Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/V-jgym65eba5XjI5ur2dcJbyJCE.roa
File:                     V-jgym65eba5XjI5ur2dcJbyJCE.roa (raw, json)
Hash identifier:          WKia2vUkNR4/ONJHID9p9KQ1tm4hs27qER/sZdmawFI=
Subject key identifier:   57:E8:E0:CA:6E:B9:79:B6:B9:5E:32:39:BA:BD:9D:70:96:F2:24:21
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       03F9
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/V-jgym65eba5XjI5ur2dcJbyJCE.roa
Signing time:             Tue 06 Jun 2023 16:03:50 +0000
ROA not before:           Tue 06 Jun 2023 16:03:50 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.104.32.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 May 2024 13:36:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1017 (0x3f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun  6 16:03:50 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=57E8E0CA6EB979B6B95E3239BABD9D7096F22421
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:48:4c:85:da:32:ba:2e:be:23:58:5e:12:51:
                    76:14:90:9d:1a:00:40:1d:f1:5d:97:13:b6:09:fa:
                    35:25:e2:49:7d:d6:38:17:44:ff:0c:b4:d1:2d:c6:
                    a2:72:b2:6e:66:1f:4b:8c:14:6e:8d:90:c4:5b:cd:
                    67:46:67:8b:a0:f3:5e:29:f9:f0:99:41:50:a3:63:
                    28:5c:5d:c7:59:f4:d3:32:26:0e:06:79:f0:7e:b0:
                    65:18:61:ad:e8:00:7f:ca:39:b0:35:91:dc:dd:80:
                    d8:b5:0c:f8:f4:8c:8f:62:b9:8e:1e:f0:26:cb:62:
                    63:b0:88:c0:d7:01:e3:5a:ca:e8:da:dd:71:a1:29:
                    1a:c1:19:af:9f:5e:f3:9e:99:0a:4e:29:b1:99:8b:
                    fd:e1:0d:0d:97:ff:2f:0e:72:0d:1e:6d:c9:42:4d:
                    c5:1a:a4:33:44:c7:1e:12:fd:01:14:5e:dc:f0:91:
                    00:bd:67:bc:01:fb:4d:15:fd:3e:9e:d0:fa:c2:00:
                    22:7b:db:94:35:19:46:9b:5d:40:28:e3:ea:b5:74:
                    02:1e:c4:38:ad:ff:6c:8a:3e:aa:0a:11:46:22:a2:
                    47:35:c3:43:fa:eb:95:14:a9:09:2f:80:dc:4c:ba:
                    74:0b:5e:b4:7a:80:6e:62:09:ef:5d:2b:16:c1:0d:
                    b2:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:E8:E0:CA:6E:B9:79:B6:B9:5E:32:39:BA:BD:9D:70:96:F2:24:21
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/V-jgym65eba5XjI5ur2dcJbyJCE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.104.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:e1:62:71:d6:fe:62:a0:2f:ca:bd:ce:26:d0:3a:6c:57:e7:
         38:03:ff:f6:c0:5a:ec:5d:1e:d5:4b:ba:35:6b:0c:48:fd:ab:
         83:6c:9a:36:0e:37:5b:f2:11:14:1f:31:80:37:80:ec:8d:fe:
         8a:88:7e:d3:fa:02:24:99:b9:90:98:f8:1d:43:5f:04:b2:cb:
         b9:51:9f:c3:af:0f:39:2e:87:94:53:46:be:53:77:04:ab:61:
         33:7b:37:78:f6:f5:68:ad:ee:32:25:c1:dc:4b:13:ae:fe:44:
         d4:3c:7a:cf:fc:13:d1:e6:bd:6a:80:06:83:a1:22:57:dd:d0:
         8a:21:54:28:5f:89:de:5f:50:39:fa:73:17:1e:ba:a5:76:db:
         8c:4f:e6:01:5b:e6:92:b7:53:8a:7a:2f:4a:82:61:5d:3b:72:
         4f:70:dd:28:0b:39:e7:19:65:3b:3c:f9:4a:b9:1c:42:52:f1:
         46:d5:0e:05:b8:9e:4a:51:af:00:05:12:36:ea:15:ad:61:54:
         80:81:e4:b3:c3:b5:ba:4c:ae:ca:e3:27:5b:e5:c9:0b:21:39:
         73:f1:ec:7d:90:de:2f:1c:11:78:ee:e3:68:33:ed:d3:3c:29:
         33:bb:55:40:86:6b:6a:fe:43:90:b7:6c:71:ce:e0:e1:8d:1d:
         e1:c2:d3:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:15:56 2024 by rpki-client on console-ams.rpki-client.org