Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/rDgc05lfe2OS_T9s2tEJT7BWioE.roa
File:                     rDgc05lfe2OS_T9s2tEJT7BWioE.roa (raw, json)
Hash identifier:          1Mx4SVRTBIxck8U3udQ7DL7k5cit+bU8pY1yDk8vZzA=
Subject key identifier:   AC:38:1C:D3:99:5F:7B:63:92:FD:3F:6C:DA:D1:09:4F:B0:56:8A:81
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       07E4
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/rDgc05lfe2OS_T9s2tEJT7BWioE.roa
Signing time:             Tue 30 Apr 2024 02:10:31 +0000
ROA not before:           Tue 30 Apr 2024 02:10:31 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        49.98.146.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:41:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2020 (0x7e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr 30 02:10:31 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=AC381CD3995F7B6392FD3F6CDAD1094FB0568A81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:f0:6c:e7:fd:32:bc:7c:a2:82:61:e5:d1:04:
                    4c:8d:f6:fc:cb:54:06:b9:82:d8:39:6d:d7:c2:a2:
                    89:d8:f0:86:13:5c:ed:7a:d6:c2:13:0c:aa:de:a6:
                    89:1f:fe:b7:be:78:74:ac:41:39:e9:4e:5c:8f:45:
                    d5:a3:75:6d:c7:da:09:0e:38:f7:23:a0:84:40:d4:
                    a0:0c:da:e7:28:5a:a5:20:80:5a:b8:1a:e9:32:62:
                    e1:4d:18:2b:61:b4:f3:5c:d7:89:54:fc:64:66:6b:
                    39:dc:1f:38:e8:cd:05:50:bd:3d:05:a2:fc:68:95:
                    48:72:ec:21:cf:f7:4e:6f:7f:59:3d:2d:01:4f:39:
                    a4:1a:ef:16:30:8f:a8:c9:f5:59:ff:c7:78:a0:4f:
                    9a:62:8d:72:13:aa:7c:d4:ab:61:6e:69:ee:d9:80:
                    25:18:cd:6d:f4:fa:40:59:66:95:e0:aa:7b:7c:d4:
                    5f:fc:f6:5e:cd:fe:7f:02:40:93:f4:5d:06:30:d6:
                    54:b1:c4:21:25:e7:ad:9e:35:62:9d:8a:f3:6a:7f:
                    65:46:74:44:c0:2e:ab:5e:18:1a:b6:11:ce:a5:42:
                    1a:88:92:35:d5:90:2b:00:6a:c7:49:6c:a2:02:ed:
                    45:68:70:44:72:df:4c:69:d4:94:62:ca:8c:4b:00:
                    85:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:38:1C:D3:99:5F:7B:63:92:FD:3F:6C:DA:D1:09:4F:B0:56:8A:81
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/rDgc05lfe2OS_T9s2tEJT7BWioE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.98.146.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0a:dc:58:cc:4c:ff:97:14:e5:f7:a6:57:7c:ee:5d:dc:01:34:
         06:7b:82:eb:b0:6a:04:5a:f7:3f:c9:fd:5e:cd:09:4f:50:e0:
         5c:ec:86:e7:9f:2e:37:25:d2:05:27:e5:48:6f:7b:69:62:f3:
         55:ea:27:0a:67:e6:cc:08:ad:9d:55:a9:2a:db:eb:1a:2c:c2:
         0c:f9:9d:81:8a:d9:6d:b3:1b:5e:ca:6e:dc:67:36:88:28:57:
         7c:f7:ac:fd:31:55:f8:b0:bf:58:2f:f8:4f:c4:23:97:f9:b3:
         4e:9f:ae:2a:18:3a:02:a8:88:3c:50:03:58:3b:f0:bb:4a:2a:
         31:b0:d2:70:f3:02:b1:b8:d6:ad:9e:58:94:8d:2b:f1:80:84:
         27:1a:6f:af:1f:ba:09:d0:fa:b5:fd:f2:34:99:cc:f2:ec:e5:
         f4:d7:30:73:62:57:1f:be:42:b4:8f:85:ed:cd:cd:aa:17:e1:
         9c:97:a0:18:ce:49:41:6e:d3:61:10:39:70:72:90:03:40:e4:
         c5:81:e2:ca:06:d0:ea:ad:9c:f1:1a:14:9a:61:cd:fd:7f:3a:
         f7:cc:15:08:31:a0:a3:51:39:70:c1:48:2c:00:7a:94:84:1d:
         37:d7:2b:f0:ff:74:47:08:47:8f:43:d5:76:48:5d:13:4d:d6:
         9c:61:4d:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:24:03 2024 by rpki-client on console-fra.rpki-client.org