Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/ghaRKtsUG5ii_9eQpoJFfDPQtkk.roa
File:                     ghaRKtsUG5ii_9eQpoJFfDPQtkk.roa (raw, json)
Hash identifier:          +AgPyrFJwTFgseVUsd7qxM3iKcCEu4QT948VtIgexyQ=
Subject key identifier:   82:16:91:2A:DB:14:1B:98:A2:FF:D7:90:A6:82:45:7C:33:D0:B6:49
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       074E
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ghaRKtsUG5ii_9eQpoJFfDPQtkk.roa
Signing time:             Tue 30 Apr 2024 01:58:55 +0000
ROA not before:           Tue 30 Apr 2024 01:58:55 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        49.105.114.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:41:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1870 (0x74e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr 30 01:58:55 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=8216912ADB141B98A2FFD790A682457C33D0B649
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:41:8d:aa:e1:4c:99:16:42:13:d7:20:69:c0:
                    14:66:62:30:f3:b8:56:d8:c8:61:f7:d7:c6:7b:51:
                    24:f1:48:6a:a9:e7:61:24:da:e4:84:41:cd:cb:41:
                    7e:91:14:fa:16:e8:d1:a0:fb:e7:99:69:85:8a:8b:
                    b9:06:5e:ec:f0:69:ab:33:38:fc:f9:ce:91:b9:09:
                    30:dd:81:75:03:7c:12:4a:b2:2f:66:8c:fc:4c:57:
                    80:a5:21:77:c6:f0:9a:ef:f6:1f:67:78:12:b9:e9:
                    af:c6:2b:1f:a4:0c:d8:ce:4c:b3:75:3e:1d:90:e6:
                    38:45:81:88:f3:3b:8d:2d:c7:4c:12:79:d2:10:70:
                    97:36:56:ec:b7:35:46:0b:44:80:54:73:da:ca:a6:
                    24:d6:95:74:8b:66:fb:9d:4c:82:7e:a5:5d:87:5f:
                    75:7e:4d:e7:6c:2e:92:ed:7c:a5:4a:0a:45:01:74:
                    b9:f4:1d:46:a6:52:4b:78:ba:b1:b3:bd:36:ae:57:
                    b7:27:d5:d9:fe:1a:6e:14:c6:14:77:0d:6b:a6:f8:
                    fe:76:4b:9a:68:11:66:6d:e0:e9:a0:a9:74:2f:75:
                    64:cb:ce:14:ff:5d:f6:cd:a9:a6:1c:cc:08:6f:28:
                    a9:43:7c:00:cc:87:bc:e0:86:c9:cd:34:04:e3:3c:
                    46:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:16:91:2A:DB:14:1B:98:A2:FF:D7:90:A6:82:45:7C:33:D0:B6:49
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ghaRKtsUG5ii_9eQpoJFfDPQtkk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.105.114.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d9:6a:2c:69:38:3b:14:f0:34:9d:53:19:3f:a9:d8:1e:19:2b:
         65:7f:fd:36:2d:b9:6c:51:fa:37:b2:d8:4e:9a:73:78:e7:ca:
         a8:0d:e2:e5:84:b6:7f:a5:57:32:49:96:3f:c7:a3:57:29:71:
         b4:a8:56:cc:94:52:89:21:f7:61:6b:8c:a8:79:70:4e:5e:df:
         b5:62:2f:a1:7d:5c:dc:28:e4:04:e6:18:85:5d:0a:17:d5:df:
         f2:23:b3:8f:f1:78:98:f6:cd:dc:6c:50:aa:4f:df:f3:88:2f:
         61:14:e3:fc:55:3a:12:5c:73:4e:3a:1d:64:97:ae:cb:e7:74:
         da:57:7d:09:94:c8:e9:6b:80:94:18:af:f8:f8:ad:02:60:13:
         6a:97:49:fb:92:76:3b:ff:1f:ec:98:3d:26:4e:dc:cc:84:af:
         ac:93:d4:9f:ab:e9:32:41:7b:f7:7f:12:b0:10:c9:7a:c9:25:
         bf:93:6e:22:26:de:13:f6:5d:8b:d5:35:87:32:fc:a6:aa:b0:
         8d:61:e9:ea:cf:e5:70:31:a4:78:02:1e:06:a6:47:95:e9:6c:
         8a:a3:58:44:dd:21:ed:d9:00:f8:a8:d0:90:5e:55:8c:6d:c1:
         b7:ba:ae:91:9d:64:38:f1:ec:a0:1c:32:64:87:31:9e:ed:ae:
         7f:b2:28:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:24:02 2024 by rpki-client on console-fra.rpki-client.org