Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/gNBNJB7iQMPj8OTBjks_baAh9kM.roa
File:                     gNBNJB7iQMPj8OTBjks_baAh9kM.roa (raw, json)
Hash identifier:          hWgVbdyBju0d0PXZKYUA3hO5JQqv53WLVOEivhUBsx8=
Subject key identifier:   80:D0:4D:24:1E:E2:40:C3:E3:F0:E4:C1:8E:4B:3F:6D:A0:21:F6:43
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       03FD
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/gNBNJB7iQMPj8OTBjks_baAh9kM.roa
Signing time:             Tue 06 Jun 2023 16:03:51 +0000
ROA not before:           Tue 06 Jun 2023 16:03:51 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.104.24.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 May 2024 13:36:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1021 (0x3fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun  6 16:03:51 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=80D04D241EE240C3E3F0E4C18E4B3F6DA021F643
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:4d:58:62:9a:43:f6:8e:12:cb:46:38:c8:9d:
                    8a:e3:4d:13:ca:69:2a:87:3c:9f:6c:15:66:28:74:
                    86:c2:23:ee:a2:39:0c:33:60:0a:f7:7b:eb:a9:ea:
                    5e:23:31:2b:96:0b:af:db:53:7c:69:8b:d4:5b:13:
                    93:9b:7e:4d:63:a1:fb:e5:9b:ed:88:e2:70:24:e6:
                    f9:93:2e:85:07:62:f8:8f:d2:9e:d2:64:b9:5e:8a:
                    fd:ee:03:34:1d:04:5c:cf:f8:8f:b5:a4:71:ec:33:
                    84:d9:05:4f:9a:ba:3e:03:ad:b2:d9:bb:70:41:17:
                    aa:40:fd:60:00:da:c3:a4:cf:32:66:e6:60:7f:b7:
                    57:cf:9a:56:ec:6d:9b:6f:6b:48:32:64:e0:f5:30:
                    cf:d7:cf:a0:7e:34:aa:f1:79:12:4a:19:1d:c4:a7:
                    b2:0c:7c:a0:b1:46:83:a0:1e:4a:5b:3b:41:3c:75:
                    8a:de:42:0a:75:3e:d5:c0:05:f6:96:f1:0b:4f:8c:
                    ce:2d:8e:98:8f:03:1f:80:2d:a8:d9:65:50:13:eb:
                    4b:d6:52:37:3a:c9:7f:ed:cf:48:bc:b7:32:0a:f9:
                    fb:12:53:20:fb:37:0f:21:93:60:6d:8a:56:01:dc:
                    08:19:fc:7b:09:8c:da:fe:a0:84:e6:e8:26:48:e6:
                    c3:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:D0:4D:24:1E:E2:40:C3:E3:F0:E4:C1:8E:4B:3F:6D:A0:21:F6:43
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/gNBNJB7iQMPj8OTBjks_baAh9kM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.104.24.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c5:de:71:14:a7:1a:5f:8c:83:f4:2b:91:44:90:1d:a2:e2:3f:
         cc:2d:30:b7:70:2d:cf:20:b5:5e:84:23:94:f2:97:ae:ae:20:
         0b:5d:93:6c:d3:8e:4d:48:10:36:29:f0:1d:54:9e:52:ab:02:
         fc:b0:f0:d8:b4:b9:ac:4d:bc:63:04:99:67:9d:89:12:57:a3:
         57:f0:8f:dc:be:e7:4f:50:8a:96:4f:56:11:8a:2c:3c:5a:ac:
         57:02:95:21:f5:d6:b5:45:6a:d5:04:34:c0:60:0a:9a:64:64:
         1b:02:43:77:44:69:59:31:3b:e2:6c:ed:e3:d5:f6:df:c4:cf:
         91:c7:ce:02:19:ae:8f:d7:b9:c2:f0:f4:dd:49:e2:5d:38:e6:
         13:1b:88:3a:02:5c:e6:af:e8:68:9e:5d:de:c7:f6:b3:2c:42:
         e2:b9:2a:33:c6:91:30:eb:7f:14:a8:7d:ad:d4:3d:e5:91:08:
         cb:d7:e1:f8:08:de:90:b0:75:03:2e:d2:57:f2:9e:ff:1e:90:
         71:bd:5a:ed:ba:74:fd:09:2d:04:f8:da:83:db:54:a0:ca:49:
         43:0e:f5:0f:0f:10:0d:50:17:c1:33:3d:1d:57:86:88:40:f3:
         8c:db:a9:f3:db:ed:6d:c9:0b:f6:b9:dc:5b:37:56:ec:78:2a:
         cf:30:d8:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:15:57 2024 by rpki-client on console-ams.rpki-client.org