Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/JjR6i4hP7nFJ2RKnlkpCXnCpgEg.roa
File:                     JjR6i4hP7nFJ2RKnlkpCXnCpgEg.roa (raw, json)
Hash identifier:          OnF1nc5nHOf2wwWMN/BhVMcVHxpbsL0sayl9Xsxwt8E=
Subject key identifier:   26:34:7A:8B:88:4F:EE:71:49:D9:12:A7:96:4A:42:5E:70:A9:80:48
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0586
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/JjR6i4hP7nFJ2RKnlkpCXnCpgEg.roa
Signing time:             Thu 27 Jul 2023 16:58:13 +0000
ROA not before:           Thu 27 Jul 2023 16:58:13 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     9605
IP address blocks:        49.103.28.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1414 (0x586)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jul 27 16:58:13 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=26347A8B884FEE7149D912A7964A425E70A98048
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:69:bf:91:66:8e:93:1e:f3:6b:26:df:ae:66:
                    d0:44:f4:88:00:1f:b5:f3:21:c1:5a:b1:0d:e1:d4:
                    e8:32:32:33:b4:e7:78:3f:61:cd:5a:b7:38:f3:49:
                    a5:8c:5a:d8:67:9b:a8:74:f9:9d:da:6c:6b:8e:5c:
                    80:4b:78:61:b5:12:0b:97:f0:50:c7:a0:da:dc:07:
                    f7:3d:22:cc:58:8a:02:b1:4e:5b:75:d5:90:94:d2:
                    ac:73:23:eb:61:a1:07:b7:80:55:65:9a:16:40:e6:
                    be:c8:09:22:7b:be:10:5a:39:64:0a:07:50:94:c7:
                    ff:ef:80:74:92:d0:98:de:53:e7:74:ca:9c:8b:2f:
                    ce:14:4a:c4:74:a6:b7:30:ee:a3:f7:75:97:42:cb:
                    05:c3:2c:ec:2a:6f:1c:69:8b:36:81:bb:8c:ba:dc:
                    00:eb:10:95:8b:0c:27:20:97:80:43:c2:36:c5:30:
                    04:e7:67:54:8f:61:87:d5:c6:85:ee:dc:a6:7d:09:
                    a0:aa:06:f9:89:3a:57:92:fc:88:8d:49:78:3f:4d:
                    41:7a:ac:7e:88:c4:77:2d:62:2d:3d:d0:05:ca:d4:
                    85:91:16:20:3a:ff:35:52:3a:36:39:cc:0f:39:1d:
                    44:d9:29:c1:a8:99:39:19:6b:e6:23:61:f2:d4:00:
                    e8:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:34:7A:8B:88:4F:EE:71:49:D9:12:A7:96:4A:42:5E:70:A9:80:48
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/JjR6i4hP7nFJ2RKnlkpCXnCpgEg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.103.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d2:eb:ea:8a:4f:62:27:a3:0e:3a:ff:47:52:bd:5d:5c:73:6a:
         8a:36:8e:34:90:4a:18:d2:5e:84:13:ea:0e:34:ac:e8:53:9d:
         24:29:85:16:ef:5a:07:6a:d1:a5:c2:48:a9:17:c6:47:40:f8:
         d6:ab:5a:3b:84:7f:54:46:86:21:ab:83:c4:9b:76:d4:35:a6:
         fa:e4:e1:8b:ed:14:17:d0:1e:fc:11:70:71:57:a1:f5:a6:60:
         9e:3d:88:6f:84:f0:17:92:f5:e7:d7:b4:2c:0c:27:20:b9:d7:
         da:f0:46:bc:d7:ef:fb:27:57:d0:b7:cb:96:42:ae:a6:e2:48:
         c9:23:a3:ef:c2:98:56:d5:7a:a0:ca:85:23:19:49:c6:90:e4:
         1b:de:12:ad:59:cb:18:e8:c4:aa:2f:f1:7b:29:0b:5a:37:d7:
         94:02:cf:91:34:cf:8f:2f:04:e7:83:80:c1:cf:d7:d9:5b:b4:
         14:c6:32:32:eb:3b:83:65:e3:f0:92:45:62:8a:ec:d2:70:d6:
         c1:6b:82:e7:1c:a2:0a:b5:96:42:d1:c4:40:45:c6:df:93:43:
         b2:bb:38:e5:51:ae:0f:d0:86:00:25:23:7e:2f:d5:7d:22:bd:
         be:7c:e1:bd:e1:9f:b6:f3:a2:c2:1b:e8:c6:88:17:a1:8a:86:
         d5:72:3e:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 15:54:30 2024 by rpki-client on console-ams.rpki-client.org