Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/JryRR1UDFcZraogMuYkitJqHnBk.roa
File:                     JryRR1UDFcZraogMuYkitJqHnBk.roa (raw, json)
Hash identifier:          w2Q5RoMrTRZv3tl6U5iD5UPDiohjrNnIvYpJkUwlb60=
Subject key identifier:   26:BC:91:47:55:03:15:C6:6B:6A:88:0C:B9:89:22:B4:9A:87:9C:19
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       07D8
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/JryRR1UDFcZraogMuYkitJqHnBk.roa
Signing time:             Tue 30 Apr 2024 02:08:55 +0000
ROA not before:           Tue 30 Apr 2024 02:08:55 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        49.98.50.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 12:58:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2008 (0x7d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr 30 02:08:55 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=26BC9147550315C66B6A880CB98922B49A879C19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:a9:a1:d9:8d:38:58:39:3b:11:85:83:bd:5b:
                    35:df:a7:0b:c5:05:20:6b:2f:8f:0b:69:be:f4:45:
                    8d:80:71:be:94:f0:18:7e:fc:06:ea:7e:5b:f6:43:
                    ac:7e:13:8f:b1:d5:e8:02:fc:a3:dd:14:68:24:10:
                    20:99:32:36:1d:07:60:d8:7d:d4:14:6b:e5:e9:96:
                    f9:14:8c:89:28:84:ef:90:6f:b3:f4:b1:3a:0a:75:
                    27:77:75:34:d4:a7:62:8a:e1:fa:61:5b:8a:93:d8:
                    e3:d2:db:36:0d:84:83:2b:48:34:d0:0a:d8:88:2b:
                    e1:8f:38:43:6b:b8:78:9f:22:da:3e:23:40:b0:ba:
                    94:0a:82:b4:b7:94:e6:af:4b:9e:53:b7:88:90:3e:
                    0c:b8:5e:49:1a:17:89:56:32:30:22:ac:79:c3:e7:
                    22:11:58:01:db:2b:65:22:55:24:dd:a5:e5:72:f7:
                    2a:3e:b9:82:94:9c:ab:e2:44:50:cb:ec:b8:8d:3b:
                    40:34:f9:bf:bc:4b:14:ed:a4:c9:2c:e9:04:23:68:
                    b2:1d:ed:d4:fc:6a:8d:f6:00:92:3c:d2:87:da:38:
                    b7:9c:f8:e2:5d:4c:32:f1:9f:a1:0b:39:05:a0:80:
                    18:e8:22:7d:67:98:fd:a3:30:26:d1:66:82:e7:3e:
                    17:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:BC:91:47:55:03:15:C6:6B:6A:88:0C:B9:89:22:B4:9A:87:9C:19
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/JryRR1UDFcZraogMuYkitJqHnBk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.98.50.0/23

    Signature Algorithm: sha256WithRSAEncryption
         16:4b:15:34:1e:57:68:7f:08:a1:56:8a:31:17:15:2c:ae:69:
         53:1b:5f:c8:cc:64:95:a9:e8:48:94:a0:40:70:1d:82:45:53:
         f2:63:1e:8a:f2:3f:52:33:85:93:22:59:aa:bf:82:19:2c:30:
         9c:61:38:7e:ef:05:be:a0:f3:66:97:da:e3:73:0c:d7:ed:0b:
         18:16:18:3e:02:d3:df:98:fd:2b:c2:f3:2f:a2:dc:30:3c:0e:
         e5:f4:50:2d:ad:87:0c:29:34:26:fe:03:65:1f:88:4f:51:12:
         a2:df:9a:49:c3:88:33:02:92:f8:3f:a6:37:4c:92:22:9d:41:
         09:21:ba:40:5e:f8:9d:20:9a:f7:60:dd:b0:c0:7c:bd:e7:c6:
         64:be:69:2a:ed:cb:09:36:8f:ed:f6:c7:49:09:2c:10:e8:21:
         27:63:1a:50:a2:57:7e:3a:2a:16:42:30:42:e2:1b:5e:30:ba:
         ad:25:85:23:30:f9:b6:45:92:da:5d:4a:6e:45:8e:7c:37:15:
         2e:49:f7:81:0f:d9:e9:93:c2:8f:67:eb:3f:81:db:0c:d5:58:
         72:fe:e1:bb:b1:a9:49:18:43:b4:2a:29:5c:c2:9f:d6:bc:5b:
         ca:f1:61:6f:30:ce:d5:38:de:b2:d3:90:89:f3:38:1f:57:ce:
         19:b5:0a:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:21:23 2024 by rpki-client on console-ams.rpki-client.org