Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/bYuMsfx2zJTltmTy-PbpnKG4Kb8.roa
File:                     bYuMsfx2zJTltmTy-PbpnKG4Kb8.roa (raw, json)
Hash identifier:          dK9v1hM/t+paH0ob1RWqhEhZT/fUV4Ps+XdGRY81wqk=
Subject key identifier:   6D:8B:8C:B1:FC:76:CC:94:E5:B6:64:F2:F8:F6:E9:9C:A1:B8:29:BF
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0816
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/bYuMsfx2zJTltmTy-PbpnKG4Kb8.roa
Signing time:             Tue 30 Apr 2024 02:12:30 +0000
ROA not before:           Tue 30 Apr 2024 02:12:30 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        49.106.212.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2070 (0x816)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr 30 02:12:30 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=6D8B8CB1FC76CC94E5B664F2F8F6E99CA1B829BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ae:c9:b8:72:7b:cd:1e:8c:ae:e5:51:1a:f3:
                    ca:91:72:90:aa:4f:46:45:4d:0c:ee:53:a5:5c:18:
                    2a:61:0a:4f:3e:4f:65:47:20:d4:85:02:bb:86:05:
                    65:93:70:81:c7:2e:8d:b8:0f:aa:66:75:2f:11:f0:
                    03:e2:c3:64:da:74:e9:02:09:cd:5a:72:ec:95:5f:
                    11:60:39:29:06:c6:28:c4:bf:62:27:79:05:8d:a9:
                    dd:5d:8f:c2:9e:6d:45:4f:f9:ef:6f:cc:34:2b:51:
                    98:2e:4b:78:93:7d:6b:20:78:b8:a7:b4:c2:8f:30:
                    0a:3f:2f:73:ed:94:f3:8e:5c:03:61:54:30:ad:10:
                    a3:4f:f2:93:ca:33:8c:37:6c:70:01:7d:e5:f1:84:
                    90:e8:82:fc:af:4c:85:cf:32:e9:8e:60:01:b9:31:
                    bf:92:68:48:96:90:c0:fb:c2:85:2c:6e:c5:b6:da:
                    cc:3a:a8:c1:ee:c3:ff:e6:8b:7a:fc:b3:30:1c:27:
                    32:dc:3a:71:3f:fe:66:cc:6b:14:a6:cd:3b:83:f4:
                    63:86:d7:03:2b:b8:cd:dd:97:1c:0b:82:83:cc:2a:
                    9d:32:2a:e8:e6:79:f4:3a:7c:03:d1:57:69:e9:30:
                    7c:50:ce:2b:4e:e2:2c:4c:b0:40:fe:20:0b:a0:2a:
                    d4:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:8B:8C:B1:FC:76:CC:94:E5:B6:64:F2:F8:F6:E9:9C:A1:B8:29:BF
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/bYuMsfx2zJTltmTy-PbpnKG4Kb8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.106.212.0/23

    Signature Algorithm: sha256WithRSAEncryption
         17:fd:a5:b6:95:ea:b1:3d:a8:28:7f:3a:3c:86:dd:73:fe:8b:
         a0:62:67:2a:6d:8e:eb:9d:ff:20:92:77:98:85:ce:e2:74:7c:
         f4:93:01:e7:c5:0b:e0:92:78:0d:53:43:ec:83:e0:d7:31:e0:
         82:13:4a:36:bd:b6:d0:52:84:c2:3e:a8:3d:40:ec:f1:17:ba:
         55:13:52:68:8a:1e:80:a4:43:df:ec:72:1d:d9:2e:d9:4e:b5:
         22:62:8a:bd:ee:10:48:8e:24:b2:70:a5:05:5c:c6:1e:0e:c1:
         de:20:0e:96:8d:87:51:ac:cc:8e:64:19:b9:85:9e:6b:a8:78:
         9c:4f:f7:af:05:52:88:a9:af:1d:b8:ba:39:25:e4:4f:4c:af:
         7c:5d:c8:2f:81:9b:e1:f6:d3:04:19:64:05:9f:86:4b:e5:ba:
         ef:f4:0a:1d:4f:5c:2b:94:31:01:63:67:44:95:f0:2f:df:08:
         d9:7d:7e:15:a6:54:e6:6e:c5:3b:12:4d:80:6d:93:b7:73:47:
         7c:53:2c:dc:7b:53:33:62:d1:b2:16:c6:29:b5:ee:5e:fd:29:
         65:4c:f2:67:7c:9c:d4:87:96:3b:8d:f7:b7:15:c6:b5:b3:8b:
         23:70:9c:da:c8:9f:b7:fb:a2:66:79:8c:2d:27:7a:99:56:a1:
         32:bf:85:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:38:48 2024 by rpki-client on console-fra.rpki-client.org