Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/bJzzGwwmZkxdqH4qt2w7cWUUD4I.roa
File:                     bJzzGwwmZkxdqH4qt2w7cWUUD4I.roa (raw, json)
Hash identifier:          KcsJLaa2GraCaGwK/ktaUXj5KM2d5WAIVTbm/gJODjk=
Subject key identifier:   6C:9C:F3:1B:0C:26:66:4C:5D:A8:7E:2A:B7:6C:3B:71:65:14:0F:82
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0578
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/bJzzGwwmZkxdqH4qt2w7cWUUD4I.roa
Signing time:             Thu 27 Jul 2023 16:58:07 +0000
ROA not before:           Thu 27 Jul 2023 16:58:07 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     9605
IP address blocks:        49.100.224.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1400 (0x578)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jul 27 16:58:07 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=6C9CF31B0C26664C5DA87E2AB76C3B7165140F82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:4b:e3:21:02:b8:ba:e4:01:92:a0:53:49:e0:
                    bb:87:65:d1:05:da:63:92:74:16:d5:43:07:2c:13:
                    12:2e:28:7f:73:a4:fe:1c:3c:b1:ed:f2:3d:ac:2c:
                    c4:8f:bb:d5:99:98:50:53:38:86:63:3a:1d:d2:fc:
                    86:c9:df:50:e9:8e:28:07:6d:52:83:95:2f:11:5a:
                    be:72:ea:5f:86:9e:65:58:e3:8a:9a:97:1b:3a:43:
                    cd:97:24:ac:af:8f:a3:b5:f8:eb:aa:85:d1:00:98:
                    1e:65:1d:58:00:3c:be:b6:6b:7b:95:c0:a0:49:03:
                    a3:d9:61:1c:2b:32:f2:a6:42:71:8c:7d:11:e6:61:
                    89:51:31:ac:af:dd:11:75:bc:30:11:a1:d6:5e:c0:
                    ae:49:29:6a:4a:b5:82:ab:e6:68:7e:a7:0f:c1:8b:
                    a6:2f:cb:76:29:19:98:81:f2:68:41:13:10:76:ba:
                    f0:b4:02:34:3f:da:24:ed:b6:f5:4c:17:c3:1e:03:
                    92:c4:7d:ac:fb:2d:8f:a5:5c:94:ed:e4:01:e0:3a:
                    0c:24:14:52:ba:e1:df:14:26:f0:e2:95:4d:13:73:
                    f7:eb:cd:7c:6d:19:4c:d1:b2:1c:55:9a:d7:7b:24:
                    b4:38:6e:76:f1:81:91:35:20:1c:c8:4a:08:e8:0e:
                    39:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:9C:F3:1B:0C:26:66:4C:5D:A8:7E:2A:B7:6C:3B:71:65:14:0F:82
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/bJzzGwwmZkxdqH4qt2w7cWUUD4I.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.100.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         15:4b:ca:b4:5b:b2:92:c8:94:e4:dd:1e:cb:2b:aa:bc:38:ef:
         c5:9a:19:d4:46:09:de:a1:1e:6d:5d:e5:20:f3:9e:50:f3:85:
         f8:e6:d1:e9:01:5a:f8:c7:57:56:62:d6:ce:cb:f0:03:ad:50:
         9a:2d:8a:e6:ea:42:a9:8b:ad:a0:38:15:a4:5a:57:a4:a7:b9:
         e9:16:74:ae:bf:27:55:b0:6a:cd:fd:4f:6a:0f:d1:5a:03:7e:
         8b:93:5f:f5:e7:3a:34:7d:31:79:ae:89:4b:33:4c:a8:93:d8:
         49:64:6f:b2:c6:ed:c9:36:9b:45:66:f4:5f:cd:cb:d7:d3:ce:
         eb:3b:fc:7c:5d:ec:c6:61:c9:64:27:16:47:8c:91:ce:29:e9:
         67:ba:3b:a4:fe:f0:8a:d2:fe:ba:6a:ae:5a:9f:13:d0:75:4f:
         93:10:3c:2f:ad:89:91:e0:fa:7a:cf:04:18:8b:41:a5:17:96:
         a7:93:86:54:26:21:af:87:14:85:97:da:ee:b8:9f:a8:4f:7b:
         e4:1a:70:f3:55:19:76:68:dc:96:60:8b:44:13:b9:ea:33:ed:
         62:f3:bf:d5:43:4c:61:9d:38:da:b6:61:50:e3:40:cf:0c:9a:
         c9:de:e6:b2:63:d2:81:e1:1e:83:f7:f5:72:fe:06:59:0f:10:
         6f:8c:01:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 15:54:31 2024 by rpki-client on console-ams.rpki-client.org