Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/TRmRBZuX19uD1izBPCzDFHnytfg.roa
File:                     TRmRBZuX19uD1izBPCzDFHnytfg.roa (raw, json)
Hash identifier:          SnoqCDZ0WyzXj5/9d8qf0EHK7zX2gFXLqqaNJG7hyRI=
Subject key identifier:   4D:19:91:05:9B:97:D7:DB:83:D6:2C:C1:3C:2C:C3:14:79:F2:B5:F8
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0546
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/TRmRBZuX19uD1izBPCzDFHnytfg.roa
Signing time:             Thu 27 Jul 2023 16:56:09 +0000
ROA not before:           Thu 27 Jul 2023 16:56:09 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     9605
IP address blocks:        49.108.225.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1350 (0x546)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jul 27 16:56:09 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=4D1991059B97D7DB83D62CC13C2CC31479F2B5F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e4:5a:5f:ab:a4:e1:79:5d:39:1e:c2:ab:01:
                    0c:19:28:bf:f0:e8:93:a7:8b:3e:c5:28:2a:35:0b:
                    22:b9:cb:94:e6:70:e5:05:24:b8:47:22:0e:0c:20:
                    f7:d9:60:38:34:ef:1d:48:14:9c:f8:07:a1:ec:ed:
                    7d:2b:a7:76:e4:ff:cc:14:0b:0f:9f:e7:e5:7a:89:
                    c5:68:05:1e:28:09:f1:2f:d1:ef:e5:eb:bd:8a:74:
                    95:67:d0:6e:ef:fa:20:7a:a2:98:53:85:33:f1:39:
                    f8:38:41:30:ba:e3:98:ba:b5:7e:28:94:db:03:59:
                    f6:00:90:9e:91:36:16:98:e2:e5:3b:79:5e:5a:1e:
                    c1:f0:67:a4:3d:64:5f:cf:9c:0c:42:a4:45:09:79:
                    14:0a:66:42:4f:0b:0a:eb:4f:c5:c6:5b:94:32:08:
                    19:b9:6d:27:dc:20:35:ec:95:64:c9:8f:79:64:56:
                    d5:b3:f0:b7:31:4c:3e:37:ab:cf:f6:10:21:67:1d:
                    66:2b:e8:d8:e6:5e:94:f6:e2:d3:8e:74:52:a1:83:
                    a1:2d:7d:0b:86:1e:26:37:bc:b7:26:38:73:46:58:
                    9b:4f:e1:a6:4e:ca:e5:83:7e:b0:0e:24:da:2b:b6:
                    11:a2:bf:b9:01:46:43:c0:15:fe:d7:5e:b8:63:77:
                    6c:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:19:91:05:9B:97:D7:DB:83:D6:2C:C1:3C:2C:C3:14:79:F2:B5:F8
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/TRmRBZuX19uD1izBPCzDFHnytfg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.108.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:22:1f:14:64:bd:ea:54:56:e9:97:e4:29:4d:b7:bc:49:1a:
         2a:ec:67:21:de:a3:7b:d2:93:ad:0e:0f:67:d7:0e:26:de:4e:
         08:64:23:ce:03:2c:13:1d:76:c0:97:af:27:ca:bb:f4:ef:6d:
         26:65:65:bf:60:7a:ec:f5:63:fb:6b:a9:dd:f0:6b:98:61:2c:
         54:08:ba:e1:55:5f:63:40:d2:4f:37:63:13:2a:e2:fb:dc:4e:
         20:b0:44:ca:8b:1a:bd:4b:74:70:c4:da:34:f7:07:df:c5:72:
         6c:12:46:6b:b7:3d:1b:57:d2:fb:67:72:7e:b9:2e:00:03:22:
         28:aa:f0:f6:19:73:51:52:49:49:a4:34:c7:1b:90:6e:87:ad:
         d7:c6:0d:40:74:45:74:68:89:1b:99:30:f3:50:fe:11:35:8b:
         3b:85:5c:3b:df:05:6c:3e:2b:df:a2:07:c1:97:1d:04:2f:78:
         eb:22:60:8d:7f:df:1b:1a:74:10:f6:f3:56:a3:2b:dd:7c:c9:
         3b:9a:79:5f:19:04:e2:ba:f4:f1:d2:f3:0d:e7:11:b7:e6:34:
         db:ba:2f:a0:cf:83:12:8a:84:b0:61:d5:92:0a:50:ef:8e:07:
         e0:8d:94:74:9e:41:29:49:3e:2e:c4:e9:71:ed:8c:2f:84:48:
         52:fa:3b:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 15:54:30 2024 by rpki-client on console-ams.rpki-client.org