Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/rUmvwiNNqEv3cyGrD9pbxhg6DJ8.roa
File:                     rUmvwiNNqEv3cyGrD9pbxhg6DJ8.roa (raw, json)
Hash identifier:          QWbuvHF4q27H1EVWj/jPgqzHq5LSVu3QtnOU7Zcuxfw=
Subject key identifier:   AD:49:AF:C2:23:4D:A8:4B:F7:73:21:AB:0F:DA:5B:C6:18:3A:0C:9F
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0A5C
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/rUmvwiNNqEv3cyGrD9pbxhg6DJ8.roa
Signing time:             Sun 30 Jun 2024 01:50:20 +0000
ROA not before:           Sun 30 Jun 2024 01:50:20 +0000
ROA not after:            Tue 24 Jun 2025 10:46:45 +0000
asID:                     9605
IP address blocks:        211.14.112.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2652 (0xa5c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun 30 01:50:20 2024 GMT
            Not After : Jun 24 10:46:45 2025 GMT
        Subject: CN=AD49AFC2234DA84BF77321AB0FDA5BC6183A0C9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:7e:c6:4a:57:50:8d:ac:b4:fb:f2:77:ce:39:
                    2d:71:4a:b3:10:24:a6:3a:2c:73:eb:da:56:d1:89:
                    06:78:21:9d:40:f0:ea:66:d3:ae:88:f6:ab:be:6e:
                    1a:9a:0f:5e:d9:e9:c0:00:8a:00:62:30:31:76:60:
                    25:ed:c8:81:27:59:89:14:2f:d9:96:e5:35:5c:cb:
                    10:06:ae:15:bf:ab:e1:1c:40:eb:bc:c1:1c:39:99:
                    8c:e2:3f:58:21:cb:20:08:fc:5f:d3:78:87:96:59:
                    f3:17:a8:21:62:03:7f:18:9f:6b:52:35:e0:ba:fe:
                    a1:92:e3:fd:c1:a1:3c:6b:2d:7a:9d:8e:76:8e:0f:
                    ca:92:67:60:e1:f4:de:0b:ed:ba:9d:2f:23:8c:2f:
                    2e:77:d1:93:3c:86:3d:51:2e:b8:9e:5f:af:a5:da:
                    3c:8d:b5:c9:13:9c:84:5f:67:1f:fb:92:41:e8:67:
                    6d:91:5e:70:9f:95:df:af:05:e5:e9:c3:54:56:cf:
                    de:f0:73:bc:f4:10:ef:25:3c:82:90:97:92:b1:56:
                    ce:cb:c1:81:8b:14:63:79:4c:ff:cd:27:c4:02:d1:
                    0e:e7:7f:ff:fb:68:91:62:9f:d1:9c:fc:05:0e:bd:
                    4e:20:fe:e4:84:4f:87:4e:59:95:4c:eb:6a:13:0b:
                    a7:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:49:AF:C2:23:4D:A8:4B:F7:73:21:AB:0F:DA:5B:C6:18:3A:0C:9F
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/rUmvwiNNqEv3cyGrD9pbxhg6DJ8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.14.112.0/23

    Signature Algorithm: sha256WithRSAEncryption
         39:50:96:f8:f5:06:a7:14:a0:57:77:9b:4a:ed:e4:db:49:e2:
         22:06:8d:8a:ee:9c:a0:73:35:0e:68:78:04:68:48:ac:e6:88:
         ac:c9:1d:d9:84:c9:a8:31:5b:86:35:69:71:3c:fb:a4:fb:d1:
         31:94:00:05:58:64:de:bd:16:d4:37:a8:2f:98:f2:79:5e:67:
         e4:a2:35:bb:b3:24:53:67:05:34:06:ce:bd:53:d8:0f:aa:31:
         6a:e9:5e:4a:2f:a8:d4:45:d3:a8:87:4e:51:ac:d4:71:0a:01:
         82:e9:a6:a1:9b:7d:82:95:30:97:58:e5:4f:5a:3a:88:9c:fb:
         19:db:38:98:30:da:8e:f4:ac:44:0c:e9:93:8c:ba:7f:64:16:
         b0:89:bd:dc:47:d3:ad:86:79:81:42:2a:31:b9:f1:34:81:31:
         c3:5b:6b:02:71:9a:8b:29:97:02:88:1c:6d:7e:ce:44:6b:fe:
         23:bc:94:45:13:27:ad:3f:b2:d7:0b:90:cc:8a:e0:1c:bd:fe:
         b7:37:b2:c6:c6:b6:3d:1b:81:20:e3:3b:17:51:70:59:a5:71:
         5d:a6:1e:8c:71:0f:47:2d:d8:a1:ce:2f:e5:ac:28:f8:8a:ef:
         45:2f:7c:70:d4:20:30:34:dd:c0:89:ef:02:f0:19:f1:75:52:
         2b:ee:42:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:45:41 2024 by rpki-client on console-ams.rpki-client.org