Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Vc9tNMeP5J_Lh4vE6bOPG8hNhNk.roa
File:                     Vc9tNMeP5J_Lh4vE6bOPG8hNhNk.roa (raw, json)
Hash identifier:          qCbVRlCKdTogQzBAqkfmIIVdxAxzsIXQr1RmYogTX6A=
Subject key identifier:   55:CF:6D:34:C7:8F:E4:9F:CB:87:8B:C4:E9:B3:8F:1B:C8:4D:84:D9
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0A83
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Vc9tNMeP5J_Lh4vE6bOPG8hNhNk.roa
Signing time:             Sun 30 Jun 2024 01:52:33 +0000
ROA not before:           Sun 30 Jun 2024 01:52:33 +0000
ROA not after:            Tue 24 Jun 2025 10:46:45 +0000
asID:                     9605
IP address blocks:        49.108.240.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2691 (0xa83)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun 30 01:52:33 2024 GMT
            Not After : Jun 24 10:46:45 2025 GMT
        Subject: CN=55CF6D34C78FE49FCB878BC4E9B38F1BC84D84D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:24:74:fa:63:d2:a6:93:ac:ca:68:03:3e:75:
                    2b:17:5d:d2:cf:9c:21:88:dc:b8:82:73:18:9d:75:
                    88:17:d1:06:87:c8:48:75:d1:ee:94:0d:ec:4c:71:
                    22:91:8e:77:bc:7e:f9:a2:fe:37:8c:2d:d0:18:7b:
                    ae:38:3e:8b:a7:54:d2:1c:d6:f2:f8:7a:99:fc:47:
                    18:2c:f7:16:59:75:5a:48:4c:b3:80:be:7e:0a:01:
                    83:ec:08:47:56:85:f5:68:48:e7:75:b6:7a:82:8e:
                    1b:20:d5:42:66:e7:76:5a:58:7a:d0:da:1f:b3:9e:
                    0d:e0:9f:74:f7:37:93:21:2c:8f:43:10:97:46:fc:
                    96:83:3c:b5:78:50:6c:ac:43:8b:4e:85:89:f3:6c:
                    9b:8a:1f:f6:a8:ec:b4:31:54:c8:5a:4f:ea:0f:06:
                    79:b5:f8:6e:29:88:4e:31:16:2b:88:d6:62:5a:cf:
                    21:0d:82:ff:71:ca:34:81:63:01:3a:a2:e5:0b:c8:
                    20:77:64:e6:80:78:2e:36:91:4d:1e:9f:02:23:4b:
                    19:75:d1:2d:49:fe:b4:cc:ea:31:f4:93:a6:aa:d0:
                    41:85:2e:f9:71:d8:63:e3:37:cd:49:21:4a:42:f2:
                    37:f2:7a:1c:00:35:5f:f9:9c:a8:b4:b7:ac:a4:75:
                    38:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:CF:6D:34:C7:8F:E4:9F:CB:87:8B:C4:E9:B3:8F:1B:C8:4D:84:D9
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Vc9tNMeP5J_Lh4vE6bOPG8hNhNk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.108.240.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:c9:67:6b:4e:53:8d:8f:4c:d6:15:c7:e1:ec:3b:7f:a1:9c:
         2b:b6:75:93:a4:9f:e3:f3:7d:c7:74:34:58:94:a1:15:50:4a:
         81:a4:96:e4:26:a5:e5:7d:53:f9:03:8d:e6:ea:72:18:90:5d:
         7d:3d:4d:66:3e:2c:6e:2d:12:cc:e1:5d:67:21:73:83:c5:12:
         9b:a9:ff:b0:16:db:46:ce:31:c5:89:bc:74:03:94:24:98:95:
         5c:87:25:53:de:77:09:64:82:86:7d:2b:72:05:c6:4c:ff:62:
         19:ba:fc:d5:a8:8d:c6:cb:e5:21:73:55:46:03:ae:25:76:fa:
         05:95:27:84:e5:f6:00:bc:a3:ee:4c:c5:c4:94:82:31:a9:60:
         7c:c0:2f:27:87:68:e1:20:bb:ea:c7:3f:4f:7f:01:a3:97:f8:
         2a:09:26:6d:49:c0:f4:4e:68:96:11:19:3a:68:10:d2:06:8f:
         4f:22:bd:40:4a:90:77:6f:ee:d3:1f:f4:11:6a:b8:3c:df:c2:
         f4:21:f9:f9:93:04:43:de:35:72:ba:3f:fe:22:4c:9e:c6:4f:
         3c:d6:c8:9e:95:2e:d4:1c:05:a5:24:fb:13:34:62:59:46:97:
         79:a4:70:1b:04:da:5b:4b:da:1e:c4:e3:6b:13:ba:95:68:bb:
         84:02:28:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:54:41 2024 by rpki-client on console-ams.rpki-client.org