Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/ZpaRudO0ao6smZBCtXXQdLCtAMk.roa
File:                     ZpaRudO0ao6smZBCtXXQdLCtAMk.roa (raw, json)
Hash identifier:          BNsYv/+L52pXZ3CoCEGsiAnOENofWXAOihqWGsNTf4E=
Subject key identifier:   66:96:91:B9:D3:B4:6A:8E:AC:99:90:42:B5:75:D0:74:B0:AD:00:C9
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0878
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ZpaRudO0ao6smZBCtXXQdLCtAMk.roa
Signing time:             Tue 30 Apr 2024 02:18:35 +0000
ROA not before:           Tue 30 Apr 2024 02:18:35 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        49.108.238.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2168 (0x878)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr 30 02:18:35 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=669691B9D3B46A8EAC999042B575D074B0AD00C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f4:13:e6:f6:e1:86:6c:7f:6f:ca:0e:74:37:
                    9b:1b:79:b1:fc:b5:65:a0:62:f0:e1:6c:47:99:29:
                    8a:bc:04:18:1e:b4:70:13:6d:1a:37:82:68:69:48:
                    b7:c0:a1:e5:ec:bd:18:04:27:8f:05:a8:ca:f6:9a:
                    ad:4d:c1:d9:c5:e1:fb:47:22:f6:c6:a6:90:f2:7b:
                    e0:40:6b:bb:9f:97:b8:47:6a:ff:ae:39:5c:46:65:
                    fa:03:ee:43:8b:b0:78:58:65:43:50:6b:a7:a9:83:
                    63:1f:2f:ff:ab:4b:81:a4:cb:dc:7e:2c:54:6d:82:
                    30:82:7d:2f:5c:db:8e:df:c2:ef:e7:59:b6:63:3b:
                    8e:23:f8:29:41:6b:89:d2:ab:8c:1b:57:48:b1:f6:
                    4b:76:28:81:d1:89:3e:a6:cc:f1:93:fb:bb:9c:13:
                    dd:4d:ec:67:c8:f1:e7:92:e1:95:3e:45:65:ef:57:
                    42:3a:1a:a6:ed:de:48:7a:ca:ff:e6:8d:0e:0a:63:
                    db:1a:56:09:8d:8b:e2:cf:49:54:07:83:d7:ed:e0:
                    da:e4:d2:8f:24:b5:c6:76:3b:3f:ad:e4:a1:7b:e8:
                    e0:34:f9:e2:97:cf:73:91:33:81:5e:7d:39:2d:4b:
                    21:44:af:ae:6a:ba:a2:08:c6:7b:c4:f0:9c:95:a5:
                    59:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:96:91:B9:D3:B4:6A:8E:AC:99:90:42:B5:75:D0:74:B0:AD:00:C9
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ZpaRudO0ao6smZBCtXXQdLCtAMk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.108.238.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6f:f4:8f:2a:06:93:c1:24:17:21:26:4f:f8:3c:34:5c:bd:bd:
         02:65:c0:b6:7b:c0:24:2e:69:f5:7b:c5:7e:19:57:82:2e:c2:
         54:58:db:1c:e2:d7:27:e4:f1:b5:35:d4:60:8e:62:34:39:f3:
         33:8f:2e:4d:5d:d9:ba:d9:2c:e8:31:2f:99:66:ed:4d:d2:87:
         8d:da:1d:10:d1:b5:75:0f:5b:b4:15:cb:98:0f:37:cf:3a:e3:
         21:36:29:02:7f:d5:ee:d0:74:9b:66:c6:6b:c6:a4:be:1e:cf:
         dd:02:51:df:63:b0:99:e3:0c:e7:05:3d:11:12:a7:b2:71:3a:
         74:1c:ff:63:18:57:70:97:cf:d8:3d:df:ba:f4:4c:e6:00:8a:
         5e:94:cc:e7:6e:ec:6a:33:b2:61:12:90:b5:6d:ca:84:d0:87:
         ad:fe:b6:4d:e2:b9:fa:85:52:6e:bb:4b:9e:0e:94:96:9c:50:
         7e:86:d4:fe:00:d1:08:b1:58:f3:3f:9c:a1:90:0e:cd:13:d5:
         87:50:d9:da:e5:32:c9:50:25:c5:87:cc:75:df:60:fe:0d:54:
         ee:9a:8b:4d:6c:8a:d8:97:e7:da:f3:58:ec:01:1d:ac:fc:2d:
         92:88:34:f3:e6:8c:42:35:86:cc:a1:82:25:0f:63:f6:55:41:
         a8:78:98:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:38:47 2024 by rpki-client on console-fra.rpki-client.org