Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/o_uilMCLh4zkhVJzMOyETXXGtlM.roa
File:                     o_uilMCLh4zkhVJzMOyETXXGtlM.roa (raw, json)
Hash identifier:          VGXZ6I+nvQZBR1baFTQcwqJ8io0PO6phLrkJP+pzqQk=
Subject key identifier:   A3:FB:A2:94:C0:8B:87:8C:E4:85:52:73:30:EC:84:4D:75:C6:B6:53
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0920
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/o_uilMCLh4zkhVJzMOyETXXGtlM.roa
Signing time:             Tue 30 Apr 2024 02:30:26 +0000
ROA not before:           Tue 30 Apr 2024 02:30:26 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        49.97.76.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2336 (0x920)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr 30 02:30:26 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=A3FBA294C08B878CE485527330EC844D75C6B653
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:cd:4b:ac:61:6a:0d:c3:81:49:96:1b:b9:ea:
                    79:da:ff:26:82:6d:e3:1d:a2:13:2b:54:61:a4:f7:
                    b7:cb:15:e9:8d:45:8e:a3:f8:cf:7a:d0:00:d3:55:
                    5d:c0:19:2e:35:51:3b:39:88:cc:3c:61:6a:9f:f4:
                    6e:18:e7:a2:a2:98:86:e8:b4:a0:85:fe:82:61:ba:
                    88:9a:b1:cf:ad:15:aa:60:5d:4d:5f:76:24:74:b7:
                    97:6c:b8:ab:cc:84:f8:99:56:17:87:89:28:b9:39:
                    06:c0:71:13:2f:26:4f:8e:8b:9d:57:81:19:ab:6a:
                    c6:b8:43:06:0f:34:28:5e:bc:92:64:a8:b2:b8:5b:
                    2c:94:65:44:b6:51:d7:a6:6d:a8:2f:90:12:4e:cf:
                    52:3c:29:b6:bb:55:e2:cd:5a:db:f4:67:d0:55:09:
                    38:99:2c:06:6b:92:6e:80:5e:62:c3:a5:47:df:50:
                    5e:ea:64:aa:05:79:35:31:c0:d4:a1:e4:7a:4d:e7:
                    98:45:57:43:36:6b:6e:12:d9:5f:55:34:d9:ea:8e:
                    53:60:77:fd:61:b0:ef:27:33:43:7c:76:d2:db:17:
                    f5:23:98:42:73:16:2a:1d:64:48:9f:c0:16:bd:86:
                    9e:ea:22:7f:24:99:35:81:b4:40:6f:38:46:e7:58:
                    19:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:FB:A2:94:C0:8B:87:8C:E4:85:52:73:30:EC:84:4D:75:C6:B6:53
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/o_uilMCLh4zkhVJzMOyETXXGtlM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.97.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8d:65:3b:df:98:88:e5:93:d1:f1:a1:87:94:11:62:38:72:1c:
         27:c1:52:32:f9:ce:f6:93:65:3d:c0:6b:78:80:32:52:f2:d9:
         08:37:62:39:07:49:f2:0a:38:55:3e:60:47:cb:2c:6f:44:61:
         25:ac:cd:1f:fb:a2:1c:03:97:7d:c1:6a:cd:92:6f:97:37:95:
         e2:d8:bf:6f:b2:a1:15:61:ab:4b:20:f3:29:11:2c:07:54:68:
         80:85:51:9a:57:8d:7f:57:a7:7a:97:5d:c7:46:21:c3:ba:97:
         c1:d5:de:9a:2b:fb:80:b8:e0:81:08:1d:19:4f:a4:24:b0:0c:
         64:30:f5:94:8b:5c:a2:ea:28:f5:22:3b:cd:5e:d3:c6:bb:d9:
         92:31:c6:43:c8:07:56:e4:b9:5a:98:3f:b7:f0:4a:a8:b1:5b:
         6c:c2:13:40:c0:7c:b7:39:38:bb:e2:db:37:4b:dc:73:79:9b:
         9c:26:c8:4c:e1:91:b8:76:a9:6c:48:12:be:bc:c2:41:08:6e:
         84:d8:03:3a:7f:98:0a:c5:54:59:7d:ff:a1:c9:fd:96:84:2e:
         80:7f:01:98:f8:4f:b8:ff:c8:d8:c0:de:c9:4e:b0:a2:09:f2:
         83:28:21:21:c7:1e:25:19:ca:1b:c7:37:14:18:0f:7d:26:55:
         2a:06:61:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:38:48 2024 by rpki-client on console-fra.rpki-client.org