Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Yks8g9taIa3NG4IiJJmVMnHdddA.roa
File:                     Yks8g9taIa3NG4IiJJmVMnHdddA.roa (raw, json)
Hash identifier:          mPusTy8G2zTEYPA02tNgCC61F1P6VoWxUEA7KrOEVg8=
Subject key identifier:   62:4B:3C:83:DB:5A:21:AD:CD:1B:82:22:24:99:95:32:71:DD:75:D0
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       05F6
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Yks8g9taIa3NG4IiJJmVMnHdddA.roa
Signing time:             Thu 29 Feb 2024 01:35:42 +0000
ROA not before:           Thu 29 Feb 2024 01:35:42 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     9605
IP address blocks:        49.97.102.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 23 Jun 2024 14:09:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1526 (0x5f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Feb 29 01:35:42 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=624B3C83DB5A21ADCD1B82222499953271DD75D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:ea:da:70:85:d4:81:ae:bd:a7:98:43:b3:2e:
                    ee:8f:11:cc:7b:86:fa:0e:d6:80:9f:23:b4:a7:66:
                    e5:f8:68:47:cb:6e:fe:f6:27:8e:a5:e5:8e:1a:c9:
                    d8:c1:ad:e1:16:7c:59:c8:72:06:76:b1:1b:fb:ec:
                    f0:d3:06:93:91:7e:ff:aa:13:95:68:ce:6e:c0:a2:
                    36:b3:e6:2b:cd:86:4c:03:7d:c9:e7:82:94:fc:e5:
                    48:3a:26:c9:04:d3:db:f4:10:f4:51:aa:0e:5a:1d:
                    c0:63:ab:07:fd:69:a0:39:c1:9e:d2:28:2e:0a:b3:
                    f1:d9:bf:2e:bc:56:63:9c:e1:f1:1a:b1:b2:71:23:
                    85:f1:23:9b:08:19:9b:8c:43:a8:62:5c:89:ee:56:
                    37:b3:5e:33:02:53:8a:4c:8d:00:04:1f:9d:60:6f:
                    4c:99:98:59:d8:14:be:86:fd:d8:13:f9:74:b0:cd:
                    1b:f9:f6:72:62:88:aa:f5:be:66:0b:69:d0:45:55:
                    39:9b:7a:2e:31:7d:b0:fe:5c:2e:1f:86:94:e9:9d:
                    43:8c:b9:9a:65:e2:f1:65:b9:2a:ec:2e:01:2a:ab:
                    d1:f7:dc:50:e7:30:01:c2:a9:3e:90:04:9c:06:fb:
                    de:e3:3c:c8:e9:97:bc:07:20:be:26:2e:fb:7d:21:
                    d3:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:4B:3C:83:DB:5A:21:AD:CD:1B:82:22:24:99:95:32:71:DD:75:D0
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Yks8g9taIa3NG4IiJJmVMnHdddA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.97.102.0/23

    Signature Algorithm: sha256WithRSAEncryption
         43:db:a3:76:4f:b0:c5:cd:76:8c:9a:59:20:1c:19:a4:ec:a2:
         dd:cb:6b:61:2f:94:a5:3a:d0:7f:4f:87:11:c0:2a:ed:8d:1d:
         5a:76:83:59:be:8d:be:f6:d1:ae:eb:87:62:cb:26:54:3a:18:
         8e:19:9a:3b:cb:10:d5:12:53:44:33:ef:c7:04:1b:6e:27:8a:
         cc:f2:36:ea:d2:db:82:4c:17:73:43:94:10:d6:24:7c:84:f6:
         ac:75:0d:44:a2:8d:68:26:b4:91:a2:f4:ce:76:b8:92:b0:75:
         7c:92:07:f2:87:c3:c8:c6:91:3d:eb:7e:9c:98:00:99:d7:2b:
         a6:5b:ef:44:9d:fa:ea:b7:97:5c:58:37:59:a6:cd:ab:71:8f:
         bc:ef:ac:1e:f2:dc:01:22:e0:91:3e:2d:31:7a:ae:7d:30:71:
         21:e9:e0:d4:a2:9c:19:ef:94:65:13:25:87:e7:dd:24:c3:3c:
         d7:2a:24:7d:a9:07:1f:7c:b8:1c:29:81:b5:72:95:dc:17:66:
         ef:9f:e8:2b:77:43:1a:bf:99:22:f7:d2:71:e5:e6:8d:99:04:
         96:78:61:29:f4:dc:97:0c:e1:3f:5f:b4:8d:8c:02:fe:23:ac:
         bf:3d:76:5e:e5:c2:74:cf:3c:a6:c2:a1:c6:4e:76:77:33:d4:
         bb:8c:27:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 11:39:12 2024 by rpki-client on console-fra.rpki-client.org