Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/TAwWg39BiTBRHwUgRWsJ9Rsjjas.roa
File:                     TAwWg39BiTBRHwUgRWsJ9Rsjjas.roa (raw, json)
Hash identifier:          I/AxT1sM00lmdNG+W8p6+arEx/gC2QV+wBB4qj+7E1I=
Subject key identifier:   4C:0C:16:83:7F:41:89:30:51:1F:05:20:45:6B:09:F5:1B:23:8D:AB
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       04F5
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/TAwWg39BiTBRHwUgRWsJ9Rsjjas.roa
Signing time:             Thu 27 Jul 2023 16:52:01 +0000
ROA not before:           Thu 27 Jul 2023 16:52:01 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     9605
IP address blocks:        49.108.64.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 23 Jun 2024 11:53:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1269 (0x4f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jul 27 16:52:01 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=4C0C16837F418930511F0520456B09F51B238DAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a2:93:1d:f0:fd:ac:a6:08:5f:65:e0:08:87:
                    db:2c:94:57:8d:c0:32:eb:0b:8c:07:ca:88:e9:6e:
                    fa:30:33:d0:c8:d3:db:55:17:8f:c3:1a:39:20:42:
                    40:0a:6d:cb:4b:1e:ca:5b:79:b6:89:01:b0:79:a7:
                    a8:7f:18:33:21:35:db:e7:9a:d2:63:30:13:d5:8b:
                    91:5a:e0:75:82:4e:4c:2c:e3:69:29:d6:05:c0:1d:
                    e9:aa:68:39:a4:88:2a:b8:47:9b:93:80:af:2a:0a:
                    95:4c:e3:e4:71:2f:5e:7c:7e:bd:f7:c1:7b:ca:c6:
                    64:16:a1:7e:ba:af:f7:de:21:e8:cb:8e:78:f4:68:
                    e0:8d:7f:ba:28:37:d1:92:aa:7e:ac:76:03:fe:54:
                    1f:89:8b:c5:78:bf:14:f2:1e:4e:6d:80:7a:6c:da:
                    90:3c:2e:ff:16:e5:25:60:30:39:30:2d:b5:23:e4:
                    bb:1f:40:e7:21:1e:f9:89:c3:32:18:40:78:48:26:
                    62:33:9b:da:bc:ac:b9:04:7a:db:c9:21:0c:01:b4:
                    1e:56:de:77:e6:cb:b5:5e:47:6a:36:72:65:2a:ed:
                    85:44:1e:02:ed:95:6c:51:70:27:4e:24:29:f7:47:
                    6f:2d:b6:cb:d0:dd:ea:1a:b1:d0:b2:77:b9:f6:7f:
                    1f:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:0C:16:83:7F:41:89:30:51:1F:05:20:45:6B:09:F5:1B:23:8D:AB
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/TAwWg39BiTBRHwUgRWsJ9Rsjjas.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.108.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         37:44:c9:de:ec:52:1c:b8:6c:4d:f5:7f:8c:53:4b:94:f6:12:
         b0:72:20:ef:b2:37:da:91:b3:35:22:9f:6b:46:38:78:20:1b:
         b5:6a:6e:d8:9e:4d:f4:5e:d3:33:02:d6:f2:3a:c8:63:ba:f8:
         51:35:d1:ba:41:e2:1a:9e:4e:8e:bd:3e:5b:9f:16:3d:26:62:
         fb:16:a3:66:4e:68:89:41:58:09:2b:f9:8e:4c:54:4f:19:f5:
         c6:37:69:e7:ea:27:9b:12:7f:cb:88:26:24:36:9f:a0:ab:3d:
         c2:cf:95:7a:5a:55:e8:19:7b:2c:11:6d:5f:0b:85:50:34:98:
         77:b2:a0:ca:87:5c:0a:6f:5b:be:0f:fd:ce:48:78:de:5d:35:
         69:e3:12:dd:48:77:cf:65:1e:5f:29:da:71:d8:75:5e:fd:66:
         b0:82:82:c1:f1:0d:c9:e8:f0:f0:8a:3b:d5:00:8a:a5:9f:64:
         af:84:ac:f7:fd:f4:47:f5:e3:28:e6:c7:ec:66:3f:76:4f:bc:
         9c:36:3b:40:50:22:ca:c4:1a:5e:06:96:57:ea:b7:dd:bc:20:
         c5:35:08:0e:f6:9e:d0:05:be:68:bb:bc:a9:2c:0a:cc:fb:97:
         29:17:6f:6d:42:07:df:60:91:88:42:3a:c5:51:a8:36:8f:2b:
         40:00:2f:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 14:31:53 2024 by rpki-client on console-ams.rpki-client.org