Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/msq-ZRUuegA4xe444Udvd9IPp9M.roa
File:                     msq-ZRUuegA4xe444Udvd9IPp9M.roa (raw, json)
Hash identifier:          2WlsIukGY5cl/ZmsgFcWSfHRfVQ5Plx06poH0MKA2GQ=
Subject key identifier:   9A:CA:BE:65:15:2E:7A:00:38:C5:EE:38:E1:47:6F:77:D2:0F:A7:D3
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0A78
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/msq-ZRUuegA4xe444Udvd9IPp9M.roa
Signing time:             Sun 30 Jun 2024 01:50:35 +0000
ROA not before:           Sun 30 Jun 2024 01:50:35 +0000
ROA not after:            Tue 24 Jun 2025 10:46:45 +0000
asID:                     9605
IP address blocks:        211.14.124.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2680 (0xa78)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun 30 01:50:35 2024 GMT
            Not After : Jun 24 10:46:45 2025 GMT
        Subject: CN=9ACABE65152E7A0038C5EE38E1476F77D20FA7D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:d4:d3:26:ea:cd:d4:19:d0:f1:ff:57:27:37:
                    54:42:15:fb:e5:9c:5b:26:03:c6:7a:47:a0:02:a0:
                    e3:e4:db:9f:c1:d9:9c:09:31:cb:4a:42:c4:1e:27:
                    d0:1a:56:52:e7:7f:d5:66:b9:8b:ea:9a:51:5f:c7:
                    c3:99:c2:55:87:c4:97:e8:3f:be:5c:55:e9:79:8f:
                    8e:62:4c:01:0b:ed:d4:51:dd:7f:cb:c7:2e:24:8a:
                    96:8a:c9:ff:a6:0f:4c:a4:fd:f3:1f:36:ef:d1:0b:
                    e5:01:32:4e:18:1a:d4:ec:1a:db:77:03:c2:be:fb:
                    90:44:02:cb:2f:b4:83:00:76:16:a7:e5:25:6c:d0:
                    d8:95:ef:31:d1:b6:a2:fe:be:df:91:8b:96:4a:73:
                    ea:0c:ef:fe:ae:91:6d:b5:35:68:2b:90:dc:33:8e:
                    cf:53:bd:bf:bc:16:a3:01:7d:3b:24:b6:1b:0e:d9:
                    d6:fb:a8:5b:e2:40:bb:91:b5:9f:0c:ac:ca:4c:a7:
                    99:b4:eb:ea:54:73:99:61:d0:d0:67:70:65:df:6d:
                    59:dd:b1:a2:96:c2:75:d8:77:5b:00:88:8e:40:50:
                    f0:f3:36:ab:89:16:c0:8f:f2:25:5f:56:66:81:ea:
                    b5:53:d6:de:e8:10:99:57:37:ab:34:e2:c8:66:84:
                    40:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:CA:BE:65:15:2E:7A:00:38:C5:EE:38:E1:47:6F:77:D2:0F:A7:D3
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/msq-ZRUuegA4xe444Udvd9IPp9M.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.14.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2e:06:a9:bb:33:ba:a2:2f:57:c9:00:3a:77:d5:4c:59:e1:85:
         05:99:9f:bf:47:36:ae:2a:e2:bf:46:53:06:cf:c6:db:0e:f6:
         c6:28:75:d1:2e:41:e0:49:9f:c2:bb:b7:e4:86:40:53:74:cf:
         fc:4d:cf:7e:8f:b1:7b:d3:44:46:4e:b3:6e:aa:34:d1:7b:a5:
         21:a6:5b:a1:90:f4:ac:54:84:29:a8:58:2a:64:4a:28:8e:68:
         f7:a2:f8:26:7e:2a:8a:56:37:64:c3:20:2b:1a:9c:4d:af:5c:
         6f:a6:49:82:8f:c9:3a:0f:a4:35:25:bc:40:c8:bd:e8:15:17:
         10:f4:d5:81:72:fe:df:a9:91:0d:dc:f5:d0:42:f2:b7:81:83:
         23:03:d3:7a:8e:17:ad:75:a5:60:60:50:07:86:a3:4a:a7:86:
         b4:aa:c0:44:77:83:89:5a:ff:49:f9:84:69:45:75:59:58:32:
         72:d0:9e:2d:c4:36:fd:51:11:37:b0:11:dc:91:e6:6f:d8:12:
         c0:db:2e:a3:ea:14:f2:59:5d:9f:67:e1:d3:ae:a0:9a:69:4a:
         a5:16:48:d5:40:05:83:af:e9:98:85:17:41:2b:c4:fc:27:38:
         d1:18:e0:36:e9:77:48:8c:00:32:3e:2b:ba:af:b2:98:17:48:
         30:f7:55:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:54:42 2024 by rpki-client on console-ams.rpki-client.org