Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/TaW48oBqCgxvm3A6CxWVlLDphBg.roa
File:                     TaW48oBqCgxvm3A6CxWVlLDphBg.roa (raw, json)
Hash identifier:          b0AT1qEW5xuYUvpfQfThGeiFDc4vbSvO70Spa6knmPc=
Subject key identifier:   4D:A5:B8:F2:80:6A:0A:0C:6F:9B:70:3A:0B:15:95:94:B0:E9:84:18
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0730
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/TaW48oBqCgxvm3A6CxWVlLDphBg.roa
Signing time:             Tue 30 Apr 2024 01:55:58 +0000
ROA not before:           Tue 30 Apr 2024 01:55:58 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        49.96.44.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1840 (0x730)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr 30 01:55:58 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=4DA5B8F2806A0A0C6F9B703A0B159594B0E98418
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:8a:de:78:4e:6a:12:56:7c:d2:36:a1:41:8c:
                    d4:b5:d2:cc:91:c5:81:57:b7:03:78:ab:bd:51:b2:
                    87:3d:d7:41:65:b6:86:0d:72:27:34:67:74:bf:a9:
                    ca:7b:df:7f:f7:55:42:75:9c:ad:e3:cf:1f:76:29:
                    41:cd:8f:c4:b4:26:4f:7b:aa:3b:de:06:4c:98:85:
                    15:5a:1d:5c:f3:c3:e7:08:8c:1b:39:15:5c:b5:4e:
                    04:98:27:16:7a:52:6d:e8:f4:66:41:3e:18:cb:a4:
                    bc:70:74:bb:92:8a:b9:fc:39:8a:53:65:46:15:e2:
                    9c:f1:fe:cf:3d:f6:86:cc:a4:1f:75:b5:72:b6:40:
                    92:88:9b:86:53:bb:44:87:68:c5:ad:af:1b:83:ef:
                    8e:3e:b3:b8:b9:39:cd:b8:ce:f2:b9:ed:36:a6:49:
                    68:d5:3c:c7:67:da:61:ee:0e:f1:ef:cf:b7:85:6f:
                    28:68:00:ff:10:83:e3:00:43:a2:16:f0:7e:cd:72:
                    e0:d9:ac:5a:ce:cd:46:e0:43:32:af:d0:ba:59:d5:
                    8a:a4:63:1e:77:e6:ac:2a:4b:d1:53:30:0a:11:7f:
                    61:b4:42:84:7e:6e:6d:b8:87:ea:49:4a:ac:20:e7:
                    75:21:e6:28:b9:a1:83:04:52:c1:f7:fd:ad:07:33:
                    3a:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:A5:B8:F2:80:6A:0A:0C:6F:9B:70:3A:0B:15:95:94:B0:E9:84:18
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/TaW48oBqCgxvm3A6CxWVlLDphBg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.96.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d6:64:a2:a8:29:6a:53:43:0b:53:c2:af:c1:5e:17:43:5c:17:
         9d:b1:7d:18:59:a2:7b:ce:ba:a5:f6:6a:cf:dd:34:bf:65:aa:
         68:99:ff:cd:15:d9:e9:6b:b8:85:fc:20:f3:e4:82:7b:87:c0:
         ca:12:54:9a:f3:67:ac:6f:96:c6:4f:85:b6:43:c0:1c:8f:f5:
         80:0f:dd:58:5a:b7:a0:4b:f5:d7:20:41:92:0b:6f:07:ac:fc:
         f8:6d:75:2b:46:71:79:0c:f3:53:b4:a3:4a:de:00:de:45:5b:
         53:27:91:22:30:25:9a:e0:02:f5:47:9b:49:02:50:3e:1b:15:
         ac:c5:e5:2c:0a:9f:5e:43:bf:76:da:ea:a8:44:ff:f0:f5:17:
         2a:9e:25:b7:6c:f9:2e:47:6b:65:8c:e6:04:78:10:45:17:4b:
         59:d1:32:e3:5d:e7:a0:4a:08:13:d4:20:79:8f:3f:83:eb:55:
         f5:b1:3f:fd:ea:50:0e:05:81:f2:a9:90:01:85:e5:21:bd:b8:
         d5:fb:6a:6f:74:dd:8b:22:6c:6c:4d:75:bf:94:9e:69:fa:8e:
         02:0d:93:54:0b:f2:b7:6f:63:44:ba:f6:d2:5c:fe:c9:03:0e:
         e9:5a:9b:70:51:0a:17:a4:14:67:81:97:49:99:71:36:55:2c:
         05:ed:76:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:45:40 2024 by rpki-client on console-ams.rpki-client.org