Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/SNAbE7FfgqxYhaAWtVkL9cSt0u0.roa
File:                     SNAbE7FfgqxYhaAWtVkL9cSt0u0.roa (raw, json)
Hash identifier:          B8CMxg4w8M/h/VPKcfoQI6roXoXqda38hCw2hLQeiSs=
Subject key identifier:   48:D0:1B:13:B1:5F:82:AC:58:85:A0:16:B5:59:0B:F5:C4:AD:D2:ED
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       09BF
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/SNAbE7FfgqxYhaAWtVkL9cSt0u0.roa
Signing time:             Sun 30 Jun 2024 01:40:23 +0000
ROA not before:           Sun 30 Jun 2024 01:40:23 +0000
ROA not after:            Tue 24 Jun 2025 10:46:45 +0000
asID:                     9605
IP address blocks:        49.102.156.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:41:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2495 (0x9bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun 30 01:40:23 2024 GMT
            Not After : Jun 24 10:46:45 2025 GMT
        Subject: CN=48D01B13B15F82AC5885A016B5590BF5C4ADD2ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:70:1f:85:94:2d:48:0f:12:86:77:f3:5a:c9:
                    29:42:be:56:3b:3f:9e:d4:85:16:1f:7c:e1:6e:0f:
                    26:9f:e2:ee:76:e2:06:f1:8a:06:e8:6c:3d:a8:5a:
                    63:02:7a:b0:58:7e:29:fd:61:a5:30:d2:70:e9:98:
                    67:9f:06:86:03:41:a0:1d:a6:be:5e:e1:6f:e6:d0:
                    08:ed:46:cd:35:f1:38:14:7d:ed:32:d3:42:f1:0b:
                    a8:9b:fb:76:50:51:3f:db:c5:71:68:c0:8d:42:ba:
                    8f:48:23:57:09:a8:fa:f0:61:e5:b6:1c:2c:d4:77:
                    24:a5:53:39:b6:69:33:b6:3b:97:e8:b4:ea:7b:46:
                    d3:2b:03:e5:c2:3e:38:73:c0:d4:66:4b:ff:25:df:
                    f0:59:9f:9b:d0:34:10:8f:85:95:32:7d:80:24:d3:
                    46:99:87:e7:13:94:cf:f4:90:e8:e6:9f:16:4a:28:
                    76:fe:7e:29:86:55:73:b4:74:5d:79:b3:b8:6c:c9:
                    11:9a:4b:b2:00:f7:f7:ea:b6:b3:fe:00:30:06:a0:
                    35:d4:e8:c6:c1:19:ba:ee:ff:a7:49:9e:06:12:fb:
                    75:36:2c:68:9d:f9:82:a0:bc:55:0e:5a:cd:62:78:
                    29:47:7d:8f:dc:24:dd:04:75:dd:57:a8:6e:1b:cd:
                    39:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:D0:1B:13:B1:5F:82:AC:58:85:A0:16:B5:59:0B:F5:C4:AD:D2:ED
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/SNAbE7FfgqxYhaAWtVkL9cSt0u0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.102.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:d9:be:60:3c:7f:70:87:3f:f9:5b:45:70:19:10:27:9c:06:
         c7:e8:ca:12:f4:88:90:04:de:d1:1e:47:ac:30:f1:66:6d:7c:
         cf:40:3a:c6:2c:67:e3:de:a8:a4:57:33:b6:f2:60:02:08:d3:
         df:b3:f6:87:1d:51:76:26:98:32:02:23:81:84:59:2b:d8:ae:
         c3:d2:61:64:2b:a2:88:70:9a:2c:4a:28:fc:ea:c6:1f:80:fb:
         2b:bb:ce:20:06:d3:7c:01:0e:c0:6c:dd:4e:a9:92:51:89:c2:
         09:f3:88:91:71:13:97:3d:65:6e:28:62:54:f6:b9:f0:1b:ce:
         7e:26:18:fc:d0:8f:39:29:2b:c8:4d:94:28:79:61:0a:82:6c:
         a7:d9:f3:50:e3:26:32:0f:67:a9:a9:23:f2:dd:30:ee:31:4f:
         ce:bf:8a:8e:90:28:e5:9d:38:c6:c8:30:bc:dd:9b:53:ff:c4:
         59:01:a0:89:99:b6:1b:7b:8b:34:14:a6:cc:e5:75:be:43:5a:
         5d:5b:a5:d1:fe:ed:42:1c:e6:95:80:70:08:d4:dd:29:e8:9f:
         0d:6b:e5:9f:8a:ed:99:e0:13:16:52:51:da:9f:d7:44:fd:46:
         67:c4:e4:ec:96:e8:a3:55:f7:90:11:47:79:a5:af:c4:9e:fa:
         c1:49:14:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:24:00 2024 by rpki-client on console-fra.rpki-client.org