Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/WkgdKzMvUJNoEPgzmay_MeaHUeI.roa
File:                     WkgdKzMvUJNoEPgzmay_MeaHUeI.roa (raw, json)
Hash identifier:          +L7pcei+oa1UhYl5MBcQftj4qqbHP+qabsVVLjnvOgo=
Subject key identifier:   5A:48:1D:2B:33:2F:50:93:68:10:F8:33:99:AC:BF:31:E6:87:51:E2
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0785
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/WkgdKzMvUJNoEPgzmay_MeaHUeI.roa
Signing time:             Tue 30 Apr 2024 02:04:43 +0000
ROA not before:           Tue 30 Apr 2024 02:04:43 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        49.97.51.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1925 (0x785)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr 30 02:04:43 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=5A481D2B332F50936810F83399ACBF31E68751E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f6:82:64:94:b6:e6:28:e3:65:c3:4b:59:3d:
                    32:fc:e0:75:5a:b0:41:ea:21:0a:a5:b7:87:9e:8a:
                    a5:17:c2:89:cf:85:89:9f:ab:95:58:8e:f9:80:3f:
                    b2:73:b5:a9:46:a2:b9:4f:46:2d:28:10:96:4b:7a:
                    4a:5c:0f:39:c2:44:c5:78:9e:39:27:a7:99:4d:58:
                    a7:d9:d7:92:fd:40:6c:da:c1:c4:20:cd:d6:82:12:
                    f7:32:fc:6b:82:7b:0a:f7:a5:8e:b7:cd:f4:64:3c:
                    36:ed:22:3e:e0:f5:e9:02:2a:15:d7:25:3d:a1:5c:
                    b4:f9:30:b6:8f:80:18:91:8e:e8:b3:c3:de:b8:74:
                    4c:6f:6f:d0:4c:4f:7d:da:73:e0:4a:d0:64:89:1d:
                    9d:39:7b:a8:aa:81:95:1b:93:fc:6f:24:81:5d:64:
                    3e:ec:16:88:33:e8:7a:b1:27:23:26:5b:b4:57:6b:
                    25:ae:09:49:4d:12:05:42:f6:c4:37:97:ea:0c:1f:
                    b1:16:22:42:f7:09:f7:07:4b:7c:5c:74:7d:e9:22:
                    36:d0:01:29:ac:d5:fa:06:b3:c1:94:0e:b5:4d:9e:
                    55:8d:7c:00:f0:61:ee:18:b5:1d:7b:21:d3:c2:03:
                    47:1b:be:46:87:3c:be:19:8e:4a:9a:9a:bd:7f:3f:
                    6b:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:48:1D:2B:33:2F:50:93:68:10:F8:33:99:AC:BF:31:E6:87:51:E2
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/WkgdKzMvUJNoEPgzmay_MeaHUeI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.97.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:41:33:fc:4c:84:76:cf:82:62:92:cd:10:47:ea:c3:41:f0:
         b6:e4:33:f1:dd:63:97:49:ab:0d:e9:11:3a:2e:e9:6f:10:50:
         d9:4d:a3:59:e2:6d:f3:a0:18:56:cb:74:6b:bf:35:f3:40:e9:
         48:31:b0:ac:17:df:cd:7a:3b:e2:ae:9e:40:b2:4d:17:c9:6b:
         5c:23:13:10:ee:bc:9d:45:5d:84:0c:13:a7:1e:7c:6d:2a:17:
         1e:f2:b6:32:5d:4a:7f:f5:24:61:d7:34:99:04:6b:3c:4f:2a:
         e5:7e:97:92:d5:0a:93:72:c8:bb:03:97:75:6a:6a:ee:6f:cc:
         68:16:9c:18:fa:23:15:07:06:db:f4:90:b2:b9:e2:26:34:be:
         48:f1:7c:32:51:42:4e:94:fc:5b:ea:03:a5:9e:26:5a:c2:74:
         29:1a:1f:72:82:f7:0b:9a:3f:3f:56:69:79:06:9d:ad:2f:93:
         96:e2:5d:c8:da:bd:92:81:83:04:15:09:7e:62:1b:b4:2d:1b:
         41:3a:31:d2:de:f9:a9:ad:8b:c8:36:cb:f5:a1:91:62:c7:0f:
         7b:c9:0f:a3:78:19:ff:00:93:0f:49:fa:fb:32:ee:f2:dd:82:
         4e:65:ca:b3:6a:d1:7e:28:37:d5:38:28:a5:ca:ce:c4:d1:5e:
         9c:74:66:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:38:47 2024 by rpki-client on console-fra.rpki-client.org