Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/bXDdbRsyA5fbjtO4qOB4jrpad-Q.roa
File:                     bXDdbRsyA5fbjtO4qOB4jrpad-Q.roa (raw, json)
Hash identifier:          dVntphtprwL//BC+phQpHB5ksDHAJFqijOPjqW8s7XU=
Subject key identifier:   6D:70:DD:6D:1B:32:03:97:DB:8E:D3:B8:A8:E0:78:8E:BA:5A:77:E4
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       046A
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/bXDdbRsyA5fbjtO4qOB4jrpad-Q.roa
Signing time:             Thu 27 Jul 2023 16:44:03 +0000
ROA not before:           Thu 27 Jul 2023 16:44:03 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     9605
IP address blocks:        49.105.78.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1130 (0x46a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jul 27 16:44:03 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=6D70DD6D1B320397DB8ED3B8A8E0788EBA5A77E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:32:c5:30:6d:b3:0d:a1:55:13:7d:cb:a6:7f:
                    c0:9a:e2:40:e7:04:69:7c:91:f1:ad:f7:26:00:9d:
                    3b:36:05:22:f3:85:e8:08:5a:c2:29:83:32:5f:11:
                    ba:b7:50:4c:81:0f:c7:15:b3:1c:39:9b:d9:50:b9:
                    91:ce:42:04:1b:75:fa:27:15:bf:31:5c:ca:fc:79:
                    04:5f:7d:43:22:3d:cd:ea:e7:8a:12:64:45:6c:9b:
                    8a:6f:5a:8b:f8:e6:2a:7a:0e:23:13:a4:46:6c:68:
                    d8:4b:70:27:8a:24:25:3b:76:31:c3:20:8e:e3:c6:
                    8a:98:6d:5b:e1:0d:33:7c:17:d2:57:56:c0:0a:a3:
                    f9:d8:6b:09:6f:ee:ce:39:f9:31:1a:e1:01:42:03:
                    c5:71:3d:ac:3a:0d:7e:0f:67:9d:bc:b8:eb:53:bc:
                    6e:15:87:b2:2d:03:5b:c2:e0:b0:a7:4c:3f:84:18:
                    35:e6:9f:b9:63:96:4c:f8:0e:6d:e7:cf:84:6c:c5:
                    49:e7:e7:02:cf:ae:06:89:27:74:73:43:28:04:87:
                    66:18:11:1f:2b:01:bf:0e:fd:ad:2d:6a:19:73:2c:
                    ca:54:41:48:63:38:dc:a1:24:18:c8:e6:ab:8e:37:
                    2e:7d:c4:1c:47:7e:29:21:2c:84:df:2d:4f:0e:a6:
                    2d:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:70:DD:6D:1B:32:03:97:DB:8E:D3:B8:A8:E0:78:8E:BA:5A:77:E4
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/bXDdbRsyA5fbjtO4qOB4jrpad-Q.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.105.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:d3:2a:4a:a7:5f:6f:64:1c:7e:73:26:40:3b:9b:eb:9e:9e:
         82:44:5a:fe:dc:ab:5b:bb:8b:07:f5:8c:f6:56:89:bc:d9:ad:
         46:ac:5e:b6:0e:2e:3d:27:29:be:7d:53:9b:84:7b:fc:d7:19:
         56:43:3c:1b:3f:02:83:df:47:b1:f5:a3:74:23:89:48:b8:b4:
         ec:56:40:fa:d5:66:2e:db:4c:b5:e3:20:cf:d4:15:57:9c:0a:
         5e:68:49:82:61:16:f1:0b:dd:8b:14:a7:20:70:ba:f1:5c:3f:
         56:6b:b8:3b:23:46:0b:88:11:a0:34:be:39:02:24:aa:b6:05:
         50:3c:9d:0f:5d:9c:4d:71:92:83:df:c9:4a:13:37:82:d0:b7:
         b1:cb:98:c7:a1:61:4e:dd:f5:42:4d:3b:14:e9:a7:7e:9a:e0:
         fb:6a:12:5c:52:9d:ce:00:83:d4:53:3c:ce:19:52:e6:61:d6:
         be:c5:92:11:ca:39:3c:a0:d1:6c:84:3b:f7:dd:6c:d2:15:3e:
         59:03:14:a2:6e:61:6d:d0:1a:42:c2:68:97:b3:ff:a4:4d:a0:
         cb:c3:41:20:f0:de:a6:fe:52:3c:c0:b6:34:96:a3:7a:89:15:
         2a:06:e5:f6:0d:0a:10:9c:21:75:6f:e7:79:52:a1:9a:e6:42:
         3f:38:f6:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 15:54:31 2024 by rpki-client on console-ams.rpki-client.org