Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/MOSZlI7Za6dPOQEspBeiFxpzc7c.roa
File:                     MOSZlI7Za6dPOQEspBeiFxpzc7c.roa (raw, json)
Hash identifier:          IZjdkzUcT81XOcIYKyTWQmAElxplVc+FD1yKYdd4nbM=
Subject key identifier:   30:E4:99:94:8E:D9:6B:A7:4F:39:01:2C:A4:17:A2:17:1A:73:73:B7
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       097E
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/MOSZlI7Za6dPOQEspBeiFxpzc7c.roa
Signing time:             Sun 30 Jun 2024 01:36:19 +0000
ROA not before:           Sun 30 Jun 2024 01:36:19 +0000
ROA not after:            Tue 24 Jun 2025 10:46:45 +0000
asID:                     9605
IP address blocks:        49.106.240.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2430 (0x97e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun 30 01:36:19 2024 GMT
            Not After : Jun 24 10:46:45 2025 GMT
        Subject: CN=30E499948ED96BA74F39012CA417A2171A7373B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:9b:16:6a:70:ec:56:7c:7a:54:ed:af:e4:55:
                    03:7f:5e:71:fd:05:c4:54:65:ce:64:8e:32:a1:f8:
                    45:7b:0b:0f:07:fd:c4:f2:c6:51:0d:12:bc:8f:9e:
                    a3:2b:4f:79:ee:8f:73:0b:cc:7a:81:d7:d9:5a:82:
                    aa:9a:3f:80:b8:ee:41:f7:b1:d3:97:ce:01:76:1e:
                    fd:9f:cf:ae:d9:3f:05:ab:11:d0:cf:3c:10:88:33:
                    24:c5:06:8f:9e:2b:5e:e4:f8:63:ed:fe:19:69:a8:
                    51:74:cf:b3:44:5f:98:3f:91:61:bd:d9:ef:3e:0d:
                    e1:4a:0b:7d:01:eb:e5:19:17:04:de:71:47:61:38:
                    d4:2e:aa:84:9d:cc:7e:48:68:88:b8:e9:bf:5f:ad:
                    6c:49:b2:dc:52:00:b5:30:b2:2d:cb:85:ac:68:1b:
                    62:45:71:09:4b:99:09:c9:d3:a1:06:fd:ce:bd:d8:
                    4c:e6:9f:00:d3:7f:6f:2d:49:54:c4:36:13:19:06:
                    22:c5:6e:56:7e:78:b2:1f:6f:06:4e:57:d7:8f:dc:
                    f7:de:68:6a:c6:44:2d:f8:c0:59:6a:7a:b5:69:7f:
                    66:46:1b:a3:5e:b1:e2:60:68:9b:aa:11:32:68:a6:
                    d0:3d:76:08:f5:99:2e:4e:9e:20:f8:c2:04:01:da:
                    78:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:E4:99:94:8E:D9:6B:A7:4F:39:01:2C:A4:17:A2:17:1A:73:73:B7
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/MOSZlI7Za6dPOQEspBeiFxpzc7c.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.106.240.0/21

    Signature Algorithm: sha256WithRSAEncryption
         e4:e3:86:13:bd:b9:1f:69:ad:70:a7:e6:2b:41:aa:1e:db:7b:
         2a:7b:08:4f:cc:c8:46:52:36:49:8c:1f:61:f9:66:f3:64:ef:
         af:df:cc:04:5c:d9:16:14:a5:cc:13:6e:41:de:c8:a9:d0:06:
         53:35:9a:d3:28:fa:a0:4d:2d:12:8e:b5:25:cc:11:8f:e3:77:
         20:17:f4:80:53:8c:27:4b:04:9e:df:e0:b6:92:92:6a:fc:44:
         21:e6:6c:9e:a3:67:3e:5f:a1:bd:d0:24:95:8d:18:41:94:81:
         d8:39:b1:01:b2:ed:67:41:c2:0d:c9:05:0a:3b:a8:ff:51:80:
         a3:1b:de:a1:17:5c:de:c9:88:62:af:6c:cf:24:c7:72:5b:93:
         c4:2b:d4:80:ed:62:7b:0f:c1:9a:80:99:f9:63:d6:92:41:8d:
         f9:f3:7a:a2:bd:78:e9:6a:b6:5c:56:31:7b:cb:4e:f0:f8:26:
         c6:6a:3a:22:72:4d:5c:46:64:31:9a:8a:e3:5b:72:fd:85:0b:
         3c:86:c6:d5:0e:0f:5d:7a:65:9d:e9:45:1d:97:81:53:39:31:
         44:41:d5:3b:bf:a1:a4:06:74:a3:fe:32:e1:34:b9:a1:70:bd:
         64:e3:96:59:53:91:03:32:23:12:4c:42:70:65:18:70:cd:98:
         27:7f:6a:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:19:14 2025 by rpki-client