Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/rMVMglBmtfn0VMhmn7bo4j2aI_4.roa
File:                     rMVMglBmtfn0VMhmn7bo4j2aI_4.roa (raw, json)
Hash identifier:          DgzXXjLGyyrTP8b26jcFwAqUzdpCSJG+w4H6iKYew4Y=
Subject key identifier:   AC:C5:4C:82:50:66:B5:F9:F4:54:C8:66:9F:B6:E8:E2:3D:9A:23:FE
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       025E
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/rMVMglBmtfn0VMhmn7bo4j2aI_4.roa
Signing time:             Tue 30 May 2023 16:34:12 +0000
ROA not before:           Tue 30 May 2023 16:34:12 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.110.0.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 May 2024 13:36:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 606 (0x25e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: May 30 16:34:12 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=ACC54C825066B5F9F454C8669FB6E8E23D9A23FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:2a:b8:c9:62:92:ad:74:ad:56:08:91:38:d8:
                    f7:db:50:a8:78:4f:92:e5:69:41:6f:38:01:43:b2:
                    0e:c4:8e:3e:a3:2c:af:76:96:f6:73:9b:a3:33:b0:
                    03:f1:6e:97:64:4c:b6:95:1f:5b:bb:c5:e4:44:34:
                    eb:ed:95:1e:66:b1:02:b5:b9:fd:8e:6c:b9:ce:8b:
                    6f:47:60:7f:e0:7a:8d:87:f3:09:04:61:60:d3:1f:
                    6f:d9:3a:4a:20:b2:44:81:c8:1e:1f:4a:49:7b:b3:
                    46:ab:dd:a8:91:0c:d1:8c:00:06:ea:fa:1d:1a:f6:
                    9e:12:f4:41:4e:5a:35:6b:d6:fd:da:c3:d5:15:20:
                    8b:3c:71:e4:2d:a5:36:ae:f0:08:9f:6a:fb:1f:4e:
                    6b:b5:cf:6d:dc:e2:58:68:f2:52:fa:24:87:71:33:
                    45:75:f0:9d:a0:b8:fc:9a:08:19:f6:5b:68:cf:bc:
                    f8:fe:a4:fd:84:73:c5:c1:8c:71:03:3a:37:bf:f3:
                    fd:5a:1a:4d:3b:08:ee:32:1c:c1:d5:b4:f3:b3:a4:
                    3b:b7:d4:8f:77:5c:e7:0e:06:ae:1e:94:90:56:79:
                    c4:db:c4:9e:c5:08:78:16:68:68:0d:9e:b8:f4:ac:
                    cb:21:46:33:81:6e:8e:6b:ba:68:bb:c5:bd:a0:e9:
                    40:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:C5:4C:82:50:66:B5:F9:F4:54:C8:66:9F:B6:E8:E2:3D:9A:23:FE
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/rMVMglBmtfn0VMhmn7bo4j2aI_4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.110.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         ca:cd:3b:0d:04:3a:de:f2:09:70:ab:08:48:73:8b:3f:b4:92:
         f3:a2:b4:a7:e1:97:c0:05:23:10:d9:51:41:3a:db:f2:68:30:
         3c:a1:67:8c:8d:08:5b:43:db:05:8c:92:63:96:89:e9:8b:e4:
         3b:06:e2:c1:89:97:5f:a5:17:48:29:72:a0:c7:52:70:67:cb:
         7d:34:c3:79:5d:13:0a:69:e7:d4:b4:7c:31:0b:23:69:25:2e:
         85:84:15:1c:ec:2b:30:46:c2:32:99:71:7f:32:88:0b:ec:f4:
         c1:4f:90:f4:3a:dc:2e:4b:5b:ad:e9:80:ae:7f:6d:9f:9a:c2:
         19:7e:b9:92:d2:4e:ed:d7:98:33:4b:a0:f3:42:56:7b:0c:31:
         7f:65:cb:62:b0:4b:2b:b1:1a:52:4e:bc:c2:4c:d1:1a:fe:82:
         35:c0:56:94:24:6b:25:d4:84:22:52:db:c2:45:74:21:17:8b:
         b3:d4:53:68:a6:4c:41:09:78:d1:a6:e3:60:02:4a:8e:b0:b1:
         1c:40:fe:a6:5e:3d:5b:f3:d3:e9:9e:3b:d8:fb:48:a2:c3:d8:
         c1:93:ec:42:b8:f7:2f:9e:b7:a8:dc:73:80:0e:21:a9:ed:89:
         d5:be:3f:3f:7e:19:ed:57:d3:a5:84:d3:09:91:cb:09:93:68:
         bc:9d:5d:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:15:57 2024 by rpki-client on console-ams.rpki-client.org