Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/cyiaIjnBjF2kyLXdMiMUvqjGhZA.roa
File:                     cyiaIjnBjF2kyLXdMiMUvqjGhZA.roa (raw, json)
Hash identifier:          M26vhwuTNdZOsGtVSYdztElooH7PHLj91r7GL+mpTPg=
Subject key identifier:   73:28:9A:22:39:C1:8C:5D:A4:C8:B5:DD:32:23:14:BE:A8:C6:85:90
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       062A
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/cyiaIjnBjF2kyLXdMiMUvqjGhZA.roa
Signing time:             Thu 29 Feb 2024 01:41:03 +0000
ROA not before:           Thu 29 Feb 2024 01:41:03 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     9605
IP address blocks:        49.97.108.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Dec 2024 00:11:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1578 (0x62a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Feb 29 01:41:03 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=73289A2239C18C5DA4C8B5DD322314BEA8C68590
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:08:3c:33:ab:e5:8f:b1:8f:0b:f0:56:da:65:
                    bb:f0:db:44:2b:20:be:3c:3a:e9:7b:40:16:42:cf:
                    58:a7:08:ef:99:09:e0:14:5c:58:1a:b3:f6:75:d0:
                    63:ba:fd:39:6d:5c:29:95:0c:dd:2c:b8:f6:cd:23:
                    89:4a:9b:ab:2a:3e:7b:50:6e:e8:b4:75:23:48:0d:
                    51:7c:2b:b5:21:08:6f:45:9a:b4:cf:aa:7c:f8:04:
                    e4:ff:17:12:f8:57:29:d8:82:9b:67:75:98:77:6d:
                    9f:a2:88:75:41:3b:7e:42:27:3d:1f:23:6e:e9:6d:
                    82:e4:36:36:f7:c7:de:ae:af:a2:8c:54:2d:93:b8:
                    22:12:58:92:19:47:7a:30:ce:29:9f:6d:b9:2e:5b:
                    a8:24:55:2c:c6:36:52:89:f9:8c:34:99:f5:11:b4:
                    42:88:0a:0c:d3:01:2c:c3:f5:08:78:03:95:57:75:
                    7d:3e:e1:62:03:f4:62:22:c3:64:67:0b:0c:ee:76:
                    3d:81:8b:60:52:3d:04:c6:07:46:fc:63:c1:91:94:
                    2c:4c:dc:9f:c4:d5:f4:0c:2b:96:6a:2e:3d:04:16:
                    ec:75:fe:08:86:31:96:50:b8:b3:a4:89:40:f9:63:
                    72:70:c3:3a:83:cd:15:41:5b:ca:d1:48:0f:6b:2e:
                    61:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:28:9A:22:39:C1:8C:5D:A4:C8:B5:DD:32:23:14:BE:A8:C6:85:90
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/cyiaIjnBjF2kyLXdMiMUvqjGhZA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.97.108.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1e:e1:fb:20:ca:99:5f:6d:02:f5:72:9c:1a:d3:51:cd:c4:08:
         d8:3d:84:66:e6:e8:72:20:1e:00:88:30:30:2b:c3:87:c3:a6:
         4c:41:86:12:16:26:7b:7f:31:fc:fb:88:a3:5a:65:d8:f2:73:
         ed:b1:90:ee:81:4e:8e:2a:48:1b:36:17:a1:9a:6d:6f:95:7f:
         39:80:77:ef:4d:64:3d:20:05:17:f0:ba:8a:5b:41:74:09:d5:
         91:cb:51:17:82:d0:1c:70:c5:7e:61:8d:5d:94:11:eb:1c:f6:
         5a:39:45:3a:8d:61:5a:f6:8e:81:68:ac:a0:ce:5e:f4:f5:be:
         ae:d1:4c:f0:6e:14:d2:26:04:25:5e:dc:bd:c8:88:72:b7:12:
         c6:f0:a0:1c:9b:c0:16:2d:f3:66:21:2d:78:5e:60:c9:0a:5b:
         ac:1c:3d:9b:87:4c:d5:25:3f:f4:2d:c7:81:96:8c:09:62:b0:
         bb:15:70:94:90:c6:cc:f6:d2:50:5d:3f:7c:8e:7b:8c:ac:b7:
         99:d4:eb:98:10:85:10:08:c1:4c:40:0e:db:45:1c:84:a4:52:
         fc:bc:05:fd:7a:cc:81:3e:f7:96:2a:71:5b:cb:1e:c9:81:70:
         ea:3b:66:c1:39:91:6a:60:ad:55:57:a9:e3:8a:f7:7c:38:da:
         8d:af:18:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 02:27:15 2024 by rpki-client on console-ams.rpki-client.org