Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/avBq5RZHPesmWXrWeawq66GLg_8.roa
File:                     avBq5RZHPesmWXrWeawq66GLg_8.roa (raw, json)
Hash identifier:          4dRMtX0AeTWi2NFu5uToa2/f77FtGp2V1uhBa1dViYI=
Subject key identifier:   6A:F0:6A:E5:16:47:3D:EB:26:59:7A:D6:79:AC:2A:EB:A1:8B:83:FF
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0731
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/avBq5RZHPesmWXrWeawq66GLg_8.roa
Signing time:             Tue 30 Apr 2024 01:55:58 +0000
ROA not before:           Tue 30 Apr 2024 01:55:58 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        49.104.12.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 23 Jun 2024 11:53:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1841 (0x731)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr 30 01:55:58 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=6AF06AE516473DEB26597AD679AC2AEBA18B83FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:3c:ea:cb:04:05:a8:45:a9:b8:38:3a:d1:be:
                    d3:c4:df:5c:97:77:b8:44:df:31:40:09:a3:7f:1c:
                    28:0e:52:82:6c:a7:fc:46:c1:20:21:51:38:b5:2f:
                    d2:d1:9f:11:c6:ec:b6:ed:b1:6f:f9:31:f8:1b:92:
                    d3:36:89:a1:4e:4f:17:50:75:b9:62:c0:22:de:ea:
                    b1:aa:11:62:65:dc:7b:59:6f:80:19:52:78:27:30:
                    2d:9b:08:40:64:57:37:18:ee:80:42:84:88:57:6c:
                    42:a8:c0:8c:f1:da:36:a8:55:84:2c:1d:d6:e9:62:
                    e0:af:35:97:ed:74:54:f8:4f:e7:9d:45:5d:42:20:
                    ae:84:92:e3:db:62:21:9b:f8:91:d5:36:b5:93:93:
                    1a:85:be:bd:ad:82:a3:73:c6:88:4b:c6:f3:cc:3e:
                    23:76:2a:3b:d0:4c:57:e8:1c:fd:5b:38:6a:1f:d2:
                    05:a3:b5:28:5e:13:22:e4:3c:9a:92:c5:9c:13:51:
                    5d:7a:ea:9f:0e:d3:80:39:35:a2:2f:57:40:5a:61:
                    ac:c1:8a:f0:3f:5b:19:f3:ff:f2:34:a3:d0:5e:07:
                    5e:61:88:85:f7:41:56:62:3c:20:80:61:73:1f:93:
                    da:1e:ff:69:50:47:88:f0:b5:e1:9c:75:f0:11:c2:
                    e6:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:F0:6A:E5:16:47:3D:EB:26:59:7A:D6:79:AC:2A:EB:A1:8B:83:FF
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/avBq5RZHPesmWXrWeawq66GLg_8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.104.12.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7e:a4:3c:fb:fb:c8:c7:e4:cc:21:ac:70:26:5a:43:fa:11:3f:
         f9:c3:36:1f:4b:82:0d:88:0e:e0:48:9d:34:06:b8:fd:48:ce:
         6c:19:a8:b2:74:9a:82:bc:f0:31:4a:b1:6b:b8:f5:fe:23:f7:
         f9:4d:49:83:7e:fa:d3:27:b0:95:75:a1:74:d5:7a:e4:e6:0f:
         4f:46:80:e8:b9:1e:85:3b:7d:90:a4:bd:00:b9:96:45:e5:f8:
         a4:26:89:40:6f:8f:33:e7:cc:b8:32:a4:58:f8:60:88:79:bc:
         82:f1:49:97:62:e1:0f:c9:b7:d7:e0:47:76:b3:83:f5:b0:58:
         32:40:1a:b3:98:96:83:7f:75:c1:a2:7a:10:69:67:21:0f:ca:
         ea:b9:25:91:b7:1d:db:df:1f:1e:4f:94:9b:46:47:8c:c2:50:
         11:b9:e3:06:bc:f8:9c:a3:30:71:30:eb:fb:8f:a1:19:50:30:
         08:98:45:30:c3:c2:e0:95:94:45:50:d2:2d:34:fd:69:9d:92:
         ab:0c:11:5c:dc:ea:f2:53:08:f3:e6:b8:12:02:b1:ee:44:8a:
         29:34:67:41:ca:2a:d3:71:69:7c:1f:1c:e2:96:51:91:25:16:
         0d:9e:4f:10:7b:31:92:53:98:7a:09:a3:e7:a5:9a:11:72:4c:
         05:39:80:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 14:31:54 2024 by rpki-client on console-ams.rpki-client.org