Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/EzMeheV5qgtMZ_dX1cQ1dtargEw.roa
File:                     EzMeheV5qgtMZ_dX1cQ1dtargEw.roa (raw, json)
Hash identifier:          XFPRhMQ3zcdsaVWDK0Stua4DpU+SJeWBGq4kIllv5S4=
Subject key identifier:   13:33:1E:85:E5:79:AA:0B:4C:67:F7:57:D5:C4:35:76:D6:AB:80:4C
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0789
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/EzMeheV5qgtMZ_dX1cQ1dtargEw.roa
Signing time:             Tue 30 Apr 2024 02:04:44 +0000
ROA not before:           Tue 30 Apr 2024 02:04:44 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        49.104.72.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:41:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1929 (0x789)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr 30 02:04:44 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=13331E85E579AA0B4C67F757D5C43576D6AB804C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:94:9a:ab:c5:16:04:da:1e:ce:5e:6e:23:78:
                    34:4a:9b:5d:19:1f:57:66:51:b6:32:df:4d:3e:c0:
                    35:f4:6d:4e:7d:b1:5e:ef:33:03:4f:d1:03:41:db:
                    f9:4b:92:19:65:3d:17:36:25:e7:0b:df:4f:f7:43:
                    38:a0:f4:3d:08:ee:38:07:74:f6:70:f3:b9:ef:58:
                    62:dc:d5:4d:31:3e:f4:21:b6:14:73:57:f0:c0:d0:
                    73:c6:1e:84:ff:bd:0a:99:d9:97:b3:8c:5b:49:f6:
                    7c:d1:4c:5e:17:92:df:70:79:d5:6c:73:27:e4:e0:
                    fe:be:2b:bc:af:df:30:33:40:af:1e:82:8d:0b:14:
                    1a:f8:6a:66:57:7f:c4:c5:c9:c2:24:5b:70:4a:ee:
                    99:74:58:62:c6:a4:38:d2:c7:4b:2d:4b:56:3c:b1:
                    38:d5:a9:42:47:d6:d8:d9:7c:ec:f9:15:41:60:14:
                    26:8f:56:39:d9:e1:84:13:e3:6d:43:e8:f7:aa:7e:
                    63:a1:f1:c7:2c:8c:bc:ad:4e:be:56:73:0b:2c:26:
                    76:ea:94:ef:e8:fb:e9:88:25:db:21:86:aa:a7:d4:
                    68:7f:30:53:4e:35:7b:94:8f:4a:cd:eb:0b:71:50:
                    2d:d5:27:8a:92:38:2e:bb:64:3d:a9:df:99:26:2f:
                    0e:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:33:1E:85:E5:79:AA:0B:4C:67:F7:57:D5:C4:35:76:D6:AB:80:4C
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/EzMeheV5qgtMZ_dX1cQ1dtargEw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.104.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         db:97:23:1d:9c:3f:89:d4:2d:d0:dd:05:b5:81:f7:54:d5:27:
         05:db:6f:9d:e2:f0:9f:f3:27:11:9c:bf:6f:3e:2f:ed:fc:5e:
         60:7e:23:b0:85:8c:7b:cf:e0:85:af:fc:bc:b0:4e:06:a7:b9:
         10:2a:25:da:c6:9e:4c:e9:5c:38:b1:84:2e:2f:a9:74:e4:8f:
         4b:a8:99:3c:f4:06:15:c0:f2:18:38:9a:e2:b2:c4:c0:e3:3a:
         b4:a5:77:fa:a0:ca:8d:89:c9:51:ce:6d:f7:01:96:57:fe:2e:
         66:fd:a6:44:72:37:a4:e4:10:40:e0:d7:0c:0d:83:92:1a:9e:
         21:6f:05:f7:57:46:f8:ff:60:ee:df:b9:10:83:14:5c:9a:6e:
         67:12:b9:ae:1c:52:59:65:1e:2d:82:06:74:1d:08:36:b4:cd:
         5a:8e:fb:97:d0:c3:05:fe:18:8a:b5:66:d3:6f:91:a0:0d:81:
         f3:d8:f0:59:98:e2:23:56:f1:f1:db:71:fb:f8:eb:1b:7b:5f:
         89:6c:e1:41:30:75:7a:7e:b8:94:c2:30:8e:d1:ef:19:80:3a:
         15:1c:3b:18:bb:64:17:96:28:a1:19:51:2e:7d:5e:b4:e5:86:
         12:8a:78:14:b4:a0:c2:45:6f:4a:c2:66:e9:c8:bf:60:8a:29:
         b6:8b:fa:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:23:59 2024 by rpki-client on console-fra.rpki-client.org