Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Q7QnVSczVBu0Ji6eLc-U-yGPPt4.roa
File:                     Q7QnVSczVBu0Ji6eLc-U-yGPPt4.roa (raw, json)
Hash identifier:          km516tV9O6FeQk59gCTMG8Tzjc9lt1a2Iw8jjug/mLo=
Subject key identifier:   43:B4:27:55:27:33:54:1B:B4:26:2E:9E:2D:CF:94:FB:21:8F:3E:DE
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0838
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Q7QnVSczVBu0Ji6eLc-U-yGPPt4.roa
Signing time:             Tue 30 Apr 2024 02:14:30 +0000
ROA not before:           Tue 30 Apr 2024 02:14:30 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        49.104.23.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2104 (0x838)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr 30 02:14:30 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=43B427552733541BB4262E9E2DCF94FB218F3EDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:3c:e9:7d:c4:ef:dc:e1:c1:22:12:b3:ad:3b:
                    8d:c2:52:0d:0a:ab:9e:b2:6c:5d:ee:f6:cc:7f:ac:
                    32:a9:b7:50:cf:3e:98:64:4b:f3:0d:7d:e3:ff:60:
                    4d:ea:54:10:91:30:0d:ac:4e:76:8a:a9:c6:ef:ce:
                    db:0f:5c:81:8b:b4:05:23:32:e9:8a:91:f0:26:ab:
                    c9:0d:07:47:a9:4f:a8:5c:2d:9f:3d:53:b7:98:20:
                    ff:8a:b3:ab:05:20:82:35:a7:1a:b3:92:ce:7a:75:
                    08:2e:d5:5d:79:1e:7f:3a:b4:1e:33:33:ed:cf:86:
                    5d:e8:60:cc:18:da:2c:f5:ec:3a:a3:15:ca:2f:b0:
                    70:55:38:92:c4:45:a4:65:33:50:68:63:af:ac:07:
                    f3:b4:53:67:51:31:12:dc:f0:97:9b:04:36:ed:3d:
                    9f:00:14:9a:82:68:63:df:db:81:06:57:72:70:89:
                    c5:3c:12:e7:67:0d:76:77:1c:cb:99:f7:45:a8:a7:
                    d5:9e:69:b3:a1:bb:aa:63:dd:a7:cf:0d:d8:27:f2:
                    a1:9c:09:9a:f5:34:b1:b0:3e:41:77:4a:52:49:62:
                    3f:92:9e:cb:59:0f:49:48:96:7f:78:c3:d1:d1:f8:
                    61:9a:5f:aa:35:ff:8d:83:cc:cc:0a:93:45:85:96:
                    63:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:B4:27:55:27:33:54:1B:B4:26:2E:9E:2D:CF:94:FB:21:8F:3E:DE
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Q7QnVSczVBu0Ji6eLc-U-yGPPt4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.104.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:e5:4b:8c:91:da:f1:ff:49:30:87:9c:49:78:a3:48:1a:82:
         a6:76:60:a6:6a:9c:82:52:a0:c0:98:e6:28:f7:8b:57:05:02:
         cb:4e:eb:ef:1e:1b:eb:67:21:3c:24:8c:93:d8:bd:86:3e:8d:
         7e:c6:2a:68:23:d6:fa:cc:3a:91:2b:8a:cb:60:03:fd:80:66:
         46:e6:40:b4:5f:7b:33:e9:39:3a:cf:82:4e:b7:f4:79:21:54:
         0f:c9:df:86:d7:21:c4:d9:c8:a3:16:dd:90:a0:18:99:41:e0:
         f9:f2:b6:1c:23:ec:9a:aa:db:ee:f6:65:31:01:92:b3:8f:82:
         22:5c:c7:74:f0:97:79:4f:cb:6a:99:6f:6a:b6:2e:75:b9:76:
         42:43:d2:14:a3:77:c4:a6:8a:55:1e:91:06:6c:c0:b6:6c:f0:
         e2:cf:c4:6f:be:4a:71:f5:ac:39:fb:d7:e7:c4:b6:bf:c1:ac:
         7d:a4:68:6f:91:8b:66:9c:a4:40:25:1c:f9:c1:e3:bd:87:34:
         4f:07:cb:a3:67:25:a5:a2:0b:45:4e:d2:f6:24:e6:d6:78:eb:
         c3:7a:92:fd:55:06:de:d4:dd:9e:c1:7a:9c:32:d6:06:68:eb:
         f3:f1:b4:9f:e5:67:7e:cd:71:59:63:19:64:7a:5d:c2:d0:b4:
         c0:c7:91:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 15:54:30 2024 by rpki-client on console-ams.rpki-client.org