Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/WcQErbSmmXX7iUVpwDJhpug3UKI.roa
File:                     WcQErbSmmXX7iUVpwDJhpug3UKI.roa (raw, json)
Hash identifier:          oV1nf90vlbmehzCWNkGjaMubNHyd0v/52mXN61lxK5Y=
Subject key identifier:   59:C4:04:AD:B4:A6:99:75:FB:89:45:69:C0:32:61:A6:E8:37:50:A2
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       048A
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/WcQErbSmmXX7iUVpwDJhpug3UKI.roa
Signing time:             Thu 27 Jul 2023 16:44:14 +0000
ROA not before:           Thu 27 Jul 2023 16:44:14 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     9605
IP address blocks:        49.108.128.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1162 (0x48a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jul 27 16:44:14 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=59C404ADB4A69975FB894569C03261A6E83750A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:6b:24:6e:4b:e0:64:e2:1c:74:31:b0:b4:70:
                    53:61:9e:1c:3c:ec:34:e4:d6:57:b9:d9:6f:d5:8a:
                    a8:be:da:53:c9:b0:be:3d:39:b4:87:0d:82:21:cb:
                    96:9d:b4:0f:ce:1d:79:18:b5:14:7a:eb:83:06:74:
                    48:06:6e:d1:96:2a:d9:7f:24:1b:d9:e7:84:94:fd:
                    32:b1:99:87:2f:63:ac:52:db:3d:7f:3a:18:78:69:
                    0b:63:af:2c:b3:bc:13:77:d6:97:31:02:95:98:2a:
                    ee:ae:55:5d:a2:d4:4e:6e:3a:ad:c3:39:cd:a9:08:
                    47:7f:f9:4a:1c:7f:7a:bb:92:b7:f3:39:89:4d:a8:
                    04:c1:6a:fd:54:b7:ad:c4:c3:29:60:53:bf:4b:14:
                    71:8e:86:00:1f:87:78:5e:cc:3d:50:14:08:65:ac:
                    85:fd:6c:cd:95:cc:b2:97:1c:dc:4f:c8:fb:7b:1c:
                    2a:57:df:10:93:41:cf:c1:f8:6c:95:0b:3c:b8:d0:
                    fb:4c:d8:b7:bc:b1:1d:78:3d:da:7a:e9:12:9e:31:
                    85:64:61:8e:6a:c1:17:26:f4:53:c5:0d:22:d4:cb:
                    03:cd:32:dc:49:ec:de:0c:35:60:58:c9:64:48:75:
                    ca:2d:88:d9:59:ed:ee:d2:c8:df:f4:e8:52:93:88:
                    e2:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:C4:04:AD:B4:A6:99:75:FB:89:45:69:C0:32:61:A6:E8:37:50:A2
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/WcQErbSmmXX7iUVpwDJhpug3UKI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.108.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         14:c0:fb:16:5c:b5:d0:79:24:67:34:da:71:58:a2:ac:85:20:
         2a:ef:7b:10:cb:cc:9e:9d:b1:ca:cf:5a:ca:7c:0a:5c:2e:93:
         00:2e:e9:36:04:17:f6:ab:41:c0:88:7f:5c:96:87:59:5d:69:
         06:e3:95:8a:f3:91:a4:97:2c:62:88:db:49:1e:85:b5:99:d4:
         ee:48:c7:d5:85:ff:45:91:83:14:e4:40:6d:cc:3c:63:21:c6:
         4d:f3:c7:45:83:a1:19:06:9b:3a:97:a5:c0:9c:0b:7e:5d:52:
         79:de:30:4b:4f:c8:e1:76:04:86:9a:05:97:98:f3:f1:4f:dc:
         89:d9:11:88:5a:e7:06:fd:51:49:e7:f4:89:6f:49:03:ac:da:
         dd:5e:4e:b8:b2:a2:41:98:db:7a:de:96:e9:78:9e:c7:84:5e:
         e1:f7:93:f1:ae:44:3e:d1:d0:8b:c5:c0:16:bb:af:ea:c5:45:
         ea:d6:71:8f:76:7a:f3:4b:92:6c:9f:9a:b2:7f:95:2b:67:1d:
         b2:67:fb:72:fe:b0:c8:21:c2:45:f8:ca:3a:80:94:5f:dd:fb:
         c8:6e:3b:d2:65:09:54:46:99:57:ca:29:6d:d7:4a:a3:f0:d5:
         fa:79:46:c9:12:9c:20:53:01:a0:6b:7c:a9:f8:8e:9b:49:db:
         8e:4f:a6:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 15:54:31 2024 by rpki-client on console-ams.rpki-client.org