Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/OwKeAtRMdvcMT3O7KlSbq2pGBbY.roa
File:                     OwKeAtRMdvcMT3O7KlSbq2pGBbY.roa (raw, json)
Hash identifier:          Lpm0tj5S8sZkhvI62xsyJqCRr5M4BOuf3ApG1nOqNV0=
Subject key identifier:   3B:02:9E:02:D4:4C:76:F7:0C:4F:73:BB:2A:54:9B:AB:6A:46:05:B6
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       066D
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/OwKeAtRMdvcMT3O7KlSbq2pGBbY.roa
Signing time:             Tue 30 Apr 2024 01:34:57 +0000
ROA not before:           Tue 30 Apr 2024 01:34:57 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        49.98.116.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 23 Jun 2024 11:53:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1645 (0x66d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr 30 01:34:57 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=3B029E02D44C76F70C4F73BB2A549BAB6A4605B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ff:9e:cd:55:6d:a2:29:fc:f6:ec:72:5f:8c:
                    8b:12:61:3e:e7:40:45:fc:44:0a:88:b1:59:0f:49:
                    42:d7:9e:ef:e2:5c:61:56:d5:a1:7f:bc:31:03:64:
                    c8:ad:9c:9e:8f:19:86:aa:b3:ce:f0:c2:d9:a7:6c:
                    71:dc:a2:83:26:e1:f0:10:08:8a:b3:68:ef:e4:77:
                    d9:d8:7e:64:74:1b:77:db:6b:55:2e:8c:38:93:ae:
                    5d:1d:c6:55:d1:94:4a:f0:3f:d9:47:ce:c5:25:e9:
                    96:c2:9c:fd:25:1a:cd:f2:31:c5:29:ec:ea:2b:39:
                    ea:3a:6f:4f:97:57:78:23:a3:b1:f5:a6:9c:84:0e:
                    36:bb:bf:30:40:71:6d:9b:a1:8c:f6:76:1e:a7:be:
                    f1:83:af:89:04:98:ce:2c:96:5d:6a:00:d6:d2:8c:
                    a4:c2:cd:cd:28:db:dd:3b:d2:bb:96:4e:16:cd:8c:
                    65:88:96:0f:d4:7d:0a:bf:2f:0a:98:1d:3b:c1:41:
                    4e:92:41:b6:0e:f6:51:65:ae:a2:14:1f:f8:48:ef:
                    0f:c9:f7:eb:11:c3:43:97:24:a0:48:46:5b:0b:1c:
                    62:95:4f:0c:59:6c:a7:cf:5e:41:62:e7:80:7f:3f:
                    b2:27:30:dd:e9:d6:0f:1e:71:2b:44:60:46:01:1e:
                    78:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:02:9E:02:D4:4C:76:F7:0C:4F:73:BB:2A:54:9B:AB:6A:46:05:B6
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/OwKeAtRMdvcMT3O7KlSbq2pGBbY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.98.116.0/23

    Signature Algorithm: sha256WithRSAEncryption
         17:29:c9:5e:2a:77:1b:f4:4a:2c:4b:8f:4f:ae:d1:25:1d:c4:
         ad:10:91:7b:00:63:2a:20:ba:17:fc:88:cd:27:ed:83:11:94:
         6a:53:f3:f2:57:61:ca:cd:ce:91:4e:c8:3a:8d:7d:a9:e7:19:
         3c:93:97:1f:6d:5a:b7:e8:58:09:f4:cf:b9:9b:d8:6f:c4:4c:
         40:9d:81:d9:40:ad:1a:a3:84:9e:16:e4:e6:91:6e:03:b5:93:
         9d:5b:b5:cb:57:2b:5f:1d:41:ab:3e:c8:1e:ed:b9:77:5b:d9:
         22:f6:b7:4a:6a:bf:dc:d7:bd:af:55:e6:9d:13:7b:d6:cf:bc:
         39:43:71:1c:ea:70:13:ce:b5:57:36:e0:43:d6:61:59:d5:f8:
         f9:d6:c6:e3:36:6c:99:3a:9e:b3:46:fb:83:aa:66:f1:28:25:
         d5:17:71:0c:db:85:5c:69:2c:61:07:57:6c:2a:f0:78:b8:b3:
         db:6d:56:e4:09:bf:0b:87:ac:91:f8:68:07:55:8b:40:1c:86:
         b4:7b:c6:89:43:d5:4a:6e:89:41:d4:d8:d6:24:0f:0b:6b:ff:
         aa:37:2f:30:6c:bf:24:80:92:f0:98:48:b1:81:d0:df:91:44:
         d4:14:0e:9f:66:77:c0:e8:a5:82:67:8f:ec:6d:bb:1e:e2:82:
         bf:45:4c:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 14:31:53 2024 by rpki-client on console-ams.rpki-client.org