Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/_Inwfnzk2xznZgPZEpj5fdsC5zg.roa
File:                     _Inwfnzk2xznZgPZEpj5fdsC5zg.roa (raw, json)
Hash identifier:          Dl7sDwYgIoDtQA22gxsymLX8+hTgflOnxtirWxATWv8=
Subject key identifier:   FC:89:F0:7E:7C:E4:DB:1C:E7:66:03:D9:12:98:F9:7D:DB:02:E7:38
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       05B9
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/_Inwfnzk2xznZgPZEpj5fdsC5zg.roa
Signing time:             Tue 22 Aug 2023 05:25:35 +0000
ROA not before:           Tue 22 Aug 2023 05:25:35 +0000
ROA not after:            Wed 14 Aug 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.109.8.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1465 (0x5b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Aug 22 05:25:35 2023 GMT
            Not After : Aug 14 01:30:02 2024 GMT
        Subject: CN=FC89F07E7CE4DB1CE76603D91298F97DDB02E738
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b7:9d:d4:2e:75:ee:1b:ae:bb:72:f0:aa:d1:
                    7b:1f:fb:49:02:5f:62:5f:8d:86:c2:89:4d:2f:03:
                    e2:53:ee:b7:23:92:35:83:6c:60:14:fe:33:f0:59:
                    24:32:88:65:9b:58:8a:67:ba:04:87:be:0e:13:32:
                    32:6f:45:62:10:90:42:e7:a9:38:a2:d3:7b:e1:56:
                    86:6f:23:fd:2b:da:80:e6:19:b1:dd:55:2b:97:e1:
                    0f:c8:d1:a5:d4:89:09:68:04:4e:c5:ec:13:12:3a:
                    6a:0e:3e:8b:7d:8c:9f:8a:eb:24:8f:9c:1c:c1:e6:
                    db:12:31:2a:18:fb:ab:1d:3b:ba:c9:04:12:ac:ed:
                    12:f3:88:2d:74:ea:bd:32:d7:65:11:70:9e:53:8c:
                    1c:29:8a:f2:ad:5e:12:7b:5b:2e:df:28:1b:b1:08:
                    b9:6a:b6:88:71:0e:2c:73:61:4c:62:e7:a8:24:6c:
                    83:84:fd:70:37:ae:67:23:f6:79:ab:42:37:92:ff:
                    09:04:cf:ef:5e:9a:24:56:d3:19:15:43:5f:93:39:
                    be:0c:73:7b:b2:72:0c:38:3f:1c:32:23:35:89:f1:
                    01:b0:20:c8:b4:e0:01:3c:64:cb:9b:75:75:3f:cb:
                    1f:c6:82:26:65:88:2c:9d:58:07:da:2a:1b:ef:69:
                    cd:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:89:F0:7E:7C:E4:DB:1C:E7:66:03:D9:12:98:F9:7D:DB:02:E7:38
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/_Inwfnzk2xznZgPZEpj5fdsC5zg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.109.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         cb:62:2b:fb:80:4c:95:e4:00:59:20:b8:71:09:f3:d6:da:2f:
         b6:a0:35:41:06:01:7a:2a:15:8d:e2:09:3d:8b:3b:70:05:2b:
         9f:9d:b0:2f:13:87:11:34:f3:41:9e:97:19:d4:6c:b4:bb:7a:
         cb:e0:a8:f2:38:f1:53:41:ab:d7:da:18:50:08:23:af:03:d0:
         7e:8c:5e:25:7e:2c:c6:b0:e1:00:39:d3:a0:61:64:04:87:dc:
         9f:5f:7c:a0:07:03:4f:6f:44:fd:b8:4a:42:43:e8:c9:9f:b9:
         fa:98:3b:95:a7:79:f3:ab:0a:9b:63:fc:f1:18:5c:68:90:fd:
         51:b9:6c:a2:b1:7c:6d:72:3e:74:7d:cd:12:19:fa:71:37:8e:
         f9:ec:c7:0d:a8:5b:65:03:95:3c:60:e7:67:81:a1:21:3e:ae:
         e0:2c:7a:45:83:a8:d7:0b:07:bc:c1:41:9c:f4:f8:0d:6e:21:
         f5:eb:31:dd:fc:95:53:42:9a:3b:1f:ee:a5:b3:9b:3f:fd:3a:
         70:82:01:ba:74:b4:a6:18:2a:b3:a7:ac:b2:23:12:6e:ee:0a:
         f4:84:8b:e8:d8:e4:4e:b8:42:d0:cd:9d:77:90:32:6c:46:04:
         c6:33:c8:51:00:37:4f:11:c0:6d:6f:76:16:db:7c:10:a1:47:
         06:55:6d:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:38:47 2024 by rpki-client on console-fra.rpki-client.org