Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/f84GDXMUcKFBv2NdWOUBxx4UzsE.roa
File:                     f84GDXMUcKFBv2NdWOUBxx4UzsE.roa (raw, json)
Hash identifier:          LoXUsD52Ywlol76tYcjHRH2/m7WVNND1sRw4RlyTzwA=
Subject key identifier:   7F:CE:06:0D:73:14:70:A1:41:BF:63:5D:58:E5:01:C7:1E:14:CE:C1
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0523
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/f84GDXMUcKFBv2NdWOUBxx4UzsE.roa
Signing time:             Thu 27 Jul 2023 16:54:09 +0000
ROA not before:           Thu 27 Jul 2023 16:54:09 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     9605
IP address blocks:        49.110.126.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1315 (0x523)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jul 27 16:54:09 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=7FCE060D731470A141BF635D58E501C71E14CEC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:2b:dc:7f:2b:79:3d:47:c8:2c:3c:64:23:02:
                    4b:18:4f:14:c0:ce:2f:0d:5b:38:9e:75:4c:ee:4d:
                    51:8a:b2:95:b5:93:39:a2:d1:05:1f:f9:56:d4:57:
                    22:5a:0a:1a:51:79:06:8c:ad:b9:96:5d:b3:82:77:
                    93:87:ee:c8:6b:13:9e:eb:04:bd:73:76:f2:07:7b:
                    06:35:50:85:ef:1c:3a:60:ce:61:a2:60:82:3f:ff:
                    14:2f:2c:37:04:15:8d:c3:cc:61:df:7c:7b:22:e2:
                    02:cc:5d:83:ce:b2:4e:c3:67:83:81:7c:3c:bc:42:
                    3e:94:28:49:43:77:fe:01:47:7d:17:48:79:76:61:
                    fc:f8:ed:8a:a3:85:ca:16:08:53:c7:2a:89:6f:27:
                    23:a2:bf:9f:8c:28:01:97:46:8c:6f:05:ca:d1:4b:
                    d5:37:69:ba:86:f1:f3:e1:42:df:6c:a5:00:d8:93:
                    fc:f6:42:1e:a9:02:5e:18:89:54:f6:62:3f:a9:f4:
                    09:66:2e:3f:8a:81:9c:db:8c:67:3e:71:9d:37:df:
                    a1:75:90:5d:40:ff:44:d8:36:c7:ad:8d:86:0c:49:
                    23:0c:f4:17:24:2f:26:67:6c:4f:d4:c9:9e:7e:ed:
                    0b:dc:b2:4b:aa:f3:5c:e1:70:12:58:aa:5c:72:6f:
                    33:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:CE:06:0D:73:14:70:A1:41:BF:63:5D:58:E5:01:C7:1E:14:CE:C1
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/f84GDXMUcKFBv2NdWOUBxx4UzsE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.110.126.0/23

    Signature Algorithm: sha256WithRSAEncryption
         96:9e:1e:c4:70:a7:b4:1e:f8:28:0c:ae:a9:40:e3:99:87:c7:
         ae:59:d7:5a:4d:c2:61:82:fc:27:25:7f:53:88:fb:d7:26:63:
         72:ae:7a:da:37:1b:8d:63:05:1d:83:c8:a7:1b:a3:0d:4d:a0:
         14:33:40:1d:8f:d5:af:7d:d6:df:c7:04:78:c3:eb:74:6e:0c:
         6d:65:f5:39:0b:e1:60:e2:2c:de:48:29:c1:16:66:67:d3:c9:
         c6:01:24:e1:19:d3:2d:02:03:5f:f4:f2:49:ef:92:fa:6d:e5:
         a2:ce:a6:96:10:db:19:ce:bb:02:f5:92:93:4a:06:51:c3:a2:
         eb:f4:27:65:15:29:ed:97:eb:ee:37:13:aa:d1:dd:ed:7f:4d:
         8f:4a:e9:ee:30:59:2a:48:fc:74:d3:85:4b:b2:8b:b4:3e:95:
         ab:ac:3e:d8:d3:ce:aa:bd:09:e2:bd:73:6d:85:83:4c:e9:c2:
         09:2e:57:fe:db:08:7e:04:93:26:e1:1b:28:70:c2:2e:a6:66:
         91:76:78:a1:8d:23:8d:d7:8e:0f:4c:14:c2:be:49:85:51:65:
         23:c3:a0:b3:9a:5a:2b:30:d4:ae:9b:33:48:fb:5b:5f:c4:dd:
         6d:1d:f8:c2:04:0a:b2:14:5d:6f:0f:6a:d9:d8:ba:42:9e:4d:
         65:72:f2:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 15:54:31 2024 by rpki-client on console-ams.rpki-client.org