Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/IVbkMOpLJiuJt-3tQ6OzNTT0bxc.roa
File:                     IVbkMOpLJiuJt-3tQ6OzNTT0bxc.roa (raw, json)
Hash identifier:          F4kVw4afsxhp1cQItr2x5zGZar+EHvB5aoauRviL214=
Subject key identifier:   21:56:E4:30:EA:4B:26:2B:89:B7:ED:ED:43:A3:B3:35:34:F4:6F:17
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       06AB
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/IVbkMOpLJiuJt-3tQ6OzNTT0bxc.roa
Signing time:             Tue 30 Apr 2024 01:43:19 +0000
ROA not before:           Tue 30 Apr 2024 01:43:19 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        49.98.192.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1707 (0x6ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr 30 01:43:19 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=2156E430EA4B262B89B7EDED43A3B33534F46F17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:32:17:15:13:bb:ef:10:9e:f4:2b:47:63:b5:
                    da:49:36:45:2c:ee:b0:f4:2e:2a:f1:c6:38:c5:28:
                    8a:d8:42:88:db:d7:82:a8:7b:b1:5f:6d:11:e0:69:
                    08:c6:11:0c:f0:23:19:15:e1:ad:ba:ed:0a:25:0b:
                    8a:93:59:1d:75:fc:72:03:81:43:48:a8:10:1c:27:
                    46:e0:93:55:a0:a1:b0:76:7e:2b:14:dd:3f:6c:2b:
                    6b:bb:6f:41:8a:9f:c9:18:e6:2e:ca:13:5e:1c:e5:
                    21:31:a4:8c:c4:bf:a6:7e:d8:37:f7:9b:e2:9f:c9:
                    bd:f5:5f:44:ab:40:07:d6:e3:f3:30:d6:3c:dd:01:
                    af:c2:7a:40:83:00:18:45:2c:af:21:30:1a:fc:10:
                    b4:a9:b8:5b:28:30:98:cf:62:84:f5:9e:ca:28:23:
                    4d:46:b9:66:26:6e:fe:55:da:66:15:d8:81:b9:4e:
                    8a:a2:03:67:5c:da:91:36:e5:c4:3d:7d:49:59:a4:
                    e4:1d:c4:0f:a7:b9:44:d5:b6:ae:be:49:92:e5:16:
                    1b:b4:cd:77:14:bf:61:4a:3c:08:01:fd:ab:f5:56:
                    33:d6:ec:d8:01:82:b2:b6:fc:e7:34:40:fd:65:de:
                    6b:40:8c:0a:49:7c:ef:aa:c3:71:1f:7f:4a:0b:eb:
                    f6:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:56:E4:30:EA:4B:26:2B:89:B7:ED:ED:43:A3:B3:35:34:F4:6F:17
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/IVbkMOpLJiuJt-3tQ6OzNTT0bxc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.98.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         10:ce:5d:6c:b9:8b:0c:6e:69:56:ba:22:39:8c:d7:6c:b8:cc:
         0b:13:de:8d:a4:47:e5:51:22:de:60:0f:26:17:76:1a:68:35:
         17:4b:18:47:9d:f0:41:b1:11:93:64:16:c5:97:da:54:23:c9:
         30:bd:31:da:98:24:5d:75:bb:6b:6b:cd:25:a8:ae:19:1c:1d:
         84:e0:77:8c:f0:fc:1e:8e:79:e6:2e:57:db:13:23:2a:46:50:
         76:e0:d4:9e:04:c2:3b:cc:5b:e5:1d:c7:06:c0:be:ea:ce:7b:
         65:8a:81:01:1a:f2:41:dc:4c:13:ea:ab:8e:4d:08:cd:1c:07:
         1e:42:65:85:92:57:24:09:a9:b5:1f:e4:ed:db:67:40:b0:9b:
         93:65:79:51:4a:07:de:78:52:4f:84:f5:e8:01:9a:aa:90:26:
         67:31:19:0b:81:bc:4a:86:a5:6d:65:32:60:e5:23:54:8e:71:
         d9:b3:65:62:af:e4:1f:56:77:2b:66:d2:76:a0:de:a6:43:f3:
         8c:3f:95:88:6b:2f:1b:dd:73:ef:6e:d4:2f:19:eb:52:aa:6b:
         ad:a6:84:5c:dd:f2:f2:17:a2:09:aa:55:50:93:14:e7:35:7f:
         cc:55:17:a8:27:47:a6:84:bf:de:b6:a8:50:26:8a:63:74:ff:
         93:fb:11:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:54:41 2024 by rpki-client on console-ams.rpki-client.org