Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/jNdIYeegrR8OgOyjp3ij3PnvLFY.roa
File:                     jNdIYeegrR8OgOyjp3ij3PnvLFY.roa (raw, json)
Hash identifier:          /2A+e0HB3psu5LuVlTcnnzlCYIlcvk3WdnFGz5nKaLc=
Subject key identifier:   8C:D7:48:61:E7:A0:AD:1F:0E:80:EC:A3:A7:78:A3:DC:F9:EF:2C:56
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       090E
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/jNdIYeegrR8OgOyjp3ij3PnvLFY.roa
Signing time:             Tue 30 Apr 2024 02:28:42 +0000
ROA not before:           Tue 30 Apr 2024 02:28:42 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        49.106.186.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:41:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2318 (0x90e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr 30 02:28:42 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=8CD74861E7A0AD1F0E80ECA3A778A3DCF9EF2C56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:81:e6:57:cc:6a:60:c6:d5:6c:06:fc:83:99:
                    85:9c:54:28:7a:84:24:29:36:88:9d:89:ca:67:8d:
                    00:57:4e:6a:bb:77:02:c3:49:f4:52:ab:67:84:65:
                    f0:a6:b0:81:5a:83:7b:29:8b:50:63:d1:52:9e:68:
                    11:86:01:7d:2b:83:91:92:52:c0:83:3e:26:d1:1a:
                    97:46:54:42:f2:91:eb:97:f4:0a:c8:8f:59:6d:e9:
                    54:ef:3f:11:2f:a8:ed:b0:5a:4c:63:6f:fd:47:a7:
                    03:c5:75:c5:fa:e8:cb:74:6c:09:8a:dd:56:7e:43:
                    cf:74:da:fe:63:99:23:4e:1b:90:b8:1c:69:94:1f:
                    3c:7e:33:8a:ee:a3:82:81:0b:e4:de:5f:85:90:2d:
                    2e:fe:8f:94:b8:b6:6d:42:3e:89:82:3b:17:80:65:
                    96:76:d3:69:33:1e:65:12:e2:40:e2:eb:59:95:c3:
                    50:ce:7f:5a:17:95:e1:e7:e6:d8:dc:48:30:58:84:
                    1d:98:a5:99:e2:a7:72:c8:1d:b4:ab:19:07:aa:e1:
                    92:00:f9:98:76:b6:6c:b6:a1:e8:ff:88:83:ba:92:
                    18:51:6d:84:1d:0a:05:f6:17:06:70:dd:ac:b8:93:
                    a7:be:ea:a1:e4:ff:88:4c:86:d9:2e:92:c4:44:1a:
                    6e:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:D7:48:61:E7:A0:AD:1F:0E:80:EC:A3:A7:78:A3:DC:F9:EF:2C:56
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/jNdIYeegrR8OgOyjp3ij3PnvLFY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.106.186.0/23

    Signature Algorithm: sha256WithRSAEncryption
         30:94:2b:1d:bb:c5:b7:f3:a6:3f:cf:de:14:ee:6d:e4:ba:ef:
         d0:10:da:c3:06:a9:85:98:6b:b8:1e:9a:b3:c9:d4:01:6d:3b:
         0e:8f:76:ce:62:d7:6b:a6:5c:ab:6d:b7:cf:17:4e:bb:20:3e:
         6b:3d:5b:57:61:19:24:de:f3:c7:87:ad:5a:3e:9f:85:7f:0b:
         b2:53:ea:41:0f:64:ca:f9:a1:4e:8f:84:0f:d4:80:e6:40:ef:
         60:aa:11:90:a7:63:b7:ab:1e:ea:ee:5e:53:c8:3c:b9:83:49:
         33:9a:87:42:cc:eb:96:a0:97:64:2c:a9:94:1b:a8:df:fc:ac:
         4e:18:d3:2b:94:b7:a6:e4:59:5b:64:49:76:0b:94:b5:9a:54:
         60:b6:2d:e1:71:34:71:38:89:2b:da:64:97:71:7a:ab:f2:34:
         c1:9d:52:40:94:7b:76:86:0a:4f:78:37:63:06:29:48:69:6f:
         b3:08:ef:27:79:49:10:ff:9d:a8:6a:0e:5a:3f:66:a7:f3:50:
         8c:2b:44:5e:6c:41:0b:79:18:99:65:c0:41:3e:18:b1:78:cd:
         50:a9:47:69:37:16:fe:93:22:52:18:a4:68:fa:b6:67:82:25:
         cd:18:e3:ff:70:8f:4e:c5:1a:b0:2b:6f:12:d2:f2:30:a5:f8:
         1c:43:71:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:24:02 2024 by rpki-client on console-fra.rpki-client.org