Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/SeihJjqNQRKXgVY2-3z9uyvZx6g.roa
File:                     SeihJjqNQRKXgVY2-3z9uyvZx6g.roa (raw, json)
Hash identifier:          MvE+5AdFHql3w3FCH0oSkqNJlVMb4TOXQDn0kUWSg5s=
Subject key identifier:   49:E8:A1:26:3A:8D:41:12:97:81:56:36:FB:7C:FD:BB:2B:D9:C7:A8
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0907
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/SeihJjqNQRKXgVY2-3z9uyvZx6g.roa
Signing time:             Tue 30 Apr 2024 02:28:39 +0000
ROA not before:           Tue 30 Apr 2024 02:28:39 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        49.104.28.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2311 (0x907)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr 30 02:28:39 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=49E8A1263A8D411297815636FB7CFDBB2BD9C7A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:8b:0b:ab:36:c0:72:4d:7a:67:bf:80:21:c0:
                    84:5b:56:a1:6e:bc:b3:c8:ec:94:23:df:30:60:52:
                    ce:77:de:04:42:67:fc:04:77:5c:e0:bf:3c:b1:0a:
                    ed:24:f4:58:d6:b0:53:a6:4b:52:61:f1:b3:bc:c3:
                    4d:d0:91:a0:a0:bb:8b:a2:18:c0:8a:46:2c:44:57:
                    a2:59:99:3d:cf:7c:70:4c:8c:8f:a6:c6:aa:7f:b4:
                    99:9a:19:8f:98:e2:09:55:dc:ec:cf:91:18:18:99:
                    c5:29:95:9e:21:6e:16:e9:2d:76:e1:33:c0:38:f4:
                    4b:ac:68:60:95:fb:e8:71:16:1b:d8:e2:48:d6:61:
                    16:1d:d8:73:03:eb:e4:09:d3:30:d8:e8:8e:23:da:
                    b5:58:d3:e2:a0:6e:0d:99:94:54:67:33:36:a8:55:
                    cb:c6:34:21:3b:12:57:56:68:68:16:56:32:fa:43:
                    4f:b4:ac:74:cb:cd:9c:b9:60:6a:5d:a6:af:3c:61:
                    14:19:96:62:60:9e:47:f0:97:ea:98:21:53:80:24:
                    e1:d2:95:d8:ee:a7:6e:b3:12:22:db:f7:f6:e3:47:
                    c1:7e:ab:d5:eb:e6:e0:eb:0e:cc:9f:8e:b7:1b:2a:
                    bc:ae:b2:27:55:db:3f:39:2f:d1:5c:d9:cb:bd:10:
                    05:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:E8:A1:26:3A:8D:41:12:97:81:56:36:FB:7C:FD:BB:2B:D9:C7:A8
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/SeihJjqNQRKXgVY2-3z9uyvZx6g.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.104.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         13:b0:17:ad:61:e1:64:c9:90:55:7f:ad:5d:97:82:12:8c:26:
         a2:03:c6:bc:16:a5:c6:f1:01:f7:ad:30:71:81:26:e1:c1:ed:
         77:0c:c4:97:21:ae:55:7d:1b:66:22:e8:63:c7:b2:da:e8:ac:
         2b:a8:6b:eb:97:af:2f:91:25:c0:99:e5:0b:93:d2:54:5f:a6:
         57:43:7d:c4:36:e4:3d:29:23:f9:94:47:b9:37:d7:a4:fe:cf:
         37:4c:47:f6:ac:35:a1:b5:80:96:79:46:51:fb:54:63:25:07:
         d7:7e:84:77:3e:51:01:39:8e:9e:b4:08:21:75:44:e3:84:3e:
         92:c2:06:c5:06:30:5c:97:5d:ed:77:c6:1c:9f:97:c2:59:41:
         2f:42:24:e1:67:42:8a:86:d2:e5:4e:f8:0c:a7:ce:38:24:e0:
         1d:89:6b:5e:31:f0:7f:6e:bc:0e:7f:66:61:b7:6d:82:1f:fe:
         fd:7b:4e:9f:49:6d:dd:84:c9:ac:22:f2:42:a6:bd:76:e7:79:
         cd:d2:56:33:50:e7:c5:b9:fc:08:53:59:83:b9:90:33:86:c9:
         b8:a1:97:0a:c7:03:bf:1a:53:ce:bd:42:b7:21:01:54:c5:75:
         76:d8:0a:fa:cd:32:33:ce:cb:8d:8c:c2:dd:ef:2f:51:5c:ae:
         65:70:c7:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:45:40 2024 by rpki-client on console-ams.rpki-client.org