Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/hGQywROGExD30Bkm6JZYW3jbs4M.roa
File:                     hGQywROGExD30Bkm6JZYW3jbs4M.roa (raw, json)
Hash identifier:          oE7Di6veElxYkHw+CB4QupQO/uFaNhfF2aEz5ZQ64kg=
Subject key identifier:   84:64:32:C1:13:86:13:10:F7:D0:19:26:E8:96:58:5B:78:DB:B3:83
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       05FF
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/hGQywROGExD30Bkm6JZYW3jbs4M.roa
Signing time:             Thu 29 Feb 2024 01:35:46 +0000
ROA not before:           Thu 29 Feb 2024 01:35:46 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     9605
IP address blocks:        49.97.111.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:41:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1535 (0x5ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Feb 29 01:35:46 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=846432C113861310F7D01926E896585B78DBB383
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:e4:b9:ba:0d:bc:7b:64:41:f3:ba:6f:6a:8b:
                    e7:e2:f4:d2:13:a1:52:67:7f:7b:5b:f3:0d:51:02:
                    03:16:2a:a4:e8:80:0f:7f:6e:0a:80:23:83:8c:8c:
                    59:df:d0:a2:42:a9:c4:8e:95:f5:ba:ba:71:95:64:
                    02:a4:e5:ff:9d:a4:ed:26:95:b8:01:12:90:e7:e8:
                    21:32:b8:fb:b7:49:9e:ca:2e:b0:98:4d:82:ce:fa:
                    61:ac:6d:90:23:6e:47:2c:2d:6c:55:bc:8c:eb:46:
                    9c:f8:0e:d4:91:4a:66:6d:7c:c2:83:de:6e:b9:57:
                    86:7c:8f:74:57:ad:88:c7:6d:ab:66:5b:d1:a9:d3:
                    20:27:ab:64:8f:30:ff:1b:5e:c1:cb:72:12:f7:6f:
                    b2:4e:3e:58:95:18:57:7c:fd:94:89:f9:0f:69:7e:
                    55:7d:b0:06:66:db:d4:64:02:c5:21:09:4e:b4:11:
                    88:47:df:0e:5e:6c:53:9f:1a:8b:f5:27:b2:6d:22:
                    f4:20:b3:c5:0e:83:af:8e:56:b1:8e:b5:b8:25:a9:
                    33:87:e5:64:d1:8c:54:ff:14:3f:d8:32:aa:cc:8d:
                    bc:ed:86:60:0a:97:5c:9e:de:75:96:77:a6:54:8f:
                    cf:91:69:16:cd:e9:89:31:26:02:ad:05:05:9e:66:
                    9d:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:64:32:C1:13:86:13:10:F7:D0:19:26:E8:96:58:5B:78:DB:B3:83
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/hGQywROGExD30Bkm6JZYW3jbs4M.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.97.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:7a:ca:cd:44:f3:ea:6b:a2:34:f4:9a:fd:bd:f4:e1:f0:03:
         b7:ae:33:97:de:6d:82:3d:de:0c:53:55:64:04:f3:27:cc:a9:
         8a:ad:3c:68:f3:ce:19:de:2e:1c:d1:47:94:71:a0:cc:91:5e:
         29:fe:23:c1:29:4a:04:56:bf:bb:c1:01:99:50:44:00:2e:ee:
         33:fa:1f:2f:9b:4a:99:28:8c:d0:2f:9f:34:38:c5:3c:8b:4d:
         a1:6a:68:d7:6b:8e:34:e0:40:0e:08:a7:17:8f:3c:1f:77:c6:
         af:3e:89:ee:39:2c:1a:23:ba:7f:ba:a2:08:c3:d6:a9:2d:cc:
         72:e8:a9:8e:b4:2d:3d:b4:06:b2:ff:d2:23:aa:d1:ed:9f:c6:
         5b:a1:a1:f6:6e:4c:d7:0b:df:78:11:f1:e6:74:26:fa:e2:2e:
         67:a4:f4:fc:51:7c:72:37:df:a8:44:68:74:7a:f0:4f:cf:21:
         1c:9a:c7:5a:57:d6:26:a8:82:d4:14:71:97:9c:a5:2e:2a:bb:
         bf:4d:bb:99:6b:25:74:fc:83:a2:a4:60:1c:e5:cf:c2:62:d0:
         dd:93:de:da:c8:1a:4d:82:2c:1c:4e:ae:12:12:a8:86:67:a0:
         ed:6e:5c:c2:e4:0f:64:64:d5:fa:8e:e4:ec:88:4f:6c:94:0f:
         da:ad:fa:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:24:02 2024 by rpki-client on console-fra.rpki-client.org