Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/SBIQoweWbzOaTxGKxSbonjOTGDI.roa
File:                     SBIQoweWbzOaTxGKxSbonjOTGDI.roa (raw, json)
Hash identifier:          NVYuP6zSfMGA4s3iH4mC8GSXk7ti13fzC/7H6I6t22Y=
Subject key identifier:   48:12:10:A3:07:96:6F:33:9A:4F:11:8A:C5:26:E8:9E:33:93:18:32
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0647
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/SBIQoweWbzOaTxGKxSbonjOTGDI.roa
Signing time:             Tue 30 Apr 2024 01:31:30 +0000
ROA not before:           Tue 30 Apr 2024 01:31:30 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        49.106.101.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1607 (0x647)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr 30 01:31:30 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=481210A307966F339A4F118AC526E89E33931832
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:0f:68:e7:6c:dd:b2:9d:92:8e:43:dc:18:c9:
                    13:57:79:07:2e:0f:e7:21:b9:45:5a:5a:ef:d7:e4:
                    60:ea:4a:00:2b:aa:0e:29:06:53:33:06:3a:50:92:
                    57:4e:f9:09:c4:1a:74:16:e8:66:8e:bf:54:c2:ef:
                    45:d9:ac:7f:74:12:22:ad:a3:91:16:49:50:13:2a:
                    54:dd:8a:d3:31:38:31:28:3d:66:6d:04:a7:fd:5a:
                    ba:d1:40:22:5c:66:f8:c5:43:57:13:d8:ef:2b:4b:
                    68:e6:47:58:dd:3f:04:03:55:46:25:50:d3:57:f1:
                    85:b0:f9:23:2d:72:33:ed:a3:38:18:b9:17:ac:5f:
                    10:6a:d1:29:8d:4e:64:15:d1:09:5b:e2:fb:da:b2:
                    5d:b0:22:21:ca:79:2d:e3:ed:9b:40:6f:3a:05:6e:
                    1d:a8:b6:34:71:c9:56:79:aa:b3:c3:6f:e4:30:e5:
                    aa:a4:47:b9:f0:d9:d4:e1:9f:ae:00:01:1b:b0:66:
                    62:e0:f7:e6:c3:5b:7b:ee:7b:af:77:0b:2d:d5:b2:
                    5b:4f:26:31:7f:07:60:87:53:ff:82:a8:f2:de:0d:
                    80:ae:e9:29:36:1d:d5:7c:2b:c3:39:ff:5f:11:f9:
                    2e:16:02:8c:9f:e2:4f:df:60:6f:1e:f7:96:74:71:
                    49:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:12:10:A3:07:96:6F:33:9A:4F:11:8A:C5:26:E8:9E:33:93:18:32
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/SBIQoweWbzOaTxGKxSbonjOTGDI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.106.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:3d:05:00:e0:90:c6:31:df:a4:d1:83:cb:ec:97:e9:61:84:
         47:de:d1:77:98:26:5b:8b:e4:cd:e5:2a:8f:b0:44:70:e4:ae:
         22:97:a5:ae:91:cc:cf:53:9a:41:93:86:4d:1e:c8:af:74:8e:
         ae:b9:c2:4e:0b:d4:9d:8a:bc:99:21:dc:46:3b:f9:36:24:54:
         ae:25:4e:b2:5d:d6:64:9f:ca:a5:0e:f2:51:0e:ce:3e:4e:85:
         3b:97:c1:4c:e3:9a:a1:af:7c:5e:c9:04:14:09:20:73:7f:e5:
         56:83:dd:e1:59:49:86:73:9e:56:ec:d2:a3:d5:67:b3:2e:08:
         db:12:e7:a1:8a:f7:92:f7:d5:12:a2:c3:d6:25:8f:41:79:37:
         52:90:89:7d:c3:df:b6:2b:c0:c6:1b:35:9c:58:27:3a:e5:20:
         9b:0e:7d:95:fb:b0:c2:30:92:e8:ee:75:cc:3d:ea:19:55:ba:
         32:30:72:7d:4b:5b:3b:24:d3:9b:ad:79:7f:88:f8:fa:54:95:
         3d:f6:f7:f1:dc:5c:ce:fc:56:0d:88:bd:e7:c2:0e:cd:bb:78:
         cb:17:31:09:6e:e8:09:34:4e:3a:32:3f:3b:5c:dc:46:8e:b9:
         1c:98:19:9b:f6:49:1b:c0:bc:ef:c7:d9:d8:5c:ef:2e:7c:a2:
         c7:ea:62:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 15:54:30 2024 by rpki-client on console-ams.rpki-client.org