Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/ePUvgShnBk7utXKrIZOfqRQ7rvo.roa
File:                     ePUvgShnBk7utXKrIZOfqRQ7rvo.roa (raw, json)
Hash identifier:          nFgeDlU9wt/2Cx/8/7VHJ5EavmfHSsD6/QusN1Onq9g=
Subject key identifier:   78:F5:2F:81:28:67:06:4E:EE:B5:72:AB:21:93:9F:A9:14:3B:AE:FA
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0758
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ePUvgShnBk7utXKrIZOfqRQ7rvo.roa
Signing time:             Tue 30 Apr 2024 02:01:35 +0000
ROA not before:           Tue 30 Apr 2024 02:01:35 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        49.98.144.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 23 Jun 2024 14:09:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1880 (0x758)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr 30 02:01:35 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=78F52F812867064EEEB572AB21939FA9143BAEFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:53:14:0d:ee:77:bd:6f:05:96:0a:31:81:7c:
                    e3:5c:fb:e1:e3:44:d7:68:91:dd:8c:aa:ea:33:9a:
                    c0:29:1a:7a:97:9e:81:4f:3a:c0:a5:40:47:58:08:
                    7b:28:f4:fb:65:ef:0e:c1:0c:2f:34:7c:6f:50:08:
                    a8:be:c2:9e:28:04:68:f9:f8:6f:27:d6:b9:d6:c6:
                    c6:24:82:1f:06:11:d7:32:f7:2e:d0:0a:ec:c0:7e:
                    12:2b:c2:8c:36:d1:ec:4e:ac:f6:db:8e:9e:bc:e9:
                    8e:a5:ca:07:e5:65:5d:b4:6a:c3:0e:de:a4:fe:45:
                    c3:5f:f8:5c:cf:1c:7d:51:91:8a:fb:e7:8e:23:0b:
                    b5:58:0f:3a:01:67:22:e1:aa:c2:74:07:e3:20:b1:
                    d4:78:0c:27:12:ae:07:0f:80:6b:26:82:62:15:ce:
                    5b:2f:4f:01:7a:a4:9c:3a:45:55:fb:92:22:41:61:
                    79:d4:2c:f7:e1:91:3a:ec:d4:7c:0a:6a:9b:bf:5f:
                    2e:77:5d:e8:4e:95:18:72:28:fe:06:02:a2:f5:85:
                    9b:10:f5:a2:97:e8:1f:0a:44:87:16:79:19:7a:8a:
                    03:f7:3b:fc:e2:46:fa:2b:3a:54:9f:a4:1d:40:e2:
                    50:87:3f:b2:17:4f:5d:5c:29:74:3e:06:79:ec:0c:
                    99:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:F5:2F:81:28:67:06:4E:EE:B5:72:AB:21:93:9F:A9:14:3B:AE:FA
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ePUvgShnBk7utXKrIZOfqRQ7rvo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.98.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7d:fd:6e:32:dd:2d:e5:60:ee:10:95:7a:aa:f6:92:2e:9b:8e:
         24:b3:53:2d:f3:58:26:16:32:e2:0c:9c:d4:3e:9b:b3:7f:2c:
         e3:6e:17:59:67:e3:c1:fd:90:5b:91:30:3f:cd:a4:31:15:18:
         f8:fb:06:93:4b:6d:86:a1:12:8f:13:91:ce:4e:01:1a:e4:b2:
         3d:2e:3e:de:93:c5:6f:81:79:a9:ec:ca:d4:d3:8e:4f:d9:8c:
         fc:82:13:f1:5a:08:84:f6:ce:1a:12:42:64:e9:49:c2:10:9a:
         9e:49:8c:75:35:a2:9e:13:3e:89:c3:09:1a:66:ee:a2:56:76:
         df:a6:0b:d1:8a:b2:a7:c8:f7:a9:ce:d3:b4:ec:2c:d5:29:d4:
         fe:fe:c8:0d:d7:b2:72:59:f9:23:4a:2f:13:90:5e:c1:5f:6e:
         6c:6c:3d:ea:cc:0f:8c:13:37:66:7a:d5:0d:6b:bc:59:ac:ca:
         04:45:5e:50:b7:67:f9:ca:1d:f7:e6:f2:81:c6:86:ce:cb:59:
         92:54:78:72:8b:55:df:7c:62:dd:c2:2f:56:b8:98:7f:61:cc:
         0f:8b:aa:17:a7:25:2b:f1:f0:e1:13:91:cb:b8:ff:a6:07:c6:
         43:ff:44:ec:78:00:28:03:31:b1:c2:7d:4c:d0:62:74:42:90:
         08:f1:95:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 11:39:12 2024 by rpki-client on console-fra.rpki-client.org