Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/rtVMqZl5E6swxkG8QEddYJqpCaY.roa
File:                     rtVMqZl5E6swxkG8QEddYJqpCaY.roa (raw, json)
Hash identifier:          Pj8s/VWwsVFlibzMYvAZYJQYZDeLX5nKrhwcF6rUfZw=
Subject key identifier:   AE:D5:4C:A9:99:79:13:AB:30:C6:41:BC:40:47:5D:60:9A:A9:09:A6
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0632
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/rtVMqZl5E6swxkG8QEddYJqpCaY.roa
Signing time:             Thu 29 Feb 2024 01:41:06 +0000
ROA not before:           Thu 29 Feb 2024 01:41:06 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     9605
IP address blocks:        49.97.128.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1586 (0x632)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Feb 29 01:41:06 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=AED54CA9997913AB30C641BC40475D609AA909A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b9:50:16:9a:4a:65:e6:d6:2c:35:6e:15:67:
                    4e:21:0a:dc:83:0e:c6:e9:0a:0d:94:94:da:74:25:
                    bd:cc:8b:f4:40:b6:0e:f7:c4:da:c4:90:45:ac:07:
                    bd:ba:6c:f1:13:2c:d3:f4:8a:1f:69:3f:05:c3:9c:
                    9a:e5:a6:8d:6a:9e:58:d8:28:38:a5:e8:86:45:59:
                    4c:ea:60:91:eb:d9:01:3d:27:dd:8c:d8:d1:f9:18:
                    4c:8a:68:1d:95:36:fd:06:d5:ea:56:c7:99:d2:c7:
                    cf:07:b0:d1:cc:26:31:11:90:d1:1a:89:e4:96:7b:
                    27:50:1a:95:c8:52:12:2a:98:20:97:80:72:e3:66:
                    99:73:be:c2:65:64:8e:90:56:65:28:b7:0a:fb:b1:
                    9a:9e:f6:6c:58:e0:15:c6:09:f8:63:ec:4c:c8:25:
                    2a:d4:09:5f:39:5a:c9:f7:fe:2e:65:6b:d2:4f:98:
                    b4:3c:91:2b:50:ba:81:e9:e3:dd:b0:18:c0:3c:6b:
                    60:4e:9c:2a:71:67:55:40:36:d9:34:b8:de:1f:55:
                    65:06:72:64:0e:60:5e:0e:25:92:06:64:46:70:70:
                    cf:79:6d:94:8a:2d:02:f6:af:30:dd:74:3d:a2:6c:
                    54:c4:b8:2b:82:18:67:26:9e:ea:88:4f:1b:81:ee:
                    75:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:D5:4C:A9:99:79:13:AB:30:C6:41:BC:40:47:5D:60:9A:A9:09:A6
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/rtVMqZl5E6swxkG8QEddYJqpCaY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.97.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         7a:27:df:0a:ce:0a:cc:1b:98:b7:23:d1:4d:de:b9:07:8d:ba:
         49:5e:47:2a:95:da:50:cf:a8:9e:ba:ec:1b:a8:f9:10:cd:0e:
         be:16:9c:9f:6f:57:ff:a8:ab:29:fa:12:6f:bf:4d:b9:d0:4f:
         2d:4a:b8:a5:71:d2:78:db:cb:d4:74:f4:12:8a:fd:02:ab:ed:
         ef:3b:3a:03:be:1c:3d:bd:8e:d8:69:17:e2:f1:e4:a1:60:f0:
         1d:96:24:7b:64:62:ff:39:a1:64:11:59:fb:1a:9e:10:cf:3b:
         d5:dc:a1:c2:a5:55:7d:d0:d8:ae:14:b1:6a:20:95:89:89:f6:
         e8:3d:f4:bc:97:f2:0c:8a:d1:fb:ce:69:6e:9f:a4:68:77:cf:
         4b:f6:84:4e:39:c7:54:03:3e:b5:e9:20:37:d4:6c:92:e6:81:
         82:eb:60:b1:66:6f:42:08:dd:43:72:ec:3d:a4:42:53:4c:9c:
         47:58:94:5f:21:10:48:b8:22:f7:09:21:ab:15:73:3f:b5:10:
         8d:28:44:9d:c4:eb:29:93:e8:c1:b0:57:a0:66:bd:ff:5f:fa:
         27:bf:10:da:df:96:6c:26:1e:29:39:d4:fc:bd:e4:0f:5b:ad:
         2b:f2:01:38:13:20:b5:84:cb:a8:89:c3:d3:ee:0e:4a:04:53:
         77:c6:7c:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:38:48 2024 by rpki-client on console-fra.rpki-client.org