Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/NV4jlJC6WTmFnYY_tYYoRjRqgMo.roa
File:                     NV4jlJC6WTmFnYY_tYYoRjRqgMo.roa (raw, json)
Hash identifier:          AkN8uxSlVFro/y395LvQF78olLPDeQV4k3BHW9vjQGQ=
Subject key identifier:   35:5E:23:94:90:BA:59:39:85:9D:86:3F:B5:86:28:46:34:6A:80:CA
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0769
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/NV4jlJC6WTmFnYY_tYYoRjRqgMo.roa
Signing time:             Tue 30 Apr 2024 02:01:42 +0000
ROA not before:           Tue 30 Apr 2024 02:01:42 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        49.106.212.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1897 (0x769)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr 30 02:01:42 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=355E239490BA5939859D863FB5862846346A80CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:7a:00:0e:8a:35:25:f8:2b:b5:93:33:4a:64:
                    41:16:ce:13:d3:34:0f:eb:0a:a2:8f:65:a6:30:e8:
                    39:39:83:ac:2c:1a:3f:fe:d8:1e:ef:33:1d:b3:84:
                    3d:67:8f:76:dd:86:e2:65:63:b3:46:60:bf:9c:f2:
                    ab:40:9f:62:8d:81:b0:66:82:58:01:90:c1:c0:c1:
                    37:10:63:f0:99:45:d1:35:5e:79:0f:52:69:92:2d:
                    c4:6a:48:6e:87:65:9c:10:9d:ef:e0:9b:b7:02:6e:
                    1d:1d:65:a6:5e:8c:a9:6c:93:88:d6:ad:31:d2:90:
                    cf:23:00:df:6c:10:10:d6:16:3a:61:f6:0e:c9:9e:
                    42:21:5a:61:a4:44:78:a0:fd:58:af:e5:c6:63:5b:
                    5f:13:cd:93:39:f3:44:22:e9:ad:77:9d:44:48:74:
                    98:f2:67:59:07:74:43:36:ea:4d:df:30:54:d6:21:
                    f2:22:90:5e:65:81:56:de:e6:26:e5:6a:c1:78:64:
                    c0:d5:a1:a4:aa:1c:bc:82:2d:e8:6b:d4:98:4e:03:
                    8c:ee:98:4d:c2:a2:6f:26:5a:0b:71:0c:8d:d1:72:
                    63:cd:d9:5b:f7:62:c5:f9:b0:48:62:a4:01:0a:bc:
                    c5:9c:8c:52:e5:89:86:d9:8d:97:25:df:47:8b:34:
                    76:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:5E:23:94:90:BA:59:39:85:9D:86:3F:B5:86:28:46:34:6A:80:CA
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/NV4jlJC6WTmFnYY_tYYoRjRqgMo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.106.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         db:19:9b:b2:88:be:b5:f8:cf:b2:1c:51:63:50:2d:f0:b3:d2:
         cb:87:31:8e:92:cb:70:84:87:f4:d1:19:c9:87:be:84:65:62:
         7d:26:df:8a:d2:17:e6:db:c9:c0:7c:51:89:66:38:cd:6f:75:
         56:03:4b:a0:60:7e:5a:37:b4:3f:c7:b4:a2:5b:55:cd:6b:34:
         62:2f:03:e1:3c:39:5c:b4:b6:8f:53:2b:d1:e2:6d:b8:8c:29:
         6b:af:c8:4a:d3:b0:9f:6d:cb:e6:f3:2c:48:cd:27:25:75:e1:
         e7:f4:58:19:21:6a:c0:97:2c:de:6e:c3:98:f7:0a:f2:33:46:
         67:aa:d9:fa:db:80:e1:29:03:9d:26:6e:8a:4e:a1:a6:b5:3d:
         a8:0f:42:d7:5a:71:12:e2:ed:72:64:53:ee:d6:83:bd:cb:9a:
         bf:5f:38:96:79:36:11:99:7b:e0:df:bf:94:27:70:70:57:30:
         f1:c2:57:9a:10:de:5c:99:9a:92:a3:2b:86:70:fa:ba:88:6b:
         0e:45:17:e4:eb:3a:4a:45:27:61:fe:d3:46:75:2e:33:16:62:
         5c:c2:b2:2e:c9:ad:b2:f4:a7:52:07:25:64:3b:a3:61:12:4e:
         fc:9d:4e:36:f8:d6:65:c0:fb:b4:5b:19:80:51:e7:c4:59:24:
         99:77:b0:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 15:54:30 2024 by rpki-client on console-ams.rpki-client.org