Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/p7wcVit-P04AqZO0zKnIekslKtE.roa
File:                     p7wcVit-P04AqZO0zKnIekslKtE.roa (raw, json)
Hash identifier:          /HSws19NbTN4moynH8+hbVTWJ97uOjzKKGjPxQhEQxk=
Subject key identifier:   A7:BC:1C:56:2B:7E:3F:4E:00:A9:93:B4:CC:A9:C8:7A:4B:25:2A:D1
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       02DC
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/p7wcVit-P04AqZO0zKnIekslKtE.roa
Signing time:             Thu 01 Jun 2023 16:04:24 +0000
ROA not before:           Thu 01 Jun 2023 16:04:24 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.100.0.0/17 maxlen: 17

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 May 2024 13:36:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 732 (0x2dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun  1 16:04:24 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=A7BC1C562B7E3F4E00A993B4CCA9C87A4B252AD1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:98:63:0b:95:ac:6b:de:39:66:28:b6:a5:80:
                    bb:8b:78:cc:bb:bb:51:c9:3a:7a:4e:85:3a:6c:3b:
                    75:ef:14:2d:f3:2c:cc:69:54:ff:49:32:a4:53:b3:
                    74:43:eb:c5:a1:0d:2e:57:a1:f8:45:a7:07:a8:2e:
                    49:df:9d:f8:cd:2a:fc:9e:10:a8:75:0c:bd:81:6d:
                    e6:27:73:1a:9f:6c:97:ee:0f:d9:0e:e3:3a:bb:46:
                    a7:ab:32:82:ca:c7:91:67:d4:da:4b:6b:63:1c:da:
                    4c:de:c8:d6:26:b5:f6:e5:23:db:21:05:63:96:eb:
                    5d:16:7c:eb:1f:ed:dd:fe:6b:78:36:5f:62:69:8e:
                    38:ba:10:d7:d3:88:98:66:12:69:71:2d:7c:9d:da:
                    a8:64:f7:7c:4d:5a:21:a9:e7:f6:b2:54:66:42:a5:
                    f0:96:23:8b:ce:86:5a:28:73:eb:35:a8:99:89:fa:
                    72:1a:81:88:b8:5a:26:bf:1f:b3:e5:05:f0:6e:94:
                    ba:42:ae:32:52:7a:13:b2:d6:e0:d3:ab:cd:46:0e:
                    a2:f3:bb:11:b1:77:4f:8c:03:39:3e:d9:bb:1d:62:
                    fe:d1:92:c3:60:f5:f8:2d:5a:20:01:3b:85:3e:22:
                    8f:25:a6:0e:3e:34:ef:f9:a1:f1:4f:d0:25:72:12:
                    e5:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:BC:1C:56:2B:7E:3F:4E:00:A9:93:B4:CC:A9:C8:7A:4B:25:2A:D1
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/p7wcVit-P04AqZO0zKnIekslKtE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.100.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         22:c3:c2:6a:7f:5f:d3:7b:88:ca:d1:72:95:17:ba:79:3b:12:
         58:88:2d:d2:34:43:1e:d6:af:35:15:0e:57:23:d1:23:aa:04:
         a5:6e:a1:ae:26:65:44:7b:d1:43:b3:b2:91:fb:66:9b:1a:c0:
         a2:3c:e1:11:c4:44:20:22:1b:10:d5:63:c1:b3:e4:39:9e:bc:
         64:c7:9b:f6:33:74:05:b7:e6:2d:ab:92:c8:a7:af:31:2f:50:
         e6:ad:b7:fe:12:0d:97:88:a2:a2:26:2e:38:f1:8e:bd:1b:67:
         0f:94:59:b1:4a:5e:2e:ab:25:06:02:96:77:fe:65:4c:cb:61:
         5b:79:5d:7e:36:88:b0:4f:82:56:0e:54:f5:71:1b:64:e1:14:
         2a:84:66:11:61:5d:96:d2:81:0c:41:21:39:25:5a:36:f1:87:
         98:5f:9a:1d:16:ed:00:55:81:59:0a:f1:6c:cb:53:b5:47:a6:
         a0:78:4a:d1:63:47:0e:21:e4:58:e7:87:57:c8:59:82:ad:85:
         11:29:c8:d2:22:5e:21:dd:ab:43:8f:7f:87:dc:b5:5a:91:35:
         06:25:d6:ca:52:96:5f:53:9e:83:bb:d3:04:f8:da:be:8d:30:
         a4:27:3e:09:6f:a9:c8:63:ee:e6:38:4e:dc:ee:11:97:b9:f8:
         83:5f:9e:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:15:57 2024 by rpki-client on console-ams.rpki-client.org