Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/SaL2QKORtZNYy3PxpZXTdB_j-NU.roa
File:                     SaL2QKORtZNYy3PxpZXTdB_j-NU.roa (raw, json)
Hash identifier:          tzjjKaN61bKzusLt4fEzbks8/aMYNZIGcEZjXJgNm/M=
Subject key identifier:   49:A2:F6:40:A3:91:B5:93:58:CB:73:F1:A5:95:D3:74:1F:E3:F8:D5
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0716
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/SaL2QKORtZNYy3PxpZXTdB_j-NU.roa
Signing time:             Tue 30 Apr 2024 01:53:00 +0000
ROA not before:           Tue 30 Apr 2024 01:53:00 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        49.104.80.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 12:58:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1814 (0x716)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr 30 01:53:00 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=49A2F640A391B59358CB73F1A595D3741FE3F8D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:34:93:48:40:d8:0d:28:f1:00:7d:53:a5:28:
                    30:d2:97:f8:38:01:28:af:1d:05:03:c0:7f:c1:aa:
                    9c:82:26:5d:f9:58:66:7c:60:79:ce:b8:76:62:54:
                    35:e9:0d:bb:b8:4f:71:bc:2f:9d:df:b3:64:c8:e0:
                    86:d6:0e:71:0c:5c:26:87:7d:32:60:70:d0:12:0e:
                    0a:03:f7:3b:fe:88:b4:64:39:93:4c:6d:5c:13:f9:
                    19:7d:b8:58:17:86:d8:eb:7f:ac:45:97:5e:98:84:
                    84:6b:3d:09:95:85:57:38:64:13:26:0e:c6:d9:84:
                    10:31:a7:d6:31:e3:fd:f8:71:87:74:3a:b7:05:90:
                    d6:bc:7c:01:1a:d4:a6:18:1e:b3:e5:49:4b:52:e6:
                    11:6f:ac:d8:70:52:ea:bf:37:60:49:08:dc:00:1e:
                    18:70:73:06:89:3f:77:1d:e3:ac:bd:cc:74:f9:a8:
                    e7:55:85:36:7e:b2:c0:83:0c:3d:91:45:12:80:8a:
                    41:0e:b1:e2:e8:98:ad:33:9a:62:42:ef:35:ec:0f:
                    85:3e:b3:1d:68:9d:34:e4:bf:f2:16:97:fc:40:0c:
                    7d:be:11:0c:45:a6:8b:47:e0:ca:1a:47:80:8c:2b:
                    3e:95:7f:40:2f:59:0e:7f:f8:0f:fa:97:3c:d3:e5:
                    68:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:A2:F6:40:A3:91:B5:93:58:CB:73:F1:A5:95:D3:74:1F:E3:F8:D5
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/SaL2QKORtZNYy3PxpZXTdB_j-NU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.104.80.0/21

    Signature Algorithm: sha256WithRSAEncryption
         1d:1f:13:b8:f4:51:b0:15:9a:b8:a7:e4:8c:18:0d:1c:b0:2b:
         6e:0a:b8:33:b7:43:5e:24:42:9c:a7:47:b4:ba:5c:c7:56:17:
         ed:24:e1:44:0d:a2:1e:5f:2c:4e:a0:68:a1:ce:11:16:c6:84:
         11:13:96:47:e2:86:78:2f:2b:9a:98:ec:55:41:8b:8b:05:ec:
         e8:09:45:ed:29:52:05:6c:a7:91:3c:7d:11:22:5b:b7:c5:9e:
         e7:0f:c7:dc:a2:05:d9:a2:d6:e6:2c:6f:26:b7:38:47:d2:47:
         89:93:5e:d9:5c:67:ab:3d:85:80:d1:cd:d8:fe:f3:40:47:09:
         8a:8e:3d:fa:b1:56:20:99:90:9c:88:c9:99:00:cf:f7:2c:69:
         b0:8e:b8:41:5e:70:61:0b:d4:10:14:56:50:be:c7:cd:60:52:
         a6:5b:2f:84:eb:fb:eb:43:b4:3b:44:02:55:1d:2a:16:f7:42:
         fc:31:1b:76:b6:69:b9:75:e7:86:7a:8a:a1:40:92:87:62:0c:
         a9:5a:35:6f:7e:97:89:1d:d5:10:3f:03:4b:c7:3c:3a:69:98:
         52:84:3a:32:70:eb:a3:b1:0a:82:fb:d3:1d:7c:02:21:2d:67:
         18:6c:15:af:96:af:4f:f9:fc:fa:f0:44:28:ad:cd:97:8a:b8:
         ed:71:20:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:21:24 2024 by rpki-client on console-ams.rpki-client.org