Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Wx1zvXuRQ94aR2tjuK1cAR1XPWA.roa
File:                     Wx1zvXuRQ94aR2tjuK1cAR1XPWA.roa (raw, json)
Hash identifier:          iM0ma/dU5xhZGMCBxJDp71qIMSTFpUwxCH6cMHEiuyY=
Subject key identifier:   5B:1D:73:BD:7B:91:43:DE:1A:47:6B:63:B8:AD:5C:01:1D:57:3D:60
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       04AA
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Wx1zvXuRQ94aR2tjuK1cAR1XPWA.roa
Signing time:             Thu 27 Jul 2023 16:46:15 +0000
ROA not before:           Thu 27 Jul 2023 16:46:15 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     9605
IP address blocks:        49.111.0.0/17 maxlen: 17

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 23 Jun 2024 11:53:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1194 (0x4aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jul 27 16:46:15 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=5B1D73BD7B9143DE1A476B63B8AD5C011D573D60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:67:e3:c7:78:31:91:50:33:8b:2d:b8:eb:26:
                    4b:da:3e:92:8f:25:39:dc:f2:f9:d4:c1:24:24:f7:
                    84:d3:80:c8:a1:53:7a:34:6b:36:81:19:6d:c2:47:
                    35:52:c5:ee:38:ee:51:6b:58:1e:9b:e5:a4:2f:40:
                    aa:fc:79:ff:48:27:06:4c:d1:f6:bd:06:bf:17:fb:
                    13:af:fa:32:6a:75:5c:62:f5:4c:b3:3d:b7:99:a1:
                    47:85:86:24:e1:87:31:24:da:63:47:b7:1f:75:e6:
                    73:3c:fb:68:ee:c9:2e:0c:c0:2f:1d:9a:e1:d8:97:
                    78:d3:93:17:15:45:da:53:a2:0e:dd:9f:e1:2f:10:
                    3e:8d:a4:d2:35:cb:1f:e5:06:b8:74:dd:08:c6:1a:
                    ab:7b:fa:5b:39:50:be:c4:7c:ef:2c:5f:9a:32:a5:
                    1a:76:03:0a:73:29:c2:2c:cb:e2:db:32:91:db:7c:
                    6c:b8:ff:74:51:0c:6c:54:8a:1e:00:ac:a5:15:29:
                    4b:1a:14:e3:3c:4c:b4:f5:23:e9:a8:38:22:df:d2:
                    a6:02:fd:5c:13:51:56:b1:e6:f3:96:67:1d:c5:60:
                    f0:63:b4:15:bd:c9:42:17:fc:8a:9d:84:86:bf:28:
                    69:16:20:6f:45:f2:8b:b5:41:78:b3:f0:ad:0f:e4:
                    f7:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:1D:73:BD:7B:91:43:DE:1A:47:6B:63:B8:AD:5C:01:1D:57:3D:60
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Wx1zvXuRQ94aR2tjuK1cAR1XPWA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.111.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         98:4e:c5:82:23:b1:16:d5:6d:fa:8c:10:a5:f1:f0:98:70:f8:
         12:37:4d:5a:f2:e0:3b:eb:63:06:d7:de:8d:bc:fa:c5:ee:92:
         da:86:9d:ac:77:8c:e1:78:5c:a3:b9:f8:b5:ad:d6:bd:39:e0:
         fa:18:b6:b4:da:a5:0a:c5:9a:83:89:bc:6c:04:e9:1e:58:17:
         4b:db:54:19:9b:bf:e7:d1:14:0d:c5:4a:e0:7f:4d:41:59:06:
         80:be:38:31:91:1d:75:6d:44:ef:12:4d:c4:e0:17:ee:e3:79:
         1c:4c:5a:2d:1a:36:6e:06:e2:64:c5:06:42:a9:26:60:2a:9a:
         74:d0:df:21:e6:14:44:d2:a6:49:27:f0:e4:b8:95:aa:f7:e3:
         87:8f:d6:7f:ec:11:43:45:b7:4d:31:42:50:29:1f:cf:9f:fe:
         49:12:ed:63:98:b4:f4:fb:29:2d:04:c4:22:62:de:a2:d3:f0:
         02:31:21:07:d3:a7:f1:18:32:82:15:b4:b5:ca:fc:fb:e4:56:
         02:4b:35:e5:57:1d:87:e6:db:26:02:77:80:d4:cb:f5:24:06:
         1a:c1:a5:f0:a1:88:3e:8f:f9:bd:82:70:ad:b2:9f:dc:8e:75:
         45:37:f5:cc:a0:94:5f:32:8a:f1:da:ca:f7:ef:bc:7c:51:81:
         3d:ad:2c:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 12:57:21 2024 by rpki-client on console-fra.rpki-client.org