Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/EatNoeTHOTdawGQ9yNSxJudCpkg.roa
File:                     EatNoeTHOTdawGQ9yNSxJudCpkg.roa (raw, json)
Hash identifier:          8FsdSaxzxQUUsjt8MRlfF/d3T4bad8Gh8D9iGbtjZAU=
Subject key identifier:   11:AB:4D:A1:E4:C7:39:37:5A:C0:64:3D:C8:D4:B1:26:E7:42:A6:48
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0626
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/EatNoeTHOTdawGQ9yNSxJudCpkg.roa
Signing time:             Thu 29 Feb 2024 01:38:37 +0000
ROA not before:           Thu 29 Feb 2024 01:38:37 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     9605
IP address blocks:        49.97.107.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:41:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1574 (0x626)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Feb 29 01:38:37 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=11AB4DA1E4C739375AC0643DC8D4B126E742A648
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:f3:fa:38:e0:c3:a9:03:69:e2:4a:d3:08:07:
                    b6:1f:d4:f5:0e:25:56:08:04:cd:3f:53:eb:b1:a9:
                    04:c6:2e:b4:85:d9:2a:fe:c2:ab:a7:22:61:14:3e:
                    23:11:1c:75:c2:c8:04:82:62:54:54:ab:e5:e5:d1:
                    33:ec:b8:a9:fb:fd:f9:bd:02:46:9e:a8:71:3b:52:
                    3f:5d:9a:dd:8b:16:de:70:5c:73:ef:58:69:39:8c:
                    75:30:e9:fa:af:e6:d4:75:0d:2b:84:83:b6:ad:25:
                    82:8e:92:44:48:6f:e0:92:1c:ca:15:8e:18:b2:f5:
                    e7:ff:34:d3:ad:0d:21:f8:37:64:85:ab:ae:2b:61:
                    57:b9:59:48:d2:9d:b3:b9:f2:fb:56:cf:44:7b:0c:
                    04:95:20:40:61:d6:f4:f3:34:76:35:3a:49:37:f5:
                    9d:c1:e9:4f:81:16:dc:1e:e2:c7:8b:2f:cb:27:72:
                    ca:59:e5:8f:a7:c8:26:91:e5:97:c5:4d:07:9c:09:
                    6c:e5:81:28:85:e6:4d:36:7a:b7:26:29:5b:a4:fb:
                    df:0a:d1:cb:03:1c:c3:c6:dd:cd:fc:65:8e:93:b6:
                    cb:a7:41:fb:d7:2e:28:80:c9:ea:1f:e4:4b:32:19:
                    f3:9a:74:72:ec:65:e1:98:70:34:de:fa:b5:4c:1e:
                    cf:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:AB:4D:A1:E4:C7:39:37:5A:C0:64:3D:C8:D4:B1:26:E7:42:A6:48
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/EatNoeTHOTdawGQ9yNSxJudCpkg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.97.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:1d:4d:6d:91:5f:4f:17:e7:8b:c9:b6:1e:60:28:c5:f7:11:
         ad:79:75:98:00:d5:0e:42:2c:23:99:0c:86:57:29:6b:72:41:
         e3:fc:2a:56:2b:c1:3c:c4:45:7f:2e:28:53:cf:52:e6:1e:5d:
         7b:2e:80:c8:58:5f:1e:75:5e:82:41:17:64:bf:b9:a9:8d:41:
         b9:55:1c:5d:60:f9:a4:92:64:6d:6a:c7:3b:63:a2:84:63:a8:
         8f:22:bb:d1:6f:72:22:6f:80:6c:7d:a7:1d:50:d4:1e:98:3a:
         b7:21:2b:70:c4:c1:98:ee:09:33:09:e2:4c:06:d3:c6:2b:6b:
         76:e9:d9:6b:b7:41:19:68:57:3f:ab:8a:8a:bf:cf:f9:40:49:
         5b:51:a4:c2:8e:a9:96:18:04:80:43:5a:af:55:a5:69:ed:e2:
         5f:ad:b3:68:d1:d7:bc:e2:04:96:43:22:db:31:ca:6d:a2:1d:
         e6:de:a9:01:fc:9c:58:1f:e2:6f:4c:88:7e:1a:1b:6a:33:d0:
         0c:36:30:f8:ec:12:0f:31:51:57:cf:75:11:35:0f:46:ea:2a:
         9e:b4:b8:75:f7:68:8f:73:3b:0f:8b:df:ad:3d:8d:ba:c9:34:
         b7:c9:b0:b8:36:f1:2a:61:20:46:ad:57:16:3a:71:46:dd:99:
         01:36:b4:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:23:59 2024 by rpki-client on console-fra.rpki-client.org