Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Se5K4UFdK_VrLvdOhr332p3Cpn4.roa
File:                     Se5K4UFdK_VrLvdOhr332p3Cpn4.roa (raw, json)
Hash identifier:          4lnHq/RYL1sGW47Kxe93CLQ6u2uXkQYjG8x3hAUAgVk=
Subject key identifier:   49:EE:4A:E1:41:5D:2B:F5:6B:2E:F7:4E:86:BD:F7:DA:9D:C2:A6:7E
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0325
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Se5K4UFdK_VrLvdOhr332p3Cpn4.roa
Signing time:             Thu 01 Jun 2023 16:07:26 +0000
ROA not before:           Thu 01 Jun 2023 16:07:26 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.98.18.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 May 2024 13:36:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 805 (0x325)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun  1 16:07:26 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=49EE4AE1415D2BF56B2EF74E86BDF7DA9DC2A67E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:51:c5:e8:1e:78:b6:40:53:cf:ca:fa:26:ee:
                    2b:e6:c8:74:7d:9e:a9:b3:c5:a6:97:4d:6b:80:46:
                    a5:88:8c:6d:1a:a0:a3:f5:1b:bd:07:b7:c1:9b:8a:
                    af:a8:a1:e8:b6:d4:f2:6c:d9:62:c1:28:88:fb:b8:
                    b0:4c:13:16:47:57:a8:b1:98:73:20:d1:42:27:4f:
                    76:59:92:85:47:85:f8:12:8e:c9:d4:50:66:af:57:
                    6a:e4:b7:10:9e:e8:06:46:59:8e:7b:b5:bd:9a:a4:
                    7f:e5:84:18:0b:b3:ad:7a:cf:8d:e6:71:6c:9d:c9:
                    46:dc:59:8e:68:f6:ca:5d:c8:bf:88:d4:7b:45:f9:
                    ec:89:96:92:cd:e3:9a:44:3d:19:5d:cd:86:c6:ca:
                    4f:b8:b2:08:5f:cd:d5:b8:48:6f:d0:f5:6d:df:4c:
                    dd:8a:4c:2d:1f:2a:83:6c:5d:87:9a:80:fa:ec:19:
                    c1:51:2e:f5:34:b5:49:fe:68:94:4f:ca:c0:59:3d:
                    24:f4:e3:8e:42:b2:a0:c2:8d:64:45:b0:f5:c1:1a:
                    69:4a:d6:c0:19:c9:0a:7b:60:a5:df:26:03:72:17:
                    72:83:0c:a1:76:03:0b:64:ad:75:55:31:9e:f6:bd:
                    37:51:c7:cb:f7:56:14:b4:a0:5b:f8:f0:61:96:cb:
                    6b:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:EE:4A:E1:41:5D:2B:F5:6B:2E:F7:4E:86:BD:F7:DA:9D:C2:A6:7E
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Se5K4UFdK_VrLvdOhr332p3Cpn4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.98.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d3:06:d4:be:a9:1a:e7:36:d1:56:f6:28:d4:91:3a:0f:91:31:
         3a:17:03:43:8e:57:96:17:77:9e:6e:0f:0c:e2:f1:a6:4e:b9:
         b5:51:b6:ec:a2:97:86:3f:4f:c1:45:0a:57:1c:2b:8b:09:d0:
         29:98:72:82:ad:6c:6e:1f:5b:6b:d4:12:e4:0f:66:90:83:58:
         73:7e:a7:5d:98:11:10:ec:f7:96:d9:1e:4e:e4:50:3e:3e:67:
         59:f1:15:f3:08:b0:e6:19:48:ea:60:8a:2b:2c:69:e7:62:10:
         be:6d:7e:98:2c:75:76:8e:96:31:6e:67:2c:e1:87:7c:92:52:
         4e:42:ec:c9:38:3e:55:95:4a:14:cf:5a:10:47:b6:72:2c:16:
         cd:38:60:fb:b5:02:8f:b4:91:f6:d7:7c:5a:bd:b7:51:6f:95:
         30:74:49:c3:0b:8f:8a:3c:6d:43:96:11:f9:cc:54:c7:bc:ae:
         5b:b2:be:bd:32:26:c3:fb:f7:63:94:13:e5:48:e8:5c:4a:62:
         1f:2d:60:af:b3:a6:69:ec:70:48:8b:6b:56:2e:33:c2:b9:5f:
         82:af:c6:99:8d:47:a5:35:07:3c:c5:a6:e0:e8:51:45:c9:c3:
         39:84:32:29:9a:bf:b9:2a:96:09:84:70:5a:a2:b7:16:b2:cd:
         d0:0d:de:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:15:56 2024 by rpki-client on console-ams.rpki-client.org