Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/F7YagsvqS6DL0doE67XsX_Sfre0.roa
File:                     F7YagsvqS6DL0doE67XsX_Sfre0.roa (raw, json)
Hash identifier:          6o+buUB70MRATLd6iTJsH0IZ3YsJmATuPqM/LdY1LAM=
Subject key identifier:   17:B6:1A:82:CB:EA:4B:A0:CB:D1:DA:04:EB:B5:EC:5F:F4:9F:AD:ED
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0739
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/F7YagsvqS6DL0doE67XsX_Sfre0.roa
Signing time:             Tue 30 Apr 2024 01:58:43 +0000
ROA not before:           Tue 30 Apr 2024 01:58:43 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        49.98.208.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1849 (0x739)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr 30 01:58:43 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=17B61A82CBEA4BA0CBD1DA04EBB5EC5FF49FADED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:65:0a:37:a0:13:05:c4:e3:26:46:74:46:e2:
                    68:42:27:a7:96:e3:6c:bd:72:5f:6c:53:e4:f4:67:
                    5e:f9:8a:d6:96:34:49:a1:06:3e:ef:a9:bb:e2:15:
                    f6:74:b2:88:4d:e8:e3:56:78:96:c0:b4:17:a9:47:
                    5b:ff:bf:34:c0:31:0e:b7:13:07:95:39:a1:31:9f:
                    1c:ae:72:51:63:b5:7d:9b:ae:ef:76:4e:e3:e5:2e:
                    bf:a3:16:21:b2:44:73:64:e4:4d:3a:c6:75:ba:47:
                    3e:77:5f:b1:7f:38:ec:1e:95:79:23:1a:eb:da:b2:
                    ec:1e:a4:6c:71:9a:5b:cf:ec:a5:d2:a5:c1:b4:89:
                    ed:ab:7d:52:39:15:e3:4c:84:0f:a1:7a:76:24:a6:
                    46:f0:cb:3f:dc:0b:3f:d6:1e:ab:a2:c0:e6:ed:ce:
                    34:59:66:82:ae:7a:22:f5:d9:d9:de:28:7a:e1:2d:
                    80:84:f5:69:dd:42:86:d9:6b:81:96:18:22:cd:27:
                    9c:3a:60:d5:4c:7e:49:6c:fb:f2:f6:fa:f7:63:9b:
                    22:00:51:d1:7a:b9:00:05:14:74:b3:04:8b:46:4d:
                    b2:31:ab:a6:d3:44:63:de:75:f3:f3:b5:33:ca:b6:
                    64:77:04:46:15:3d:9c:43:f5:f9:82:b5:bf:0e:f5:
                    09:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:B6:1A:82:CB:EA:4B:A0:CB:D1:DA:04:EB:B5:EC:5F:F4:9F:AD:ED
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/F7YagsvqS6DL0doE67XsX_Sfre0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.98.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         64:df:9f:55:e4:77:13:e0:b5:19:8b:c8:a6:61:68:61:ca:20:
         9a:8e:98:dc:1f:a9:c6:6b:d6:08:d4:48:f1:73:fd:6c:03:c4:
         8f:ad:5a:29:b2:81:64:d6:01:4d:8b:26:7a:50:93:0b:7d:48:
         bd:f1:d3:90:cd:3e:49:6f:2a:22:49:cb:37:ff:d1:74:1d:29:
         f7:b0:39:55:8f:94:de:62:4d:fd:e7:9a:68:30:4d:8b:f7:40:
         08:b4:db:b8:3a:fa:ed:4e:b1:d5:ed:aa:b6:f4:e3:95:ee:c8:
         df:2e:37:c5:1e:f2:7f:c0:fb:d3:4c:ea:f5:7c:b1:d4:6a:ac:
         d2:a9:da:af:5d:82:03:d7:1e:e2:2e:0a:24:ec:59:d2:28:d0:
         e0:f9:40:c1:45:1b:30:80:26:28:21:06:88:07:e6:ff:ca:43:
         8d:1b:5b:4e:16:f0:1b:b8:ac:68:ab:f9:e2:07:8f:e7:5e:72:
         d9:a0:b7:8d:2a:09:c6:be:15:3b:f0:a6:6f:6a:44:d8:a4:94:
         18:ba:da:1f:5f:a7:83:a4:c4:52:57:55:e4:16:37:77:75:2b:
         30:9b:2f:72:a5:08:a6:c3:97:a3:e8:02:47:e6:f3:41:90:60:
         fb:8a:47:84:4e:5d:ce:97:60:b3:1c:19:5e:78:6b:0e:3e:71:
         b0:93:1a:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:59:10 2024 by rpki-client on console-fra.rpki-client.org