Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/bBfP-GixaFTYHBVd8YmgUzIqO2Q.roa
File:                     bBfP-GixaFTYHBVd8YmgUzIqO2Q.roa (raw, json)
Hash identifier:          4TL96Qv+3/wHznjKujNQW1Ex9QdRblqzq3Caw2pCRY0=
Subject key identifier:   6C:17:CF:F8:68:B1:68:54:D8:1C:15:5D:F1:89:A0:53:32:2A:3B:64
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0481
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/bBfP-GixaFTYHBVd8YmgUzIqO2Q.roa
Signing time:             Thu 27 Jul 2023 16:44:11 +0000
ROA not before:           Thu 27 Jul 2023 16:44:11 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     9605
IP address blocks:        49.105.88.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 23 Jun 2024 11:53:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1153 (0x481)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jul 27 16:44:11 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=6C17CFF868B16854D81C155DF189A053322A3B64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:e0:72:da:03:f2:47:2e:17:cd:67:d0:bc:2f:
                    18:f5:f8:ab:76:a6:98:b9:21:06:be:74:95:92:34:
                    ae:e7:2b:0e:2b:aa:3a:05:45:4d:4b:1f:4c:e8:d3:
                    a9:ad:8e:66:05:c3:ff:e1:97:e9:a3:77:fd:56:17:
                    d8:d5:4c:f2:64:4a:4f:d7:01:1f:33:69:cd:25:25:
                    97:15:50:a5:b1:4f:f1:de:05:e0:92:53:23:85:8e:
                    6d:ba:dd:f4:fb:d4:00:3b:b7:b2:35:a5:18:d9:37:
                    ec:dc:9e:8b:bb:ff:c7:d3:02:cd:7f:7f:3d:e9:2e:
                    6c:99:4c:c0:81:b1:06:81:74:69:cb:88:63:a6:44:
                    95:78:32:08:52:b0:86:a0:e5:57:46:ce:11:fa:2e:
                    3a:41:5e:c9:e7:86:01:7d:46:1d:cf:b1:ef:a9:c6:
                    85:76:24:b8:74:41:3e:e4:bb:39:36:c2:6b:c3:10:
                    0a:04:22:ea:3a:ee:69:72:5f:d0:b9:b3:b8:03:6a:
                    80:7f:06:dd:7c:fa:41:ac:ab:a8:5b:54:ff:d8:21:
                    e9:6b:6e:8e:09:e6:eb:7f:27:6c:eb:ee:a8:3f:83:
                    91:5a:62:4f:ad:07:a8:38:be:7d:f1:b3:6a:d2:59:
                    4f:d3:bc:69:e5:f2:3e:69:ab:4c:0d:76:44:e5:74:
                    8f:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:17:CF:F8:68:B1:68:54:D8:1C:15:5D:F1:89:A0:53:32:2A:3B:64
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/bBfP-GixaFTYHBVd8YmgUzIqO2Q.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.105.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:9b:08:68:80:61:f3:a5:be:28:af:c0:fb:49:e3:4b:50:7d:
         ca:94:fe:3e:3d:31:d6:4d:f3:69:dd:c2:c7:21:49:07:46:69:
         b8:ff:6f:b9:51:d4:bc:42:ab:d9:9f:67:d0:26:b6:0a:f6:c8:
         09:f4:af:b7:98:4a:c4:b9:b1:c9:ff:a4:41:96:06:de:58:bc:
         70:bf:68:e1:37:ef:7b:17:e6:47:08:b6:5d:a1:a0:48:8a:8e:
         9b:1a:26:ba:d0:fa:98:5b:84:4e:9f:10:2c:59:cd:5b:54:43:
         1a:f7:38:b2:f1:3b:7b:66:7e:01:ce:f9:ba:e0:15:50:f6:18:
         00:35:88:8d:95:11:47:41:0b:74:9a:16:41:21:c2:35:00:f4:
         f2:c6:b4:9f:50:57:2f:61:1e:3b:98:ca:21:21:3f:1a:08:c3:
         0e:70:32:2b:cb:19:1b:60:c3:0b:f4:1c:cf:89:ca:77:1a:ba:
         0c:c9:3b:d6:22:c2:e0:b0:e2:d9:55:36:11:4b:7f:4d:71:f9:
         64:76:4d:98:60:c6:84:7f:e7:16:e3:79:b6:5b:a6:bb:c3:1d:
         a3:f8:da:ed:d2:9f:56:5f:80:c6:79:ad:3a:18:96:02:98:a2:
         f1:ee:b9:15:56:01:26:3b:ff:17:47:30:ea:97:38:55:dd:b0:
         2a:66:49:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 14:31:54 2024 by rpki-client on console-ams.rpki-client.org