Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/_kd0r027wYpD1WOvzMj3BNVQPMU.roa
File:                     _kd0r027wYpD1WOvzMj3BNVQPMU.roa (raw, json)
Hash identifier:          Plr/SgPAwkQ2iKfThWLs3j/8QiFR7VEIZ0Q3tayFdb4=
Subject key identifier:   FE:47:74:AF:4D:BB:C1:8A:43:D5:63:AF:CC:C8:F7:04:D5:50:3C:C5
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0A6A
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/_kd0r027wYpD1WOvzMj3BNVQPMU.roa
Signing time:             Sun 30 Jun 2024 01:50:26 +0000
ROA not before:           Sun 30 Jun 2024 01:50:26 +0000
ROA not after:            Tue 24 Jun 2025 10:46:45 +0000
asID:                     9605
IP address blocks:        49.110.128.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:41:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2666 (0xa6a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun 30 01:50:26 2024 GMT
            Not After : Jun 24 10:46:45 2025 GMT
        Subject: CN=FE4774AF4DBBC18A43D563AFCCC8F704D5503CC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d9:83:e5:27:85:93:6c:1d:0e:24:88:7b:09:
                    35:0b:1b:02:1f:72:16:35:68:c9:5a:e3:fc:5e:98:
                    04:82:33:f6:8c:09:d7:60:72:75:d7:30:6e:9c:91:
                    5c:8f:bc:f7:a8:42:22:de:b2:67:b0:20:09:20:c7:
                    28:1e:71:16:65:ae:0f:fb:33:d9:e8:e8:e6:c1:c6:
                    76:bc:82:35:dc:2d:a0:29:dd:18:d3:85:94:99:54:
                    25:b0:b0:14:cf:b3:e3:33:bc:06:9f:c4:c0:86:2e:
                    85:14:80:b5:75:81:0d:38:19:d8:8a:3d:0f:9d:87:
                    d8:5c:4d:b8:e7:fb:08:c2:e5:09:a1:ec:9e:37:85:
                    35:63:98:11:88:cd:28:fb:b2:8b:fd:b3:2e:fd:99:
                    59:fa:fb:1d:d5:8b:1b:c7:a8:34:7a:2c:51:5f:62:
                    c7:d7:1f:e5:94:1c:97:96:9e:2c:ef:cc:95:9e:6f:
                    9e:e1:48:0e:ae:96:9a:6d:e2:96:94:c5:e9:8c:be:
                    56:e9:dd:28:7f:89:99:51:9f:fd:19:db:19:d2:56:
                    50:49:03:da:d7:78:30:33:c6:f6:78:04:d7:3f:e1:
                    e0:4e:88:50:02:a4:74:23:d7:29:70:97:4b:4e:10:
                    69:34:00:a6:a0:2c:cd:70:26:ed:c6:16:e3:0e:6f:
                    a5:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:47:74:AF:4D:BB:C1:8A:43:D5:63:AF:CC:C8:F7:04:D5:50:3C:C5
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/_kd0r027wYpD1WOvzMj3BNVQPMU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.110.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         00:31:99:7a:a6:18:81:ff:43:25:8d:c2:08:96:42:5a:c6:54:
         bb:6e:52:79:61:99:a3:f0:21:f8:2b:6f:37:6e:f1:1c:6a:12:
         03:66:20:bb:44:73:ba:cd:e7:94:8b:b9:55:00:13:4a:09:64:
         b7:24:0e:dc:51:f1:28:45:90:b2:6f:1b:c0:56:fb:99:2b:05:
         2f:77:6a:c1:eb:85:09:e2:99:18:fe:a3:4c:a0:fd:82:d1:e4:
         6b:94:08:ac:16:c0:96:3c:bc:0f:28:2e:3f:90:d7:c9:3b:16:
         fb:33:2e:5f:dc:1b:a4:8a:28:e4:81:d2:65:a9:13:e9:19:b5:
         4f:e6:c1:fc:4d:97:04:67:55:f4:ed:4b:0f:68:a9:b4:91:78:
         52:ed:f4:f7:24:7f:7d:85:5f:82:9d:b2:bb:e2:3b:44:c8:d1:
         3f:f5:6d:4b:56:6a:56:97:26:92:b1:b9:2a:0c:ec:67:09:47:
         6a:59:2c:0f:99:39:04:8c:47:58:73:74:2e:bb:2a:9a:04:b6:
         e0:bb:f0:38:39:2a:ab:2b:de:c6:ea:1a:49:a4:5a:7f:d2:8d:
         83:05:b8:f4:79:1b:fe:cd:37:84:32:23:67:d1:f4:e8:76:26:
         2a:2a:cc:cb:9a:06:49:c2:92:19:de:be:aa:90:84:49:6e:29:
         ca:e9:26:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:24:01 2024 by rpki-client on console-fra.rpki-client.org