Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/exy3ifuBR_mWZDJghgfvRcC_fOY.roa
File:                     exy3ifuBR_mWZDJghgfvRcC_fOY.roa (raw, json)
Hash identifier:          R/ceKJQHiA+m6RNp3QkaeAuut6ijD229syn4Hbpcb7Y=
Subject key identifier:   7B:1C:B7:89:FB:81:47:F9:96:64:32:60:86:07:EF:45:C0:BF:7C:E6
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0946
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/exy3ifuBR_mWZDJghgfvRcC_fOY.roa
Signing time:             Sun 30 Jun 2024 01:29:32 +0000
ROA not before:           Sun 30 Jun 2024 01:29:32 +0000
ROA not after:            Tue 24 Jun 2025 10:46:45 +0000
asID:                     9605
IP address blocks:        49.105.89.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2374 (0x946)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun 30 01:29:32 2024 GMT
            Not After : Jun 24 10:46:45 2025 GMT
        Subject: CN=7B1CB789FB8147F9966432608607EF45C0BF7CE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:2d:54:1b:1f:45:8f:1f:2c:2a:cf:f7:b7:38:
                    13:e3:a3:82:c2:8e:ae:4f:e1:66:83:fb:c5:71:a3:
                    3a:bc:08:52:85:c6:0c:cf:09:b4:fb:a1:d8:ba:b6:
                    54:07:ce:2b:04:0f:7e:b3:54:18:6a:1c:f9:f8:40:
                    05:d5:c5:e5:29:93:c0:3a:12:b5:b1:54:37:0d:53:
                    e5:87:48:a5:00:ce:df:db:17:37:39:85:18:35:07:
                    9b:d3:4b:60:a2:a9:af:7b:e5:fe:cb:dc:4c:85:b0:
                    66:09:c3:e2:88:97:59:fd:08:35:27:40:dc:30:eb:
                    be:e9:3c:8e:85:fa:65:f5:78:33:cc:ed:92:8d:6d:
                    1f:a7:89:1a:3b:af:65:3a:c2:29:d5:35:42:10:02:
                    25:48:21:f3:3a:7e:bd:dc:eb:35:f0:cb:72:93:3b:
                    6f:b8:10:f5:43:dd:bb:45:c8:5f:c7:3c:a7:75:67:
                    4c:86:2a:da:39:8b:c9:9e:79:7b:8d:7f:9b:6f:9f:
                    42:87:92:39:cb:7b:a4:a9:d7:11:e1:a6:a5:ac:52:
                    20:c4:fc:eb:54:e5:9c:1e:e1:e6:ae:30:a4:d5:e1:
                    9f:76:14:3a:a8:9b:b6:d5:3e:a7:74:50:ae:92:70:
                    74:64:d6:c6:88:41:25:36:24:46:94:14:e3:6a:6b:
                    25:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:1C:B7:89:FB:81:47:F9:96:64:32:60:86:07:EF:45:C0:BF:7C:E6
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/exy3ifuBR_mWZDJghgfvRcC_fOY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.105.89.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:2d:61:b8:f3:3b:75:b7:fc:b9:df:40:41:11:c2:2c:43:6a:
         92:c6:0d:47:5c:51:20:6b:87:15:74:a2:d8:a7:66:8b:2f:9b:
         94:dc:49:bb:81:d2:86:d7:47:f5:63:aa:e6:30:81:0f:45:c1:
         fc:7a:28:9e:3e:16:e8:af:44:c1:b2:be:59:71:ed:25:88:9d:
         fe:c9:ea:45:61:7c:25:b9:33:74:13:5b:29:de:29:97:63:d0:
         7f:be:11:50:9c:b1:1e:cd:76:f4:4f:b3:8e:0f:9b:b4:45:0d:
         4c:81:b3:7f:a5:f6:47:e0:34:ca:96:0c:7a:44:69:96:2a:33:
         7f:6b:b9:be:5c:12:fb:ce:d9:96:c8:fc:01:e2:71:fb:b6:a5:
         c0:90:dd:89:be:27:38:78:b1:c5:46:55:da:04:3b:66:78:65:
         33:c3:9f:45:68:f4:e2:cd:1f:c3:97:57:35:a0:df:ad:39:e3:
         d6:76:54:67:1c:a3:df:17:71:22:7f:10:37:31:01:7e:a6:51:
         15:c1:cc:81:8b:b2:34:32:59:77:65:66:e4:46:e3:de:25:0c:
         55:90:89:ad:48:7d:1c:57:9a:86:9f:b5:c4:67:d5:56:ad:ab:
         14:5d:ba:05:0a:a9:a0:c6:1b:c4:4e:5f:51:91:3b:7d:b1:04:
         86:16:12:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:45:41 2024 by rpki-client on console-ams.rpki-client.org