Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/cJZxUCWK8lPtqPXFgXFsmYM7hm4.roa
File:                     cJZxUCWK8lPtqPXFgXFsmYM7hm4.roa (raw, json)
Hash identifier:          nH0RMB+uhb2HqzrRgXgyezUnAAJpwTseU4bOOYksEt0=
Subject key identifier:   70:96:71:50:25:8A:F2:53:ED:A8:F5:C5:81:71:6C:99:83:3B:86:6E
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0872
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/cJZxUCWK8lPtqPXFgXFsmYM7hm4.roa
Signing time:             Tue 30 Apr 2024 02:18:31 +0000
ROA not before:           Tue 30 Apr 2024 02:18:31 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        49.106.102.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2162 (0x872)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr 30 02:18:31 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=70967150258AF253EDA8F5C581716C99833B866E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:e8:99:44:6e:92:69:55:e1:0b:b9:de:6c:7e:
                    81:2f:68:36:48:bb:bd:a3:f1:6f:c0:83:48:0f:8c:
                    4c:31:b4:1d:ce:35:14:04:6a:10:1d:4c:97:20:45:
                    b0:9a:c7:a9:33:6e:ac:be:69:91:69:14:56:37:d0:
                    d5:9f:c9:b6:f2:d6:86:ef:89:be:40:79:4c:84:3e:
                    e1:66:29:af:9e:2b:b1:d8:a2:a5:9d:b2:57:a2:b9:
                    25:12:5f:bf:f9:eb:40:a1:9c:37:bb:a7:ab:66:95:
                    ba:f7:ea:fd:6d:03:52:92:fa:4b:73:be:78:a4:44:
                    e7:c6:f2:99:e1:99:b2:80:ba:c8:ae:dd:0f:1f:10:
                    85:81:ea:cb:7d:56:f0:a9:7c:41:e5:ff:1e:dc:c4:
                    49:a6:6b:64:0f:85:14:46:e5:be:c7:af:0e:ab:1b:
                    8d:f9:01:89:cb:72:97:7f:ca:9e:d5:ec:3d:18:19:
                    98:7c:0d:87:dd:59:61:2c:93:c2:8b:f7:f2:00:74:
                    7a:8e:14:79:1d:e2:60:d0:18:ba:a6:32:da:d5:e9:
                    43:42:cc:88:02:5c:e8:71:93:03:f7:73:0e:87:b9:
                    b8:37:3d:e3:ca:ef:29:84:ed:31:f5:76:bf:1d:e7:
                    14:71:dd:bf:0d:0a:1d:5b:2e:17:9d:fe:85:90:b0:
                    87:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:96:71:50:25:8A:F2:53:ED:A8:F5:C5:81:71:6C:99:83:3B:86:6E
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/cJZxUCWK8lPtqPXFgXFsmYM7hm4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.106.102.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a5:93:88:d1:45:b3:bb:6c:77:e4:13:1b:fe:bf:0f:4e:47:74:
         63:ff:f8:ee:84:dd:41:8c:6c:8e:c1:5a:c5:5a:33:d0:b3:49:
         56:c1:64:58:da:0c:c0:b6:07:ab:fc:27:15:cd:74:91:b4:7e:
         7a:4a:d3:27:8d:7c:bb:84:b6:44:22:58:4b:e0:66:5f:b5:2b:
         b2:90:25:bf:ca:9b:49:89:4f:30:44:27:fc:0f:52:92:ac:8d:
         1a:32:a9:9e:ab:d8:a7:90:f3:13:4f:9d:df:52:37:7b:8e:3e:
         53:a4:0c:b6:1c:cc:08:a1:5b:c5:7b:8e:10:99:12:32:d6:89:
         4e:f0:66:df:1b:9a:bc:c4:93:20:1a:61:12:30:2f:6d:e2:2d:
         80:c8:2b:60:3a:3a:b7:26:c9:4d:76:be:9e:03:99:cd:0a:1d:
         37:c6:03:b2:85:d5:3a:3e:4d:ae:6f:0e:91:0e:9b:ba:ba:39:
         b7:28:4e:af:b6:39:29:29:48:79:49:02:1b:b2:9f:5e:28:31:
         0d:fa:82:4e:d1:d4:e3:d4:95:3f:43:25:98:cf:3b:67:ba:f6:
         0e:4c:33:d1:89:87:d9:6c:82:5f:be:49:03:01:77:f8:1a:5b:
         c5:0b:e7:71:b2:6e:6d:fe:e4:8d:d8:5b:47:97:af:b4:e6:46:
         70:e2:ea:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:45:41 2024 by rpki-client on console-ams.rpki-client.org