Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/ZqdvCgA58CY0DNuLWThqyah3eqE.roa
File:                     ZqdvCgA58CY0DNuLWThqyah3eqE.roa (raw, json)
Hash identifier:          z4aW4LAPZngqW+3mVAftWTu3YrpMf5InZPoSrDog0qM=
Subject key identifier:   66:A7:6F:0A:00:39:F0:26:34:0C:DB:8B:59:38:6A:C9:A8:77:7A:A1
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       06CD
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ZqdvCgA58CY0DNuLWThqyah3eqE.roa
Signing time:             Tue 30 Apr 2024 01:47:00 +0000
ROA not before:           Tue 30 Apr 2024 01:47:00 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        49.106.204.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1741 (0x6cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr 30 01:47:00 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=66A76F0A0039F026340CDB8B59386AC9A8777AA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:d4:c4:1d:52:dd:82:82:81:a9:e3:5f:4f:3c:
                    c3:b0:04:38:55:12:cc:b5:70:c6:61:27:b2:8d:2c:
                    e6:ec:46:dd:49:aa:2d:99:7e:5d:f6:d5:78:06:70:
                    a0:ec:3a:2a:20:d5:23:63:46:50:b0:6a:6b:1f:10:
                    ac:58:3c:d4:de:f6:39:4f:f7:4c:eb:5d:1b:34:6d:
                    84:da:b1:78:32:49:c8:c5:95:c0:a9:cd:e2:52:87:
                    2b:96:01:32:77:11:7a:d9:c9:59:0a:8d:9e:97:98:
                    d5:33:a3:06:d7:46:a3:04:e7:97:0e:06:f4:bd:ff:
                    fd:7e:30:e2:f2:c8:9e:48:ee:0c:d4:09:10:00:1f:
                    12:33:bd:de:ab:7e:81:45:9c:cd:3a:89:77:1e:38:
                    8d:5f:2d:d3:c3:37:5c:4b:cb:36:f2:ea:4a:de:fc:
                    c9:fe:16:b8:58:c4:a5:02:42:0c:06:3b:27:bd:f5:
                    34:c9:24:c1:c5:98:9e:26:31:27:dd:23:76:db:5d:
                    2f:db:f7:ed:44:df:28:db:1d:6d:f9:58:5b:ca:ce:
                    e6:78:67:d0:fa:1c:bf:47:a1:bb:e7:7f:4f:ef:54:
                    49:f8:64:25:4a:e4:58:57:6e:20:6e:dc:7c:81:5b:
                    d3:1e:66:ea:47:8d:7b:53:dc:ec:14:18:c6:9c:ba:
                    76:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:A7:6F:0A:00:39:F0:26:34:0C:DB:8B:59:38:6A:C9:A8:77:7A:A1
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ZqdvCgA58CY0DNuLWThqyah3eqE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.106.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:c8:41:ba:10:b9:09:c0:c3:90:2e:9b:cb:fc:71:c5:36:88:
         95:d2:d4:71:7c:7a:45:0a:50:be:64:db:04:4e:77:73:e0:be:
         44:df:c3:65:bc:5e:23:ed:7a:8d:d6:f5:58:4d:54:89:22:47:
         97:5f:a7:34:ea:fd:10:db:56:a4:4d:28:90:c3:45:d8:79:d8:
         f1:f9:ef:66:04:58:6a:0c:e7:11:bb:74:82:53:91:5c:9a:84:
         f5:de:62:e1:3e:09:1a:0c:99:52:fa:f8:cc:22:b4:3b:b2:cf:
         a5:50:fd:ee:a5:21:10:b7:ea:0b:86:59:62:17:6b:9e:44:9d:
         61:6f:8c:1d:87:75:f2:9b:40:22:e5:5e:dd:11:1a:c3:35:9b:
         2c:40:a6:58:66:77:84:08:6a:0d:8a:fb:8b:8f:91:dc:e4:7d:
         76:5a:68:e7:00:85:39:6f:1e:b6:12:18:28:a8:df:90:9f:47:
         29:67:0f:31:a5:0f:a5:f9:6c:ec:b3:fe:3b:6e:18:d0:86:02:
         92:e7:bb:e7:6f:a8:40:c5:69:b2:ee:6f:16:1d:5e:5f:30:52:
         df:c1:95:29:00:c3:b1:9f:df:57:7d:89:cb:a2:a7:a1:5b:05:
         9a:67:07:93:67:cd:0e:c9:78:cd:29:2b:fa:75:f8:8f:26:2a:
         7a:a6:f5:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 15:54:31 2024 by rpki-client on console-ams.rpki-client.org