Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/WdTk06msRNC9r20JS7RhnXJvO6o.roa
File:                     WdTk06msRNC9r20JS7RhnXJvO6o.roa (raw, json)
Hash identifier:          EmPNEOmWbS5vL+EmuAHjUTYUoATRZKv4Jl/Hd5yJMfc=
Subject key identifier:   59:D4:E4:D3:A9:AC:44:D0:BD:AF:6D:09:4B:B4:61:9D:72:6F:3B:AA
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0954
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/WdTk06msRNC9r20JS7RhnXJvO6o.roa
Signing time:             Sun 30 Jun 2024 01:29:38 +0000
ROA not before:           Sun 30 Jun 2024 01:29:38 +0000
ROA not after:            Tue 24 Jun 2025 10:46:45 +0000
asID:                     9605
IP address blocks:        49.103.20.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 12:58:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2388 (0x954)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun 30 01:29:38 2024 GMT
            Not After : Jun 24 10:46:45 2025 GMT
        Subject: CN=59D4E4D3A9AC44D0BDAF6D094BB4619D726F3BAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:c0:1f:60:54:e5:26:16:43:26:4d:42:55:98:
                    3b:4c:00:cd:3d:6b:c4:43:18:dc:73:f4:88:b9:24:
                    a0:c6:4e:13:bd:c3:e3:9d:8c:d3:f6:b3:37:a6:f8:
                    60:3e:2d:97:05:27:80:7d:e9:13:fc:0e:64:d7:cc:
                    7a:e0:0d:57:e1:00:30:54:51:48:ea:54:41:9a:e8:
                    31:db:b3:0b:0c:22:08:5c:aa:49:e1:9b:3d:b6:ed:
                    dc:fb:09:11:dd:38:7d:e9:e5:d2:c6:46:98:f7:e4:
                    c6:7f:d0:f4:c4:05:99:a6:32:d4:10:05:9b:ca:9b:
                    60:f0:f4:46:c7:a7:fb:5e:b6:60:14:b1:98:58:54:
                    a3:14:12:19:dd:bd:40:75:e0:03:56:21:20:4f:54:
                    0b:d6:72:2c:d6:d7:b9:22:03:82:c8:ec:f6:aa:1a:
                    67:42:9b:17:25:a5:80:8e:58:3d:73:7a:d1:05:19:
                    0a:7c:68:9a:7f:39:83:eb:eb:a7:67:8a:c3:e4:19:
                    79:1f:e3:2d:02:d3:d8:6f:cd:59:92:16:f8:23:0f:
                    1f:96:0d:cd:79:db:1e:5b:01:51:cc:39:23:d0:37:
                    b4:9d:c9:a3:c8:85:78:47:6b:16:67:0b:46:43:36:
                    3e:5b:7b:a7:64:ce:4f:d1:78:5c:ff:b5:b8:b4:5b:
                    90:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:D4:E4:D3:A9:AC:44:D0:BD:AF:6D:09:4B:B4:61:9D:72:6F:3B:AA
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/WdTk06msRNC9r20JS7RhnXJvO6o.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.103.20.0/23

    Signature Algorithm: sha256WithRSAEncryption
         73:1b:01:d5:66:39:6e:43:cf:57:66:5b:9f:1f:b1:45:e2:fc:
         32:d8:8e:8c:2c:9e:a9:4a:7e:d6:f1:c8:3d:ec:c1:41:93:82:
         34:d6:62:f2:ab:e0:af:3a:a7:37:79:53:1c:c6:6a:0e:07:7e:
         95:9f:f9:e1:b0:d4:57:78:7f:1f:06:5b:bc:f1:a4:64:48:56:
         47:9a:7d:ea:51:97:13:9a:2c:9f:ac:51:c9:c8:91:c6:b1:25:
         4d:e0:e6:42:66:58:a0:55:6c:1a:98:5e:36:42:22:f4:74:d3:
         33:aa:9b:c4:b7:33:4a:fe:84:fe:1b:f3:88:18:25:50:32:70:
         2a:86:27:8b:00:dd:27:df:51:99:c5:6d:99:c0:89:00:5a:d7:
         b9:2a:12:ac:3c:45:1b:93:d7:5e:ed:3b:a3:c5:e0:9f:10:f0:
         10:a3:e8:ca:5a:bb:4c:b6:82:8d:17:18:a8:03:f7:f1:49:f6:
         76:59:c9:55:ec:9c:d5:f7:0d:cc:e7:91:55:05:80:54:8b:8a:
         87:46:04:e2:3b:e8:90:eb:10:07:df:da:8b:19:d1:31:c7:62:
         31:91:df:86:a4:02:a8:89:4d:78:fb:a3:6e:79:2a:41:0d:09:
         2d:ff:ab:62:13:98:07:e6:f6:4d:7f:48:8d:92:87:bc:9e:02:
         e9:66:e9:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:21:24 2024 by rpki-client on console-ams.rpki-client.org