Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/b3owpbf7g1sa5pJ2LpitS5Kr1zs.roa
File:                     b3owpbf7g1sa5pJ2LpitS5Kr1zs.roa (raw, json)
Hash identifier:          k6oFqb5Tjm3wjB2jHjhQJ4/amJjjoX6E1q69GQPoPIo=
Subject key identifier:   6F:7A:30:A5:B7:FB:83:5B:1A:E6:92:76:2E:98:AD:4B:92:AB:D7:3B
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       05D7
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/b3owpbf7g1sa5pJ2LpitS5Kr1zs.roa
Signing time:             Thu 29 Feb 2024 01:32:16 +0000
ROA not before:           Thu 29 Feb 2024 01:32:16 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     9605
IP address blocks:        49.102.176.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1495 (0x5d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Feb 29 01:32:16 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=6F7A30A5B7FB835B1AE692762E98AD4B92ABD73B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:4c:2e:20:4e:1a:dc:a8:d3:54:ee:82:81:19:
                    2c:4e:df:ed:7d:f9:49:c3:08:3a:47:49:14:4e:df:
                    79:1e:9e:92:33:f7:62:ec:20:0c:a7:db:82:0a:62:
                    17:3b:e2:30:53:ba:2e:d5:54:2f:db:9e:0f:d1:d4:
                    69:d0:6a:85:44:8b:d3:c9:22:07:31:49:4d:e4:77:
                    ea:0d:ea:db:82:f7:4c:c0:e7:af:ca:2e:30:62:cd:
                    ae:96:c7:04:6a:a2:7b:da:84:99:cd:d3:f5:9b:16:
                    c3:e8:bf:c4:78:fb:a0:d2:d7:d5:f6:b7:9e:ae:2b:
                    30:f1:eb:a8:fd:5a:a0:d8:59:82:b0:88:23:0e:41:
                    6e:ef:7d:10:62:da:ab:d4:dd:f6:d0:40:ff:0f:9b:
                    68:cb:77:f9:3b:d9:4d:cd:85:96:b4:ae:96:b2:ab:
                    38:9d:29:d9:35:50:fc:db:05:ee:dc:15:02:03:81:
                    c7:3d:85:29:22:65:26:ce:8b:d7:70:8f:2e:61:48:
                    3a:7a:e6:8b:3e:35:54:27:e2:88:0e:98:5f:9f:6e:
                    be:e9:7f:08:7f:4e:c9:6f:de:29:da:65:3c:5e:56:
                    a9:83:f9:83:95:02:86:de:1e:49:cd:a5:73:5a:09:
                    2d:7d:39:67:de:47:49:bc:cb:09:d0:dc:3c:6e:55:
                    ae:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:7A:30:A5:B7:FB:83:5B:1A:E6:92:76:2E:98:AD:4B:92:AB:D7:3B
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/b3owpbf7g1sa5pJ2LpitS5Kr1zs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.102.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         bc:5a:4f:25:a1:92:ad:a9:85:20:9f:23:d7:09:56:53:77:94:
         c5:62:71:35:9a:ed:4d:17:06:74:fd:96:39:ce:5d:44:b9:dc:
         71:c9:e2:10:d4:35:d6:77:64:21:24:12:7a:73:04:a8:84:33:
         be:f4:ce:b4:62:da:c0:23:08:a1:cc:9d:e1:15:1e:47:89:5c:
         b6:8c:73:ee:1d:88:c4:24:d0:7d:6f:45:25:29:6d:aa:da:08:
         5b:a8:48:9f:4c:cf:fc:8d:6c:cf:c7:9c:6d:b3:2f:82:d1:a1:
         68:8b:5b:38:17:1c:e7:55:7f:eb:74:c0:06:cb:8e:c0:3d:3c:
         2b:de:2b:c7:52:81:39:86:b8:4a:73:29:70:31:81:58:c1:e1:
         61:31:4f:57:87:27:95:8d:7a:17:27:5c:9f:d4:50:d9:55:44:
         34:6f:dc:8d:7c:de:b9:3a:78:2d:0d:4c:5f:bf:77:76:bc:bf:
         7c:f1:5a:40:f1:72:12:c0:3f:d9:1b:8c:41:2d:06:45:08:e2:
         ac:87:74:59:f0:05:9e:bf:5a:1c:50:af:aa:43:65:04:34:d7:
         c4:06:3e:83:5a:d6:d7:f0:f3:41:eb:1d:42:01:77:15:5f:82:
         60:a6:b9:60:86:54:4b:46:91:60:51:4a:48:3e:74:eb:ab:cb:
         f1:66:11:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 15:54:31 2024 by rpki-client on console-ams.rpki-client.org