Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/mlbk32E1f6-yUWQAjzF-c1a2RMQ.roa
File:                     mlbk32E1f6-yUWQAjzF-c1a2RMQ.roa (raw, json)
Hash identifier:          /qO+ioFjz/bEW/L+eZNExIsLCEdRy8+3FtXsaO1TdiM=
Subject key identifier:   9A:56:E4:DF:61:35:7F:AF:B2:51:64:00:8F:31:7E:73:56:B6:44:C4
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       06BD
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/mlbk32E1f6-yUWQAjzF-c1a2RMQ.roa
Signing time:             Tue 30 Apr 2024 01:46:53 +0000
ROA not before:           Tue 30 Apr 2024 01:46:53 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        49.106.226.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 23 Jun 2024 11:53:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1725 (0x6bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr 30 01:46:53 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=9A56E4DF61357FAFB25164008F317E7356B644C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:45:f1:6b:91:cd:e4:2e:5c:26:e2:ba:d1:be:
                    76:97:86:45:be:e0:f0:76:7e:ad:9c:55:c4:bc:71:
                    f2:31:4c:68:8b:99:aa:69:1b:ac:0f:1b:a3:14:94:
                    62:4b:a7:de:7a:f2:f7:94:25:cc:ad:ae:42:48:cf:
                    eb:b4:54:9c:e1:aa:04:f2:57:66:20:ef:6b:87:bb:
                    80:a8:7b:e7:1e:b8:9b:8e:fc:53:3d:4a:0b:f6:8f:
                    c4:28:fc:a7:9b:8b:bd:b3:73:8b:df:35:85:f1:27:
                    1e:bf:13:6a:da:97:ef:2d:c2:5c:79:1f:09:ca:0e:
                    92:e4:28:02:d2:f2:92:90:f3:ec:fe:52:d3:c9:d2:
                    a1:89:7e:ac:90:eb:90:c9:af:9b:0f:65:0f:07:4a:
                    06:aa:ea:28:cb:6d:db:c6:e7:77:cc:6b:19:98:2b:
                    92:db:49:cb:42:68:8b:c5:93:51:0e:4a:c3:fa:d1:
                    55:5c:e3:e6:56:15:13:e8:f5:a0:d0:c4:f6:68:b8:
                    8e:c4:91:b2:39:ab:28:8c:b8:64:ff:4f:9d:90:a8:
                    9b:3f:67:a5:e4:23:d0:84:13:eb:8e:16:f2:32:97:
                    fa:91:cc:41:53:8a:22:06:66:2c:21:2f:33:22:d1:
                    1e:4a:01:ca:07:45:4c:c3:29:69:bf:ec:fd:d6:30:
                    0c:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:56:E4:DF:61:35:7F:AF:B2:51:64:00:8F:31:7E:73:56:B6:44:C4
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/mlbk32E1f6-yUWQAjzF-c1a2RMQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.106.226.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4b:20:71:22:93:cf:91:cd:7e:e1:3a:ea:f9:36:7c:ac:c3:46:
         6f:d7:5b:8e:84:61:cd:ed:a8:ec:11:c2:fd:cc:40:e4:54:ee:
         11:3f:0e:cc:c2:14:d6:f9:69:d9:e3:96:3d:0f:de:b2:29:5d:
         dd:bb:a1:78:94:a8:a6:a9:3a:b7:7c:e2:0d:cb:28:32:8f:2a:
         68:07:93:35:5c:36:9c:d5:54:8a:6b:b7:ab:90:9d:85:e8:93:
         a7:7a:15:e3:f0:09:a3:e7:4e:79:f2:3c:e4:51:61:78:09:0f:
         4c:1c:d6:4c:14:4f:0e:9a:09:23:b8:a6:36:ea:5e:ba:04:e9:
         3d:a7:06:49:fe:9f:99:c5:11:3c:85:aa:7d:62:3a:82:21:06:
         42:a4:8d:3a:05:51:68:a4:9a:a2:9e:40:47:21:de:5d:a3:d6:
         15:24:46:ee:62:a0:01:b2:3c:ff:cd:bb:27:b6:0f:4c:10:2c:
         7e:9a:7e:76:95:58:8f:66:92:14:b2:c8:ff:09:3f:61:e2:f7:
         eb:b5:2d:88:a7:1e:40:4e:f9:6d:11:5f:15:30:0a:69:d1:a3:
         f0:68:37:c2:ec:d2:49:f7:16:c6:76:01:88:c3:f4:70:7c:55:
         3e:04:ab:c3:7f:75:47:95:dc:0f:82:43:69:31:4c:40:a0:f8:
         33:56:ef:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 12:57:22 2024 by rpki-client on console-fra.rpki-client.org