Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/oA6GAWq-Ckod0QCVRhMWalJRN2E.roa
File:                     oA6GAWq-Ckod0QCVRhMWalJRN2E.roa (raw, json)
Hash identifier:          Or7dENLyz7GEQLuQrgPqB4pcnxBsbfvcc67I+kVcz2A=
Subject key identifier:   A0:0E:86:01:6A:BE:0A:4A:1D:D1:00:95:46:13:16:6A:52:51:37:61
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       08A1
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/oA6GAWq-Ckod0QCVRhMWalJRN2E.roa
Signing time:             Tue 30 Apr 2024 02:22:31 +0000
ROA not before:           Tue 30 Apr 2024 02:22:31 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        49.105.192.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:41:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2209 (0x8a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr 30 02:22:31 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=A00E86016ABE0A4A1DD100954613166A52513761
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:bb:25:0d:d0:0f:7e:b0:8e:eb:51:bf:83:06:
                    10:e5:4f:17:21:de:78:50:56:1a:c8:63:7f:98:64:
                    27:50:82:51:2b:e4:98:73:4b:3d:83:af:b5:84:a7:
                    2d:90:c2:87:01:84:bb:c0:90:b8:19:65:c8:0d:99:
                    0d:3b:92:f8:27:04:0e:31:40:79:b4:62:53:11:bd:
                    43:ae:4f:b4:45:1e:24:4f:3c:11:cd:17:ce:c9:ff:
                    2e:52:db:74:b5:09:5d:2c:21:ed:3c:5e:21:08:5f:
                    02:68:e4:37:1c:96:c5:a5:93:4c:57:a5:88:5c:1e:
                    ec:0f:d5:a5:4d:7a:95:90:27:11:e0:42:59:d5:8b:
                    4d:c6:1b:0a:9c:6f:75:25:90:b9:06:41:13:cf:2a:
                    bf:ed:ed:f8:8a:14:c0:49:97:70:c7:f2:19:5e:a5:
                    80:43:75:01:dd:b1:a1:9e:cc:40:de:3c:27:80:62:
                    b9:00:bb:cb:ae:fc:f0:ce:88:ee:cb:ef:3c:12:00:
                    4e:2e:d3:84:08:5e:4a:2c:54:a7:42:e0:0f:bc:27:
                    9b:12:90:a7:88:f7:99:32:e2:ec:e5:45:d8:84:01:
                    b2:0b:b3:e0:71:2f:8f:6e:f5:22:a5:98:38:08:bf:
                    fd:64:af:ff:1c:67:6a:ab:1e:40:49:ed:e9:bd:81:
                    77:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:0E:86:01:6A:BE:0A:4A:1D:D1:00:95:46:13:16:6A:52:51:37:61
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/oA6GAWq-Ckod0QCVRhMWalJRN2E.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.105.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         10:27:7a:89:20:39:c3:f8:0c:e6:cb:18:08:a4:2e:18:ed:44:
         37:16:43:52:f8:9b:10:be:5f:ae:92:be:a3:33:56:b0:d6:35:
         b0:a2:fe:c2:01:04:68:a3:25:0a:a6:2d:f5:bc:64:1a:f1:5d:
         cc:69:6b:8f:69:bd:cb:1d:1d:73:0b:0d:67:0a:b1:2c:e4:d9:
         a7:a7:b4:0f:72:bc:a4:41:a6:f5:cd:15:0a:d9:a4:ce:46:4c:
         01:ba:1b:75:25:31:dd:bf:e4:77:02:06:ed:c5:27:72:7b:f2:
         3f:c9:92:52:b4:4b:e3:3e:59:3e:98:97:2e:71:2f:f0:88:b3:
         33:5b:1a:79:7d:b7:fc:51:82:d8:d3:d2:36:24:32:a7:17:a4:
         68:82:01:e7:56:9f:3b:86:c7:02:0d:6a:81:69:39:ca:2a:24:
         3d:0c:9b:c3:a4:8d:4f:67:2d:e0:ea:d1:d3:4e:d7:29:08:53:
         90:32:b0:79:03:cd:2f:c4:0d:f6:c6:64:82:17:5b:13:d8:de:
         8c:24:c6:a4:76:97:94:e7:a7:fd:60:b9:d6:71:b9:63:25:a5:
         8e:7a:7e:a7:26:2a:66:d1:c2:2a:4c:35:01:c9:c9:90:42:e2:
         8d:fb:fe:31:b1:2d:ee:74:bb:20:b3:8e:ac:98:18:5a:eb:79:
         e8:84:a2:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:24:02 2024 by rpki-client on console-fra.rpki-client.org