Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/mMHtO4rLCDdJO6pcvizPhvWvT9g.roa
File:                     mMHtO4rLCDdJO6pcvizPhvWvT9g.roa (raw, json)
Hash identifier:          XB3tmQE5ySMN5qDaAd9KA4ydtOIbiwlNDxkwkDXw568=
Subject key identifier:   98:C1:ED:3B:8A:CB:08:37:49:3B:AA:5C:BE:2C:CF:86:F5:AF:4F:D8
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       065E
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/mMHtO4rLCDdJO6pcvizPhvWvT9g.roa
Signing time:             Tue 30 Apr 2024 01:34:48 +0000
ROA not before:           Tue 30 Apr 2024 01:34:48 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        49.106.210.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 23 Jun 2024 11:53:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1630 (0x65e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr 30 01:34:48 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=98C1ED3B8ACB0837493BAA5CBE2CCF86F5AF4FD8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:cd:09:ac:d8:56:45:5d:97:65:7d:e3:f7:f1:
                    ed:13:d2:73:cf:df:16:c4:27:4f:5c:15:29:46:4d:
                    71:d0:66:17:5a:93:ea:e1:41:7a:47:d3:49:6e:b9:
                    97:27:ce:d8:08:c6:61:f8:39:3d:3b:89:47:de:5f:
                    ed:4a:14:d1:b1:b6:b3:13:6b:46:58:ef:49:4e:bc:
                    d0:c3:c0:de:12:77:25:08:f4:e0:92:d5:5c:7e:79:
                    2a:f9:f4:2e:e2:8b:9d:f1:a2:32:33:5b:96:38:61:
                    e6:bb:28:9a:db:55:82:96:85:e8:45:b4:51:70:e5:
                    d8:e0:49:c3:15:9a:1a:2c:1a:a8:c3:f0:4f:ff:dc:
                    29:59:ec:c3:3a:c9:10:d0:c0:51:94:68:71:0e:14:
                    32:ec:43:b8:8b:53:fb:c5:90:c0:a1:bc:2b:cc:f0:
                    02:96:09:2e:39:cb:2d:de:1b:b1:c2:af:81:97:4b:
                    d2:a9:ed:d5:a0:26:90:7a:f4:27:c7:ea:61:3e:e1:
                    8b:44:ab:40:05:d1:2d:23:25:da:75:45:6c:71:7e:
                    2d:ce:90:f6:68:31:e8:b9:ab:48:d0:96:53:65:18:
                    86:c2:fe:b1:b9:dd:56:63:c5:0b:a8:3c:c3:1a:fe:
                    1a:a4:c4:cc:8b:18:a2:31:c7:a2:a0:83:1e:4d:7e:
                    fe:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:C1:ED:3B:8A:CB:08:37:49:3B:AA:5C:BE:2C:CF:86:F5:AF:4F:D8
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/mMHtO4rLCDdJO6pcvizPhvWvT9g.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.106.210.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d8:18:e4:d9:0c:f5:ed:bb:0f:57:b6:28:55:aa:a0:df:d3:63:
         c4:67:bf:00:a8:9e:9d:9e:db:bd:d5:0f:c1:24:0c:9a:1f:4c:
         9d:bf:59:d2:2c:0e:11:0e:1f:10:b7:eb:bc:06:6a:62:a8:15:
         79:7b:88:ff:01:ca:84:28:ab:cc:fa:40:99:ff:bf:6b:f0:7f:
         a1:28:eb:69:33:1d:b6:b0:7d:a6:59:f1:70:26:85:89:d1:2f:
         5b:23:49:2f:0f:88:6d:ca:b0:a7:16:79:6c:02:af:c1:af:0d:
         76:31:84:aa:5d:0e:92:69:a6:f1:86:2a:91:78:e6:1a:fc:20:
         25:72:ff:61:d9:27:ef:aa:7a:93:9b:8d:34:d8:a5:df:41:b1:
         d6:b8:16:cd:d0:02:30:87:8e:ee:45:ff:8e:0c:fc:48:53:1a:
         e3:c0:87:f1:b6:9e:8d:15:10:73:f6:93:c1:48:17:6c:f6:60:
         03:dc:99:a6:d8:9f:98:18:b7:2d:24:50:2a:54:11:f9:21:b3:
         3e:39:86:e0:0c:d3:a7:08:7b:46:87:26:1e:e2:7f:96:e5:1c:
         eb:ba:d9:af:05:a9:d2:30:d6:6a:68:ac:de:79:c0:93:61:14:
         5a:1e:bc:34:38:f4:60:53:09:48:78:ad:69:61:98:79:f7:79:
         a0:b7:73:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 12:57:22 2024 by rpki-client on console-fra.rpki-client.org