Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/nsX0p8_Gc_EA7nADlehXYj-H0qo.roa
File:                     nsX0p8_Gc_EA7nADlehXYj-H0qo.roa (raw, json)
Hash identifier:          9vogJtRbDE+SusJxJMqbdFzodRaYVLnOxh2uL52zgt4=
Subject key identifier:   9E:C5:F4:A7:CF:C6:73:F1:00:EE:70:03:95:E8:57:62:3F:87:D2:AA
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0A53
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/nsX0p8_Gc_EA7nADlehXYj-H0qo.roa
Signing time:             Sun 30 Jun 2024 01:48:31 +0000
ROA not before:           Sun 30 Jun 2024 01:48:31 +0000
ROA not after:            Tue 24 Jun 2025 10:46:45 +0000
asID:                     9605
IP address blocks:        49.102.152.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:41:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2643 (0xa53)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun 30 01:48:31 2024 GMT
            Not After : Jun 24 10:46:45 2025 GMT
        Subject: CN=9EC5F4A7CFC673F100EE700395E857623F87D2AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:0f:ec:c4:f9:74:c8:78:b3:f5:ed:4a:62:57:
                    60:f3:7e:c9:0b:34:27:00:45:ac:b6:fd:5c:e7:36:
                    b7:fe:59:bd:52:3c:ab:a3:03:77:1f:cc:e4:33:71:
                    0a:ac:bf:be:eb:54:2d:6b:ab:0b:8e:df:f9:86:94:
                    d7:f9:8e:df:b7:c0:54:72:2d:28:77:3b:32:a0:cc:
                    47:d8:54:78:4f:90:60:48:6a:1b:c0:8f:eb:80:80:
                    0f:08:82:b8:77:b3:f2:c5:f3:f4:64:34:f6:3b:bc:
                    0a:81:7c:7e:06:71:b7:44:f8:ab:58:82:78:f2:43:
                    36:3b:a2:d9:e7:29:87:c0:15:39:71:2d:e4:57:3f:
                    99:bb:34:96:a8:12:ea:ae:0c:af:14:3f:3a:5c:1c:
                    d4:ae:55:6f:c9:ca:6e:67:00:68:c4:7e:ad:30:57:
                    45:10:cd:60:98:e9:aa:22:66:1e:21:d8:f1:a9:91:
                    05:12:dc:77:52:eb:cf:7b:65:47:5a:9b:8a:eb:10:
                    fc:a9:69:f1:b0:50:7b:a2:58:3b:b0:27:3a:62:3d:
                    a3:3c:45:87:75:1d:45:d2:ec:54:a6:a0:12:40:4c:
                    29:8a:22:a6:8c:64:76:96:45:bd:de:70:9f:5c:c6:
                    05:86:bb:f2:37:35:ad:dc:d1:6c:56:d7:b1:f4:95:
                    c1:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:C5:F4:A7:CF:C6:73:F1:00:EE:70:03:95:E8:57:62:3F:87:D2:AA
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/nsX0p8_Gc_EA7nADlehXYj-H0qo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.102.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:df:9b:f7:e0:67:47:93:a4:d2:aa:f9:2e:64:2a:b8:ea:ae:
         e3:d2:c0:a7:b4:22:83:1e:d6:44:35:d8:c1:46:a3:ab:d0:ed:
         76:20:b6:44:85:65:a1:72:81:ed:f6:61:56:72:00:d3:a5:ce:
         14:e9:de:c9:fb:cc:c8:0f:0a:4c:5c:0a:90:bb:10:43:72:22:
         fb:4f:ff:bc:de:9d:cc:ba:87:db:69:07:a8:ee:01:ad:ec:34:
         2d:66:a0:ce:01:be:9b:0f:ca:bf:c3:a9:20:4b:a0:da:dd:92:
         eb:13:fc:32:c1:1d:bf:cf:d6:ef:23:8e:a0:c3:d7:fa:90:71:
         81:bc:4c:7a:65:f5:a9:24:0b:b5:76:f6:e0:b7:66:e6:83:8d:
         cf:f5:87:26:8d:32:3d:5f:3c:44:03:a7:20:65:02:96:02:d0:
         60:a0:90:0d:0c:da:f4:5f:a7:3c:b6:c2:78:02:3b:22:0b:95:
         11:94:b6:18:85:c3:f6:ce:a5:23:6c:0f:ff:9f:8e:14:be:fc:
         bb:21:06:28:ad:64:21:58:e5:40:04:12:5a:a2:98:0c:a9:b7:
         b3:94:ee:ae:91:73:eb:3d:cc:79:bd:ee:3f:f0:69:83:5e:20:
         f6:f8:94:3f:4f:26:1c:c0:d5:19:ae:3a:65:2e:ad:8a:1e:4e:
         99:83:10:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:24:02 2024 by rpki-client on console-fra.rpki-client.org