Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/YrbW6roGgLKSGSstqsKlkha4pPk.roa
File:                     YrbW6roGgLKSGSstqsKlkha4pPk.roa (raw, json)
Hash identifier:          SmtMWWT9zCxba2zpUxZ6EQhXYWaVc2AVujVJCKki9lU=
Subject key identifier:   62:B6:D6:EA:BA:06:80:B2:92:19:2B:2D:AA:C2:A5:92:16:B8:A4:F9
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       069F
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/YrbW6roGgLKSGSstqsKlkha4pPk.roa
Signing time:             Tue 30 Apr 2024 01:43:13 +0000
ROA not before:           Tue 30 Apr 2024 01:43:13 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        49.104.50.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1695 (0x69f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr 30 01:43:13 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=62B6D6EABA0680B292192B2DAAC2A59216B8A4F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:fa:82:95:e4:88:20:45:19:20:1a:32:00:e6:
                    39:f9:e4:95:d7:ae:a0:49:04:f1:c3:5a:fc:90:2d:
                    fc:5d:6a:b4:dd:e5:7e:70:7f:42:0e:af:f7:aa:d4:
                    42:3e:d3:44:c7:f3:66:96:e0:ad:62:f1:2f:5f:31:
                    ac:84:6e:17:62:74:9e:7a:5b:db:12:ef:6b:4f:5d:
                    cf:0d:25:a7:67:da:63:99:0d:25:ef:33:0a:7f:ff:
                    68:ef:18:88:68:9f:e9:b6:45:58:05:11:a1:44:2d:
                    b4:b3:6f:86:3a:3b:93:79:fd:67:ad:87:23:50:9d:
                    6f:6b:cd:75:91:6c:cd:c8:4b:fb:5c:4a:c1:be:b2:
                    38:a5:7f:77:45:df:5c:f7:a6:9c:23:e9:66:41:d4:
                    fb:d1:4d:c0:92:0d:c9:e6:17:75:05:be:00:61:ab:
                    a3:5d:37:06:6a:94:0f:1f:27:d1:7f:9a:1a:2d:70:
                    3c:97:2f:bc:8e:99:23:97:64:2a:c0:06:8b:0b:91:
                    2a:d5:89:11:a4:dc:9b:52:47:73:0e:d5:a1:3b:8e:
                    73:01:2b:39:56:f5:8b:75:61:52:a0:db:d3:5c:2e:
                    ac:28:b4:13:c4:57:dc:87:e4:88:19:83:59:4a:40:
                    c5:5f:11:46:10:88:22:3f:d9:81:da:44:76:e7:fe:
                    e9:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:B6:D6:EA:BA:06:80:B2:92:19:2B:2D:AA:C2:A5:92:16:B8:A4:F9
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/YrbW6roGgLKSGSstqsKlkha4pPk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.104.50.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d6:a8:de:ff:8f:dd:bd:c4:8b:d2:b1:d6:15:18:75:51:ef:48:
         96:98:80:d7:b2:5f:60:f6:8b:8d:d6:43:e1:c6:2f:84:7b:20:
         78:aa:84:cf:71:5b:fd:4b:cc:38:4b:91:1f:e9:32:36:b2:a2:
         23:a6:ee:5b:a8:46:45:62:2d:e4:97:37:99:80:2a:d0:e7:6e:
         7e:b4:a2:2f:26:59:03:7c:40:36:cb:a2:7a:48:6a:f8:1f:52:
         b7:c3:e5:a4:a2:68:46:95:37:87:c1:cd:15:5e:b1:c1:80:0a:
         b3:0b:c1:71:f4:8d:a4:da:6f:73:be:82:97:fe:6a:5a:8a:88:
         c8:b1:93:e7:0a:37:c7:44:1e:8d:4c:92:1e:67:f6:08:6b:98:
         75:00:90:1c:bb:6c:a5:6b:e3:8b:f6:79:18:81:f1:2b:c6:d9:
         1a:bd:18:01:e3:02:22:1f:e6:ba:e8:8d:3e:ca:93:85:ed:90:
         4f:15:8b:71:b1:4b:85:e6:f5:0f:9b:4d:ed:db:44:1b:34:d8:
         d0:92:5a:d7:a9:3b:bb:7a:1f:5c:7b:6d:c3:6b:56:eb:50:ef:
         66:b6:05:bf:1a:75:80:4f:01:3e:63:9c:e1:03:d7:88:bd:8a:
         85:bd:d3:6d:40:07:32:da:70:e0:64:6e:9e:c5:86:27:28:3c:
         18:f0:9d:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 15:54:31 2024 by rpki-client on console-ams.rpki-client.org