Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/pdhsdXXrbB8XkL6GHilymfHfm_4.roa
File:                     pdhsdXXrbB8XkL6GHilymfHfm_4.roa (raw, json)
Hash identifier:          YqL+3Anbd+rPynKOvxnY74B9zORRYKhFugrpK1+TqZU=
Subject key identifier:   A5:D8:6C:75:75:EB:6C:1F:17:90:BE:86:1E:29:72:99:F1:DF:9B:FE
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       08FA
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/pdhsdXXrbB8XkL6GHilymfHfm_4.roa
Signing time:             Tue 30 Apr 2024 02:26:37 +0000
ROA not before:           Tue 30 Apr 2024 02:26:37 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        49.106.0.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Dec 2024 00:11:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2298 (0x8fa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr 30 02:26:37 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=A5D86C7575EB6C1F1790BE861E297299F1DF9BFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d8:ed:f7:0f:a1:d7:33:5c:42:20:00:64:51:
                    ae:ed:e4:38:a5:cd:4d:c7:c9:0a:2f:d8:e7:19:d4:
                    cd:10:f6:1a:ad:1b:74:94:fc:78:01:6a:b2:f7:97:
                    07:cb:f2:68:68:ea:6c:25:73:bc:9a:99:4a:4e:3f:
                    fa:fe:81:f7:49:cd:87:9a:5a:9e:7a:2a:ec:b1:88:
                    75:41:e1:d2:a5:2b:f0:0f:91:d6:ee:54:6e:28:30:
                    db:25:24:8d:d6:a6:49:83:8e:79:56:70:f1:96:59:
                    f6:d3:5e:f4:fa:16:57:16:08:1c:1d:cb:34:00:65:
                    60:6e:b1:82:25:3a:c3:4e:ef:8b:3a:88:d8:fb:e5:
                    5d:06:4e:9f:90:b3:3f:e8:cb:9c:c2:ea:ac:44:f7:
                    c4:f4:7e:22:9e:fc:be:c3:78:ef:3a:24:9d:85:8c:
                    8a:ee:02:94:56:70:ed:a6:91:11:e0:ca:48:6d:2c:
                    67:97:3e:00:de:bf:c2:0d:33:95:c8:a9:a5:7b:80:
                    8c:eb:2a:52:ca:48:f6:b7:3f:9b:11:0e:e3:8f:66:
                    6d:97:70:4d:b5:59:a4:89:4d:4e:31:e1:8c:18:b6:
                    f8:3c:bc:0f:ff:2f:41:e8:ac:6f:0f:b1:c8:ae:7c:
                    4d:aa:47:c3:93:55:76:ff:7e:e0:95:c8:b0:9b:8e:
                    9f:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:D8:6C:75:75:EB:6C:1F:17:90:BE:86:1E:29:72:99:F1:DF:9B:FE
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/pdhsdXXrbB8XkL6GHilymfHfm_4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.106.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         de:80:d2:bd:11:fe:c1:5a:aa:b6:2e:5c:8f:e2:63:76:ae:e2:
         56:1e:01:ff:8d:c9:2a:4b:7d:51:39:28:7e:98:19:4d:fe:7f:
         70:cb:d6:b3:9a:67:b1:0b:75:30:08:82:30:f6:29:92:09:83:
         60:14:25:24:90:73:47:05:30:fb:2c:8a:6c:aa:8d:7d:51:1a:
         35:93:ff:a4:62:db:8e:1c:5e:f7:ba:96:e2:bf:66:c7:c8:ca:
         6e:7b:f9:17:b7:6d:4e:43:5f:ad:87:1d:db:b5:9e:f9:40:ec:
         54:96:a2:45:64:77:cd:81:1d:18:c6:bc:63:34:aa:b7:5c:c2:
         21:78:20:4c:3a:03:7c:f8:cf:e9:ca:05:70:ba:4a:92:ef:a7:
         51:08:6a:ed:b1:19:ac:26:ea:c6:26:2d:f5:d6:d2:e7:4c:ab:
         96:fe:16:cd:82:19:ad:06:e2:a1:d4:5c:db:09:7c:c7:c0:8f:
         fc:14:82:17:c9:14:55:07:a2:cb:dd:cd:8e:5d:c1:e5:7a:ee:
         55:8f:6c:0c:40:0f:21:b2:7d:de:fa:96:fc:ed:1f:69:4e:64:
         e3:57:37:6a:ad:bf:8a:35:a3:e1:ec:73:fa:57:48:ad:18:70:
         6a:ea:f7:cc:65:93:63:e0:72:d1:f6:92:5e:8a:e3:a3:0a:9a:
         29:c5:8c:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 02:17:12 2024 by rpki-client on console-fra.rpki-client.org