Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Z9q8etz9uEbr60Dau7JT5_I61DA.roa
File:                     Z9q8etz9uEbr60Dau7JT5_I61DA.roa (raw, json)
Hash identifier:          tUm8ugxWH1B9jrOurc4JBben+/pkWoFQ15OYzCpbxsE=
Subject key identifier:   67:DA:BC:7A:DC:FD:B8:46:EB:EB:40:DA:BB:B2:53:E7:F2:3A:D4:30
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       09B0
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Z9q8etz9uEbr60Dau7JT5_I61DA.roa
Signing time:             Sun 30 Jun 2024 01:38:20 +0000
ROA not before:           Sun 30 Jun 2024 01:38:20 +0000
ROA not after:            Tue 24 Jun 2025 10:46:45 +0000
asID:                     9605
IP address blocks:        49.100.192.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2480 (0x9b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun 30 01:38:20 2024 GMT
            Not After : Jun 24 10:46:45 2025 GMT
        Subject: CN=67DABC7ADCFDB846EBEB40DABBB253E7F23AD430
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:d4:1a:08:41:bc:88:4f:27:c5:93:d7:82:83:
                    2f:cc:17:80:de:2e:14:53:9a:60:60:fe:f0:98:b9:
                    99:90:65:1d:64:aa:07:ac:80:8c:bf:48:e2:98:4a:
                    f2:88:66:18:6d:81:50:82:f4:d3:20:d2:38:52:2e:
                    f8:4f:3c:0f:64:35:d0:e0:12:af:f5:c5:b6:cf:b9:
                    67:1f:62:11:f3:30:fb:65:0a:ab:9b:ae:b8:ec:8d:
                    6f:34:58:af:b8:a3:37:d8:b1:06:ad:95:bc:4f:ad:
                    91:37:d2:4a:28:40:67:64:79:74:f6:db:45:c9:59:
                    f7:4d:05:44:42:09:d4:18:18:79:8e:83:70:5c:fe:
                    0e:c6:f1:78:14:01:0d:1c:d9:df:26:58:a6:45:90:
                    c5:9b:b0:a1:00:72:dc:88:c6:4b:1e:71:ad:1a:9f:
                    25:3f:40:26:9a:72:e6:6d:20:9e:bb:c9:26:00:97:
                    76:a7:95:f4:ad:b5:f9:58:b7:58:b9:e9:eb:d7:d7:
                    51:65:33:6e:a5:fb:5e:78:62:46:9d:83:6c:18:16:
                    cc:a8:d9:f9:d4:fa:b3:36:45:79:36:61:50:cc:b5:
                    c6:bf:19:92:c3:9a:fb:96:84:9e:38:21:d4:8d:f5:
                    70:c5:89:a5:fb:fe:98:cc:11:6c:16:c3:06:0e:03:
                    45:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:DA:BC:7A:DC:FD:B8:46:EB:EB:40:DA:BB:B2:53:E7:F2:3A:D4:30
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Z9q8etz9uEbr60Dau7JT5_I61DA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.100.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         56:c2:73:d9:7a:e3:d1:9e:4b:dd:aa:64:71:39:8b:bf:57:6d:
         87:98:63:07:a8:c8:46:77:dc:e5:4c:5a:4d:20:43:fa:ff:b0:
         67:fc:aa:a4:a7:ed:39:a5:23:f8:21:3b:5a:af:37:d7:b5:0b:
         8b:a0:2b:4c:b6:70:fc:b5:c2:4d:72:f0:2c:f8:d9:bc:93:11:
         2e:57:36:5c:51:f1:11:0f:0d:fa:93:93:f4:00:f9:93:af:5e:
         e1:7d:8c:0c:6b:49:a4:00:5d:b2:72:69:79:a1:fb:04:1c:3c:
         81:48:8b:8f:09:b4:12:a4:a2:32:3f:b9:96:5b:46:b4:7b:40:
         46:8e:8f:3f:fd:5f:c6:71:91:6c:b8:db:aa:17:d5:e7:a9:a7:
         d2:63:95:03:5e:1d:f8:17:06:42:99:2a:0e:ae:68:f4:e0:a0:
         5d:7d:49:fe:c0:d3:98:ff:04:c6:2e:de:0f:d0:ca:2a:c5:21:
         97:39:c5:79:ed:ac:a6:41:43:05:44:8a:5f:fc:7d:2c:0e:d3:
         f1:7a:57:e0:23:12:98:43:5c:20:78:12:4b:91:bd:d0:10:c9:
         4c:aa:0f:b9:fa:d6:cd:81:c8:a3:e0:aa:81:43:09:73:bc:66:
         cd:85:fa:99:13:1a:03:bf:c3:c1:09:7a:82:1a:36:68:9f:56:
         f9:32:d9:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:18:46 2025 by rpki-client