Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/PktWEInYmOaTwHTaH0k3lyvYpTQ.roa
File:                     PktWEInYmOaTwHTaH0k3lyvYpTQ.roa (raw, json)
Hash identifier:          ggCAgvEo2nDsMgpPvDuwX0G9lNBIIcLnNTeUgSP0pRE=
Subject key identifier:   3E:4B:56:10:89:D8:98:E6:93:C0:74:DA:1F:49:37:97:2B:D8:A5:34
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       07C6
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/PktWEInYmOaTwHTaH0k3lyvYpTQ.roa
Signing time:             Tue 30 Apr 2024 02:08:47 +0000
ROA not before:           Tue 30 Apr 2024 02:08:47 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        49.106.174.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 12:58:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1990 (0x7c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr 30 02:08:47 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=3E4B561089D898E693C074DA1F4937972BD8A534
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:cc:79:6b:ae:71:a2:da:9a:3d:f6:fd:21:f4:
                    31:2d:58:0e:df:40:80:61:56:31:8d:4a:2d:09:e8:
                    2e:3f:9d:56:12:6e:84:a6:f5:a4:8a:d8:fc:7b:bf:
                    2d:8d:5e:45:67:9b:50:08:ed:39:65:32:e0:68:c2:
                    9f:57:dc:2e:86:1b:10:ee:c0:c0:0f:46:e8:c2:fc:
                    fa:fe:5f:6f:22:c5:0d:ba:d3:8d:21:1a:dd:8a:fc:
                    18:17:49:69:f5:c1:62:70:37:d1:96:8c:b9:4c:8b:
                    70:8f:d3:ab:be:ca:93:7e:db:ad:81:40:25:66:aa:
                    15:b5:55:e6:15:61:60:87:0f:85:15:e5:85:e0:16:
                    2c:e1:9a:17:48:4d:ff:fe:d0:19:d4:50:d9:29:d3:
                    9d:25:35:a4:5e:c5:85:73:42:70:6c:e0:48:77:01:
                    7e:6d:c5:51:30:e4:5d:d9:5f:8e:92:64:9b:a9:0b:
                    a0:5c:ea:54:de:db:26:c1:4f:56:be:8b:79:80:c6:
                    bc:4f:5e:7b:cd:f7:ef:b8:a4:9a:df:1c:bf:9a:f9:
                    53:8d:8d:18:8d:aa:5d:ec:c0:58:21:5f:60:60:9c:
                    c5:5b:78:cd:12:86:54:9c:22:b7:fd:1c:af:83:e1:
                    6c:23:c7:52:5a:a0:c3:2b:4a:b6:24:9c:1b:7d:f8:
                    40:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:4B:56:10:89:D8:98:E6:93:C0:74:DA:1F:49:37:97:2B:D8:A5:34
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/PktWEInYmOaTwHTaH0k3lyvYpTQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.106.174.0/23

    Signature Algorithm: sha256WithRSAEncryption
         98:40:9e:36:a9:9d:36:88:a9:85:62:ea:59:46:ba:c2:f9:2a:
         24:f6:34:13:ed:87:d3:92:a8:e1:d5:75:cb:ca:b1:84:8d:d0:
         f9:7e:7e:90:eb:ea:97:7f:f9:01:dc:fc:34:85:68:52:98:61:
         be:0b:22:4e:92:ab:12:31:42:ec:08:77:16:7d:74:b7:18:59:
         69:b9:7b:5b:72:df:74:6d:5e:06:ce:da:19:23:d8:ab:19:08:
         fc:8c:1b:a6:1b:9d:ba:e5:36:cc:2c:02:ab:e5:4e:f2:71:02:
         80:89:25:51:85:62:e8:1b:2f:7b:29:c0:1f:f7:7a:03:53:eb:
         d8:26:94:8c:84:d7:84:c4:d4:cb:55:b3:b5:13:b8:7b:d0:57:
         a9:9b:45:0b:0a:47:30:81:80:89:6a:0c:2c:f4:2b:3d:2d:3d:
         ff:71:42:2b:39:cb:28:28:10:db:1c:f1:3e:60:96:33:fe:1f:
         cb:71:4c:55:a7:54:6f:ef:f9:5d:33:2c:5c:db:5d:c2:3f:ba:
         3f:8e:6c:54:79:0d:58:30:37:e9:d2:2d:47:9e:4f:21:f5:30:
         80:b2:4f:41:96:0d:d4:6c:f8:52:d1:90:ff:d5:87:f8:8d:55:
         90:fe:9a:92:b6:be:df:a1:f3:8a:1a:97:a3:71:88:be:c4:48:
         16:8a:06:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:21:24 2024 by rpki-client on console-ams.rpki-client.org