Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/j97HUmEta0OaIDjsw7xE0wv_sCI.roa
File:                     j97HUmEta0OaIDjsw7xE0wv_sCI.roa (raw, json)
Hash identifier:          YmrG+hnZtibAjGyQMmTxUryPeQcYf9ecrsnYLeSLR1M=
Subject key identifier:   8F:DE:C7:52:61:2D:6B:43:9A:20:38:EC:C3:BC:44:D3:0B:FF:B0:22
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0952
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/j97HUmEta0OaIDjsw7xE0wv_sCI.roa
Signing time:             Sun 30 Jun 2024 01:29:37 +0000
ROA not before:           Sun 30 Jun 2024 01:29:37 +0000
ROA not after:            Tue 24 Jun 2025 10:46:45 +0000
asID:                     9605
IP address blocks:        49.108.0.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 12:58:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2386 (0x952)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun 30 01:29:37 2024 GMT
            Not After : Jun 24 10:46:45 2025 GMT
        Subject: CN=8FDEC752612D6B439A2038ECC3BC44D30BFFB022
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:58:c9:f4:43:d2:70:a6:6a:51:fa:77:ba:b5:
                    a7:96:08:91:5d:9f:3a:56:04:86:f5:99:7a:9f:96:
                    7b:27:40:1d:f0:8b:e2:22:1c:20:44:bb:77:22:ef:
                    1a:19:31:37:b2:68:c9:e7:02:90:77:da:de:7c:09:
                    d2:62:73:79:70:b9:ca:8d:5d:cd:91:b6:64:64:b5:
                    89:67:6c:39:0c:5a:a9:30:5e:25:89:6d:d0:4d:c7:
                    2a:eb:98:13:3b:91:b2:85:fd:bc:c8:bc:20:1d:d5:
                    c1:a9:bc:f8:a7:c9:e9:58:4f:b9:03:bb:d7:4d:36:
                    02:62:b3:73:0f:59:ea:17:fb:62:cd:66:b4:01:64:
                    6e:b9:76:98:48:84:eb:59:ed:74:9c:f4:3c:52:8a:
                    44:76:6d:28:2a:35:75:be:21:5e:1f:b8:5e:66:24:
                    bb:ac:8b:70:55:5a:11:84:a3:5c:a6:72:24:1e:e2:
                    68:df:bc:4a:76:e0:31:f2:2c:61:b5:2d:3b:a7:a9:
                    46:c0:96:c5:01:8e:32:21:eb:82:d5:fd:4f:2b:0f:
                    8c:3c:29:ee:27:52:43:ef:f3:7d:a9:30:d9:c5:60:
                    9a:8f:ef:49:f4:47:54:50:ea:b2:26:51:28:70:96:
                    77:1e:83:c5:28:81:9f:f3:ac:14:6d:a4:f5:c5:a6:
                    8a:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:DE:C7:52:61:2D:6B:43:9A:20:38:EC:C3:BC:44:D3:0B:FF:B0:22
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/j97HUmEta0OaIDjsw7xE0wv_sCI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.108.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         b1:24:a9:de:3e:b3:7b:a4:81:0d:41:0b:ca:23:de:d5:5f:3a:
         26:fc:35:91:f5:67:c6:e0:1c:55:28:4f:df:f0:a9:0f:19:9e:
         6f:58:f7:21:13:c1:ec:b8:a8:20:da:4a:a9:26:62:8b:70:21:
         9d:1c:46:02:f4:69:dc:31:d2:79:87:94:d2:9d:11:cf:ab:1c:
         dd:98:c8:8a:53:ca:ac:9f:7e:ce:ae:da:3d:13:ae:6e:78:ca:
         d9:9c:28:86:44:25:fc:78:79:6b:7a:1d:f3:c6:1f:ed:7a:c9:
         c0:24:b6:27:8b:3f:b4:cc:9e:90:28:91:9c:15:d3:96:b0:99:
         0b:43:9c:25:61:2b:30:f1:24:91:a3:a4:6e:17:15:a6:c7:de:
         bf:65:ba:6e:85:0a:de:25:b2:9d:a3:5e:ce:7d:59:70:c3:be:
         be:e6:12:50:08:7a:79:59:5f:5c:46:80:e0:44:f8:23:0d:20:
         6b:01:c7:3b:89:da:cb:f9:df:89:79:29:ab:af:52:bd:2e:8b:
         b6:5a:7c:52:28:ef:ac:ae:31:d4:72:0c:f6:3c:d3:95:01:a6:
         78:74:9d:66:ca:03:f8:77:75:d7:34:6f:ea:e9:05:ba:16:c9:
         04:ab:ec:26:17:63:90:84:5b:dc:e5:6b:17:31:fc:a1:43:48:
         fc:7f:cf:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:21:24 2024 by rpki-client on console-ams.rpki-client.org