Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/j-5XTW1UQlsZ50Z7gyyxgEATfkU.roa
File:                     j-5XTW1UQlsZ50Z7gyyxgEATfkU.roa (raw, json)
Hash identifier:          o4ScO3xuDWDY3wu8U+ZTc0kI0rQBK21Sfk4uEqwpc7w=
Subject key identifier:   8F:EE:57:4D:6D:54:42:5B:19:E7:46:7B:83:2C:B1:80:40:13:7E:45
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       06C7
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/j-5XTW1UQlsZ50Z7gyyxgEATfkU.roa
Signing time:             Tue 30 Apr 2024 01:46:57 +0000
ROA not before:           Tue 30 Apr 2024 01:46:57 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        49.100.192.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1735 (0x6c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr 30 01:46:57 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=8FEE574D6D54425B19E7467B832CB18040137E45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:51:c4:63:31:f5:c8:1c:6d:76:d2:58:ad:a6:
                    40:83:3d:11:bd:f1:bd:6b:a2:58:81:ee:0b:41:3c:
                    39:aa:63:5a:3f:0c:1d:a2:cc:7d:a1:b2:0b:96:3a:
                    f9:32:87:25:02:74:c7:98:e7:d5:94:7a:34:37:9b:
                    f7:e0:fe:77:69:92:aa:8b:73:d3:be:0f:df:66:99:
                    81:69:ca:c8:65:4e:ea:34:af:da:9d:92:b8:b5:f4:
                    f4:a0:f0:1b:99:ab:73:bc:f3:0d:73:5c:bb:dd:2c:
                    44:7c:a5:92:95:fb:fc:2c:a7:19:dd:9e:69:63:76:
                    dc:6d:ee:77:c1:6f:2a:f9:e0:47:63:b8:4e:60:c4:
                    67:d5:79:1a:e5:11:bc:53:89:40:3e:91:03:4c:f7:
                    b3:56:d9:7b:06:56:99:ce:21:c2:82:85:2b:50:d4:
                    eb:28:5d:01:aa:44:4d:63:e4:6d:55:cd:26:85:15:
                    0f:4f:16:7e:f0:ab:dd:5b:fe:14:38:82:6b:b5:c2:
                    79:65:a6:0e:56:91:43:35:13:2f:e9:ac:c0:33:49:
                    c9:b1:95:67:d5:97:dd:0b:2f:1f:10:57:9a:f4:8e:
                    b3:0c:23:20:1d:eb:b6:98:44:0a:39:87:5b:53:2f:
                    a8:a9:0d:4f:c0:30:fa:94:f3:52:6f:61:09:fd:cd:
                    38:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:EE:57:4D:6D:54:42:5B:19:E7:46:7B:83:2C:B1:80:40:13:7E:45
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/j-5XTW1UQlsZ50Z7gyyxgEATfkU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.100.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         3e:87:ee:e1:ff:ef:99:dc:84:30:25:0c:47:a9:30:c7:fb:1d:
         7a:82:15:69:b6:4c:4b:54:0c:54:68:0a:f9:1b:8d:10:41:62:
         00:25:da:86:e1:53:47:ac:31:3d:cc:1d:a2:07:b9:d2:b6:84:
         16:9d:6b:0d:9e:a2:3b:17:ca:3d:a4:83:0f:cd:bb:96:5c:3a:
         11:a3:19:3c:f8:df:81:d5:2c:6c:f7:19:0f:3c:dd:66:3e:90:
         20:88:e1:d4:0e:f4:58:97:0e:99:6c:40:fe:70:dd:28:b4:fb:
         cc:25:6c:f2:db:e9:93:6b:a8:d5:42:49:10:47:f8:33:4f:c6:
         b2:50:7f:48:2f:b8:9d:d0:8c:47:8e:51:7c:61:af:8a:7e:5f:
         39:e8:8f:0b:9f:d7:49:2c:df:a4:43:6d:0e:6d:47:9b:2e:29:
         28:79:3a:f2:9e:63:63:b8:03:4c:1d:f9:fc:e4:44:7e:6d:e5:
         6c:47:6f:9e:5b:56:60:1e:d3:8e:f0:a1:45:f1:e6:cc:59:27:
         62:c3:76:f7:71:82:63:98:39:14:b3:71:bd:b8:8d:8f:4f:7f:
         a0:4d:86:d4:93:5d:50:8d:96:e6:fd:eb:a1:c0:21:bd:3a:75:
         5b:1a:29:6d:79:8a:29:c5:ab:72:3d:c6:52:e2:60:58:ab:7e:
         67:cb:9c:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:38:48 2024 by rpki-client on console-fra.rpki-client.org