Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Z67nyU3IEcZ5ZhsZwDSPVs3Caw8.roa
File:                     Z67nyU3IEcZ5ZhsZwDSPVs3Caw8.roa (raw, json)
Hash identifier:          vDPjVhfbU5LLpTHIddOecmKFQviRVsz5q6Ib1Ma1K1Q=
Subject key identifier:   67:AE:E7:C9:4D:C8:11:C6:79:66:1B:19:C0:34:8F:56:CD:C2:6B:0F
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0A08
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Z67nyU3IEcZ5ZhsZwDSPVs3Caw8.roa
Signing time:             Sun 30 Jun 2024 01:44:15 +0000
ROA not before:           Sun 30 Jun 2024 01:44:15 +0000
ROA not after:            Tue 24 Jun 2025 10:46:45 +0000
asID:                     9605
IP address blocks:        49.110.32.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2568 (0xa08)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun 30 01:44:15 2024 GMT
            Not After : Jun 24 10:46:45 2025 GMT
        Subject: CN=67AEE7C94DC811C679661B19C0348F56CDC26B0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:64:f8:6a:b4:3c:8f:fd:d8:70:11:05:76:06:
                    80:41:2d:c1:30:74:fd:31:cd:14:3c:a6:27:c7:71:
                    f6:6f:ca:60:31:36:33:84:6d:85:ec:69:82:29:23:
                    60:9b:79:06:1f:89:df:bd:71:ff:cb:01:bb:22:61:
                    08:e0:88:65:1d:7b:80:ab:6a:dd:35:b5:40:76:8e:
                    cd:c1:45:09:f5:e8:d6:da:34:7c:aa:1d:4c:2c:cd:
                    ba:87:d4:36:cb:59:4f:3d:be:6d:02:65:24:f6:a7:
                    c2:b5:c1:eb:80:9d:8c:f6:b1:fa:0a:fb:cd:9f:d4:
                    25:f4:22:e6:1d:d2:d2:ac:35:7b:ff:ba:a4:bb:a2:
                    0c:0e:b6:2d:7f:df:b1:99:70:2c:00:be:f3:6c:4e:
                    68:04:b9:97:f7:d6:7f:3a:6f:fb:50:53:f2:c8:91:
                    28:a6:9d:bd:56:75:6e:d5:76:1f:12:18:c5:8d:19:
                    96:a1:40:a7:da:61:7f:d2:15:e5:5c:93:9d:c4:cb:
                    3a:46:d1:51:ae:7b:30:b2:3e:45:37:ea:54:c7:5a:
                    36:ee:7a:50:33:68:26:56:d3:7f:fd:6d:5d:2e:27:
                    16:5b:97:82:9d:74:08:e5:59:b0:e3:22:bd:6a:6e:
                    1b:ed:ef:bb:44:fd:b1:49:ad:fb:3f:53:ed:df:84:
                    b6:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:AE:E7:C9:4D:C8:11:C6:79:66:1B:19:C0:34:8F:56:CD:C2:6B:0F
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Z67nyU3IEcZ5ZhsZwDSPVs3Caw8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.110.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         28:6a:07:1f:70:c1:ca:2a:fd:b5:b9:52:ce:aa:50:73:50:9e:
         6b:27:9d:03:90:c0:59:f4:11:98:95:89:9b:5c:57:de:ac:30:
         11:6a:01:24:0e:fa:e9:f9:b0:91:d9:f7:06:dd:b2:cb:cd:84:
         17:05:5f:3f:c0:0f:6f:9f:ac:53:b6:a3:d5:f6:1c:35:f4:48:
         16:74:8f:26:d0:e8:14:72:f0:52:9d:1f:d6:03:9b:e8:35:c3:
         95:a5:35:ba:2e:ce:4e:bb:e4:6f:07:d1:97:03:bd:ee:0e:3c:
         70:df:15:b3:5b:fd:58:4b:db:a7:d9:01:8b:88:4f:d6:a2:ca:
         b6:f1:68:71:3f:a2:ff:47:67:36:32:ae:d8:8f:cc:b7:b9:c9:
         16:6f:11:b4:d1:b6:64:fd:60:2d:10:f0:e4:57:ea:82:9f:80:
         90:cb:68:30:3a:d6:a2:04:a7:f4:07:6b:65:88:5f:49:16:ed:
         01:3e:6c:f2:81:b9:07:46:a1:5d:2b:ec:6f:89:df:6f:cf:a2:
         94:62:28:69:bb:c0:c0:b6:84:0c:18:cf:22:30:10:91:de:8c:
         ad:7f:5b:a8:59:0a:31:74:31:f7:46:c6:f0:b2:ab:3a:56:e0:
         57:38:5d:3f:45:73:1a:1f:58:80:ac:43:bb:4a:2f:01:54:bb:
         f7:4f:83:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:54:41 2024 by rpki-client on console-ams.rpki-client.org