Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/eEjlr2Bm7Wn0ly9Hlxkfu-L5h2s.roa
File:                     eEjlr2Bm7Wn0ly9Hlxkfu-L5h2s.roa (raw, json)
Hash identifier:          wcU0TKdsXc+Z+NSXEi+1xpNVV+59TNeV/lC8uOjc4TE=
Subject key identifier:   78:48:E5:AF:60:66:ED:69:F4:97:2F:47:97:19:1F:BB:E2:F9:87:6B
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0759
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/eEjlr2Bm7Wn0ly9Hlxkfu-L5h2s.roa
Signing time:             Tue 30 Apr 2024 02:01:36 +0000
ROA not before:           Tue 30 Apr 2024 02:01:36 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        49.98.148.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1881 (0x759)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr 30 02:01:36 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=7848E5AF6066ED69F4972F4797191FBBE2F9876B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:07:e2:b6:cd:5a:59:5c:bd:dd:b1:c4:f7:d6:
                    15:ef:5c:c7:7a:dc:50:2f:a7:d4:a1:ff:1a:a8:d4:
                    40:a7:a3:c4:de:46:66:8f:7a:5e:e7:b2:14:39:ea:
                    64:2d:af:cc:7e:73:7f:fc:96:de:cf:fa:38:0d:0e:
                    aa:8f:bb:82:da:f1:53:52:7a:bc:e5:fa:38:e0:bc:
                    a3:12:dc:8b:f4:87:55:ea:67:96:2e:d6:97:64:ea:
                    5f:34:cc:23:66:18:f3:48:c2:aa:51:f0:f3:c0:69:
                    b7:01:2c:31:da:47:ab:96:2a:18:19:64:03:e9:3d:
                    cd:05:45:07:ff:28:4b:89:b9:73:40:24:a6:be:2c:
                    fd:b4:de:e6:3e:22:ce:15:a6:f0:56:22:26:b0:44:
                    f4:e0:5f:70:39:54:d8:f2:87:64:98:4b:ff:91:08:
                    21:fa:52:ac:15:7f:9c:59:91:6f:58:01:1e:b3:d8:
                    32:1d:09:95:66:96:69:ee:77:6c:f4:08:33:8d:6a:
                    eb:51:cb:09:37:32:fe:91:66:2c:eb:f0:0c:f5:7a:
                    b6:b9:fc:4d:43:1e:38:e9:1f:47:9e:c7:bc:28:9b:
                    f1:53:ea:72:98:eb:d8:d4:a5:5d:94:d2:a5:ee:03:
                    54:1d:4a:64:1f:fd:e9:c9:fd:d2:31:d3:1f:5c:4e:
                    8a:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:48:E5:AF:60:66:ED:69:F4:97:2F:47:97:19:1F:BB:E2:F9:87:6B
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/eEjlr2Bm7Wn0ly9Hlxkfu-L5h2s.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.98.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         61:a7:f2:ed:56:31:90:68:fb:61:dd:37:61:ef:c4:ac:45:c7:
         e2:9f:90:a3:51:03:59:78:5f:49:06:79:a0:6b:59:53:dd:17:
         2d:bd:e2:3e:c2:56:54:67:7f:5e:d7:fa:e6:83:90:b1:82:62:
         d6:33:d9:8e:3e:ab:59:98:38:e0:23:1a:4b:b2:67:f4:69:0a:
         7f:cc:a8:1a:05:5c:a1:43:8d:8e:f3:28:cd:46:91:d3:47:39:
         07:90:fd:d4:41:29:ba:bf:e6:f0:78:b9:83:86:86:2d:c3:38:
         60:67:cd:f1:c9:84:42:f9:d3:79:a1:2b:d0:a5:e8:8c:ad:56:
         9f:02:a2:3f:c5:6a:78:c1:a8:e0:bb:f4:72:e1:77:de:a1:ac:
         3a:61:e9:d0:83:86:35:35:fd:d5:de:16:f6:46:0a:af:0c:c2:
         bd:d8:96:73:b7:5c:17:aa:60:17:89:dd:1a:5f:22:95:7e:df:
         3a:08:0a:6e:cf:fb:15:a0:47:1c:ca:95:cf:a0:73:bc:5a:42:
         32:6b:11:be:76:2a:91:28:64:dd:a8:fd:b8:6f:51:87:2c:33:
         59:20:15:68:49:d3:c7:c1:0a:a6:96:49:68:f5:db:3d:14:fb:
         71:eb:4c:56:e7:73:e6:f4:6e:00:27:05:d1:58:81:59:58:0b:
         cb:ef:46:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:38:48 2024 by rpki-client on console-fra.rpki-client.org