:55:
         e1:96:f5:60:c5:6c:c4:ac:bc:88:27:e4:6c:66:eb:eb:64:21:
         a8:f1:62:c6:d0:d6:47:b2:2e:f1:70:ba:3b:67:6f:8f:1a:77:
         c4:19:4a:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:54:40 2024 by rpki-client on console-ams.rpki-client.org