Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/jqIIDWfe8NKprmYIqEdjDrn_N54.roa
File:                     jqIIDWfe8NKprmYIqEdjDrn_N54.roa (raw, json)
Hash identifier:          UBZQiec96o4KR9UZyNPFpHI7w3fuXe6Dm1jQzJl5/VQ=
Subject key identifier:   8E:A2:08:0D:67:DE:F0:D2:A9:AE:66:08:A8:47:63:0E:B9:FF:37:9E
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0876
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/jqIIDWfe8NKprmYIqEdjDrn_N54.roa
Signing time:             Tue 30 Apr 2024 02:18:33 +0000
ROA not before:           Tue 30 Apr 2024 02:18:33 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        49.104.96.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2166 (0x876)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr 30 02:18:33 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=8EA2080D67DEF0D2A9AE6608A847630EB9FF379E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:f5:d6:50:d4:38:7c:1a:4e:29:a9:1d:6d:0d:
                    8e:f2:98:38:7d:71:11:41:76:91:48:83:fc:db:fb:
                    2c:e3:a1:38:2d:0d:89:98:ff:bd:eb:bb:8a:d6:35:
                    62:a5:bf:80:d6:ce:e3:51:f8:72:e6:eb:8b:da:1f:
                    06:32:d0:e0:67:87:3c:08:28:43:26:84:9b:1e:5e:
                    c1:d8:a4:78:13:a1:51:b7:70:08:02:e1:ce:51:c3:
                    fb:9e:5e:5b:80:f2:4c:65:31:ae:8a:ee:83:82:6f:
                    eb:a3:95:3f:a8:53:37:42:7d:56:ed:15:aa:01:f2:
                    aa:03:72:79:dc:f7:51:1a:73:13:33:b7:3b:09:32:
                    b2:98:21:67:3c:fb:b9:7b:60:2d:5a:18:e5:e9:d5:
                    67:a2:ba:3a:bc:bc:b8:6a:14:1c:4c:e0:5d:cf:e7:
                    36:0a:40:8c:22:31:b1:0b:55:96:52:00:c2:07:bb:
                    fe:7b:f3:75:78:16:8d:e0:60:33:d7:af:29:ae:3d:
                    d6:11:6f:09:46:89:9f:b8:7f:fb:e4:35:8e:1a:49:
                    b5:83:6d:76:1d:5f:ad:e6:15:d5:ba:56:ef:6d:54:
                    6a:ec:24:e8:d4:d2:03:e7:d1:42:7c:c8:fe:a9:9c:
                    b9:6f:12:6c:34:a3:88:5f:35:0e:1b:f7:31:9d:0e:
                    34:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:A2:08:0D:67:DE:F0:D2:A9:AE:66:08:A8:47:63:0E:B9:FF:37:9E
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/jqIIDWfe8NKprmYIqEdjDrn_N54.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.104.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         b8:51:24:e1:b2:98:64:25:53:2a:7d:00:75:d1:23:88:93:9a:
         2f:3c:ae:ea:aa:18:d9:94:5a:ac:03:0e:a6:88:60:2b:9d:1a:
         61:be:41:5e:3f:65:38:24:cf:bb:e1:ba:3f:d8:5b:cd:53:7f:
         2c:6f:8d:36:ae:17:02:48:d8:82:09:4f:53:1f:01:55:e3:8a:
         27:06:2f:f9:b2:c0:f3:24:13:ad:5b:7d:95:cb:e5:4a:bc:72:
         fd:5b:b7:e0:8d:d7:a0:60:83:ac:37:6b:30:cf:71:59:0a:cf:
         67:0b:e9:b5:f6:98:47:8b:f5:0c:7b:43:08:79:36:90:63:36:
         d1:e4:73:04:b2:0a:81:9e:a4:3a:50:d2:ae:45:21:21:45:3a:
         6c:e8:ce:75:77:85:34:bc:28:82:c0:fc:42:36:d3:b1:fd:42:
         53:bc:09:50:66:cf:32:6d:f9:53:58:3f:d8:e9:0e:55:c4:95:
         5b:90:ce:81:14:64:eb:41:8e:3f:b5:34:22:af:7b:bd:b3:fc:
         c7:84:27:db:d1:c0:b7:c6:35:f5:32:1e:14:54:4d:70:1a:69:
         58:22:5c:17:49:70:80:fd:19:84:51:7e:ec:ef:45:d7:f0:a9:
         4a:da:9d:8e:eb:42:0b:05:1e:51:ed:92:70:47:b8:2d:7d:13:
         82:96:67:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:59:11 2024 by rpki-client on console-fra.rpki-client.org