Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/m02Isn8cAT-0mlZw2ABawgYC_mw.roa
File:                     m02Isn8cAT-0mlZw2ABawgYC_mw.roa (raw, json)
Hash identifier:          MLTmNQe7LP50bgQdktevMTXvvmfY2JojbzpdnaozwlE=
Subject key identifier:   9B:4D:88:B2:7F:1C:01:3F:B4:9A:56:70:D8:00:5A:C2:06:02:FE:6C
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0565
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/m02Isn8cAT-0mlZw2ABawgYC_mw.roa
Signing time:             Thu 27 Jul 2023 16:56:20 +0000
ROA not before:           Thu 27 Jul 2023 16:56:20 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     9605
IP address blocks:        49.108.208.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1381 (0x565)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jul 27 16:56:20 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=9B4D88B27F1C013FB49A5670D8005AC20602FE6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:3d:2b:94:61:a7:26:a0:5c:09:c7:4b:17:6f:
                    31:d4:ac:0e:7e:db:e3:d4:c9:fa:9b:5d:9d:bf:ac:
                    86:35:1e:fe:1b:30:e0:49:e9:cf:68:d8:34:d8:7b:
                    95:c2:2a:12:7f:7c:ba:63:b1:62:66:af:07:58:f4:
                    93:7a:fb:5b:e4:44:50:7e:e1:34:52:4f:d1:a4:c0:
                    b6:27:ca:3f:a7:ce:46:76:a1:b7:48:b0:a1:99:61:
                    d7:2e:76:e6:8c:98:2a:27:12:17:2e:69:44:72:0e:
                    aa:8f:5a:93:d8:b8:b8:ec:79:86:35:67:42:86:4e:
                    ca:a3:2f:89:3b:30:53:eb:be:3d:cb:f0:7e:3e:ed:
                    cd:7b:98:f6:26:34:52:27:8a:80:f8:72:ce:5c:b1:
                    fb:65:d0:47:e1:7b:d3:7e:63:b7:f7:52:7d:2f:39:
                    04:b0:40:ff:07:10:a9:fe:dd:ae:aa:ec:6f:37:33:
                    24:d0:b9:87:d6:14:98:a5:b4:39:8f:4a:66:5f:d9:
                    cd:15:d5:d7:fa:0e:2f:01:f4:23:91:e5:70:b6:86:
                    a5:cb:27:29:0e:cd:a7:37:60:8e:60:68:7c:c1:48:
                    cc:08:04:3e:d7:56:a7:c4:4f:53:c3:2c:a2:61:d6:
                    f9:47:88:ef:b2:ce:48:de:87:4c:47:b7:e8:11:24:
                    17:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:4D:88:B2:7F:1C:01:3F:B4:9A:56:70:D8:00:5A:C2:06:02:FE:6C
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/m02Isn8cAT-0mlZw2ABawgYC_mw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.108.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         7a:2f:18:c3:4d:97:4a:46:74:82:f8:a2:24:eb:20:15:e6:1a:
         ee:ce:28:06:2e:24:8d:01:8d:a1:f6:cb:da:10:3b:a0:5e:3b:
         f9:89:b4:b4:f8:f3:ea:85:a1:d7:92:13:64:39:0f:4f:66:11:
         49:95:b0:17:1f:5b:9b:0f:82:b5:6e:e5:e2:cc:c3:50:ef:62:
         5c:fd:9b:15:7c:f5:7b:ed:a8:58:82:e9:79:c0:a8:00:45:f1:
         4b:62:18:cb:4e:b0:fd:db:6e:eb:c8:a2:2d:09:52:40:09:84:
         ee:2d:58:1f:2c:92:75:5d:4d:11:9c:03:d2:a2:5b:ce:bb:bc:
         5d:27:ac:72:69:49:fd:03:1e:3c:c3:3f:8d:e7:46:60:ca:52:
         29:6d:2d:d7:9a:b7:55:ae:c7:3c:46:c2:56:74:cc:e4:d2:a1:
         a0:df:01:e7:55:47:3e:55:7e:0f:26:f5:a8:f4:8f:c7:8d:f4:
         85:c2:20:34:75:83:c5:01:4f:2f:df:69:44:4c:9e:12:9e:ff:
         07:15:c6:d8:8d:b4:d8:34:e7:20:e8:c5:fb:36:40:17:95:39:
         8d:38:25:39:a8:fa:78:39:ed:aa:df:08:16:ad:18:80:a6:9f:
         ce:7a:a5:0b:40:4b:89:b2:e9:ce:c8:a6:6a:42:c6:c1:28:d1:
         11:7c:7a:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:38:48 2024 by rpki-client on console-fra.rpki-client.org