Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/tPksw-VeykuYNOWoqOfoncxi8jQ.roa
File:                     tPksw-VeykuYNOWoqOfoncxi8jQ.roa (raw, json)
Hash identifier:          NwNcUlUBVLyUjGgtHgHZ9sT/8QsElkfYU+RHDOb9aFY=
Subject key identifier:   B4:F9:2C:C3:E5:5E:CA:4B:98:34:E5:A8:A8:E7:E8:9D:CC:62:F2:34
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       061C
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/tPksw-VeykuYNOWoqOfoncxi8jQ.roa
Signing time:             Thu 29 Feb 2024 01:38:34 +0000
ROA not before:           Thu 29 Feb 2024 01:38:34 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     9605
IP address blocks:        49.97.92.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 23 Jun 2024 11:53:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1564 (0x61c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Feb 29 01:38:34 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=B4F92CC3E55ECA4B9834E5A8A8E7E89DCC62F234
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:5b:e9:fd:7b:70:02:99:7a:4b:8a:29:b4:75:
                    63:71:49:bc:23:1e:1e:50:27:08:cc:d0:a1:d9:a6:
                    85:df:f0:24:d7:9b:94:a8:ef:56:bd:bf:3b:a8:61:
                    47:49:fd:1c:3c:5c:b4:52:9e:b3:fc:0e:aa:5b:07:
                    65:49:d6:51:9a:cb:68:51:25:4c:21:d8:36:99:d3:
                    42:52:29:8d:9b:64:e7:63:f9:51:53:57:32:2e:c8:
                    b0:7d:bb:02:33:c5:70:af:77:c5:ff:1c:45:98:e2:
                    63:6c:8d:0b:61:8d:b1:ca:98:4d:dc:ff:b2:db:7e:
                    9f:dc:3b:37:91:02:07:b8:fc:db:db:7f:c9:fe:be:
                    ce:f5:b5:c4:aa:b2:1e:ec:27:0a:b9:8f:d1:6b:c7:
                    e5:2d:b7:fb:98:74:07:27:a2:8c:06:72:d5:d0:79:
                    2a:5c:e8:31:c9:17:d3:9f:b4:49:19:08:ae:a6:b1:
                    e0:32:6b:81:07:55:44:c0:24:e0:52:32:4b:86:13:
                    d2:2e:25:a0:0b:8c:56:33:b4:0a:b9:06:72:41:45:
                    a2:5c:ad:73:eb:83:02:78:fd:84:1f:cf:68:37:90:
                    c2:46:1a:e7:80:f9:a3:c5:b7:b2:13:c9:52:7a:2c:
                    09:6c:34:d6:07:0b:8b:c8:75:53:db:7a:97:a7:df:
                    80:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:F9:2C:C3:E5:5E:CA:4B:98:34:E5:A8:A8:E7:E8:9D:CC:62:F2:34
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/tPksw-VeykuYNOWoqOfoncxi8jQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.97.92.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8f:31:d4:98:94:c3:67:26:69:23:d9:a0:10:44:2f:f3:ee:84:
         bc:27:41:aa:20:7c:bb:2a:81:9c:1e:8b:38:73:9d:5e:ed:d8:
         d6:86:2c:b4:4a:3e:fb:88:75:3a:8c:42:d8:33:47:28:d5:c3:
         1f:d7:3f:6d:5f:36:51:79:70:fb:d6:79:f0:94:2e:7e:b9:2f:
         b9:dd:b5:eb:43:8d:ca:0f:21:12:94:c2:ae:42:e2:4a:82:45:
         de:ea:d1:e4:00:08:36:fc:c6:65:24:91:d1:2b:3f:bc:32:8f:
         34:83:f3:15:39:90:51:d3:a1:64:95:25:41:77:1d:9c:c5:d0:
         c2:f6:a3:85:f3:77:7e:55:05:49:57:29:7a:56:3a:57:68:2e:
         45:6e:5e:9d:55:1f:6e:86:10:9c:d9:e3:e7:9c:ea:b0:6e:34:
         50:21:36:b5:74:2b:9b:29:a9:42:27:9a:58:10:41:f6:00:ca:
         a6:60:b1:43:69:50:98:7d:ad:4b:38:63:d2:d0:f5:51:12:6a:
         f9:a7:88:53:a1:d2:80:f1:f7:be:af:71:eb:0a:6a:0f:43:98:
         2a:13:fe:fd:52:73:b3:41:11:51:4e:fc:24:52:10:2c:24:a8:
         2f:5e:25:f2:25:90:0f:52:a0:4c:62:2f:d3:a8:03:2a:be:be:
         37:a6:80:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 12:57:22 2024 by rpki-client on console-fra.rpki-client.org