Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/HfVyROokKTKkqRifWtfh3Pqaews.roa
File:                     HfVyROokKTKkqRifWtfh3Pqaews.roa (raw, json)
Hash identifier:          XSrUdAF16KJb2//FRI7IUq+K48rzxCQiJ1D9Z1hN480=
Subject key identifier:   1D:F5:72:44:EA:24:29:32:A4:A9:18:9F:5A:D7:E1:DC:FA:9A:7B:0B
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       07D9
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/HfVyROokKTKkqRifWtfh3Pqaews.roa
Signing time:             Tue 30 Apr 2024 02:08:56 +0000
ROA not before:           Tue 30 Apr 2024 02:08:56 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        49.104.47.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 23 Jun 2024 11:53:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2009 (0x7d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr 30 02:08:56 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=1DF57244EA242932A4A9189F5AD7E1DCFA9A7B0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:53:b5:47:9e:ca:3c:d6:01:19:8e:f5:f2:05:
                    09:2e:2a:f2:fa:8a:cb:5f:e0:9b:b9:2f:1a:90:64:
                    06:6f:78:f6:e1:cc:48:eb:dc:d9:c2:e6:b1:81:d2:
                    f5:16:be:49:4d:0f:5f:29:9a:2b:33:f2:52:3e:da:
                    ed:01:1e:20:27:5c:2e:43:fe:f7:da:e7:d2:a2:7b:
                    07:6d:ae:41:6f:f3:3c:fb:2e:54:d0:2a:a0:f3:a7:
                    92:06:0d:a9:ce:ed:50:62:c7:32:16:9d:f8:d3:87:
                    8c:ce:9d:c7:aa:0f:65:e3:42:37:2f:6e:54:f5:a7:
                    ee:85:cc:ff:e1:58:bd:51:f5:b1:aa:f5:dd:10:93:
                    23:d6:d7:b3:fb:01:66:ea:7d:8e:ea:eb:04:3d:44:
                    9a:f4:29:43:02:ef:bb:97:3e:2e:5b:a0:54:3f:40:
                    32:e8:58:5a:18:fa:15:6c:c2:42:cb:14:e2:f0:40:
                    fd:4f:cc:c1:dc:08:ac:ed:d5:51:dc:7e:e4:c3:2a:
                    25:51:78:a9:6d:4e:8e:b6:23:7e:72:86:ff:b5:e2:
                    83:42:53:ee:5d:f4:69:c4:cc:fe:48:f9:51:74:ab:
                    92:d3:22:f2:27:46:53:ab:1e:ee:cb:e6:d6:f5:f7:
                    5a:cc:3c:65:d3:2d:2c:63:84:3c:89:6d:24:e8:fc:
                    fa:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:F5:72:44:EA:24:29:32:A4:A9:18:9F:5A:D7:E1:DC:FA:9A:7B:0B
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/HfVyROokKTKkqRifWtfh3Pqaews.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.104.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:54:70:dc:9b:76:2c:f3:09:df:de:e1:60:bf:da:8f:8b:86:
         24:66:1d:66:c8:75:de:4d:13:b2:16:f7:b0:3b:15:7f:00:0a:
         3f:f9:a4:0e:4c:26:3c:f0:99:80:90:dd:43:55:84:46:db:ee:
         23:2c:f4:17:c8:48:d5:80:5e:2e:eb:5c:bd:42:ba:8e:2a:d9:
         ae:50:54:0b:ef:74:20:d4:8e:63:ea:e2:c4:ed:bc:2e:79:eb:
         f9:e2:b5:a8:d9:07:0c:d1:1c:d1:12:81:f6:75:36:43:e1:36:
         3a:c9:e9:64:3b:dd:c6:18:a3:4a:23:d1:0d:05:7f:30:cd:fe:
         01:87:56:2e:64:81:5d:be:25:90:7e:ae:b4:e4:ad:0b:60:db:
         b8:8f:16:06:7d:51:7e:94:81:93:45:f6:fc:15:e6:3f:e3:bb:
         3b:e8:dd:71:fe:cf:d1:0b:49:ef:cb:ff:d9:86:e1:73:05:2f:
         7b:05:3a:76:a2:4d:f4:a7:59:51:7c:18:58:cb:3d:4c:06:6b:
         68:27:71:77:af:0a:b3:17:61:bb:16:c6:a2:c3:c0:2b:0a:1d:
         e4:4e:0d:04:25:e1:92:91:7e:6d:14:9c:81:f8:59:1d:99:88:
         bf:2e:ae:d3:06:4b:95:50:b9:2c:18:3e:9c:46:e2:1c:74:77:
         41:b1:da:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 12:57:21 2024 by rpki-client on console-fra.rpki-client.org