Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/u4EtrHyQO6sIPnrn9WJ--Q2oTpA.roa
File:                     u4EtrHyQO6sIPnrn9WJ--Q2oTpA.roa (raw, json)
Hash identifier:          uaEgSvAR5yCoPgSLLv7bHUiZZLYpZQNpdmkzi6Kutx0=
Subject key identifier:   BB:81:2D:AC:7C:90:3B:AB:08:3E:7A:E7:F5:62:7E:F9:0D:A8:4E:90
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       075E
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/u4EtrHyQO6sIPnrn9WJ--Q2oTpA.roa
Signing time:             Tue 30 Apr 2024 02:01:38 +0000
ROA not before:           Tue 30 Apr 2024 02:01:38 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        49.98.118.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1886 (0x75e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr 30 02:01:38 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=BB812DAC7C903BAB083E7AE7F5627EF90DA84E90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:ed:47:4a:40:fa:00:b4:03:fd:67:f4:e6:28:
                    8c:ba:14:ae:bc:ed:2d:58:b7:42:ee:e2:03:5d:0a:
                    fb:80:f4:41:0c:af:98:9a:f2:b1:d5:f2:90:a4:7d:
                    1b:d9:af:7a:d6:e9:f8:e7:2b:7c:80:9d:13:ba:61:
                    6d:a6:53:bc:3b:8d:c4:dd:98:8c:e1:57:82:2d:01:
                    07:85:8f:15:f2:76:4d:fb:1e:7f:fc:0c:b1:b5:84:
                    bc:de:dc:0d:0e:06:37:16:ea:ee:96:c9:fc:0e:6e:
                    54:28:0e:54:cd:35:c2:68:8a:ed:7b:7b:a1:5f:26:
                    d3:d0:5b:e9:86:bf:d5:72:90:bd:d8:c9:8e:80:59:
                    08:3c:9c:3d:95:74:12:71:5d:ab:9a:5a:78:37:e8:
                    93:fe:cd:59:af:30:d1:90:58:5a:4c:57:2e:c9:74:
                    54:6e:db:15:40:15:03:26:cd:86:e3:98:7b:06:d2:
                    2f:56:0a:d3:30:56:f6:b8:bf:8d:1d:71:64:9b:cf:
                    da:5f:1c:32:f6:cd:39:56:dc:df:c9:b9:3a:1f:f3:
                    c4:72:28:3c:62:60:3f:1d:0b:71:a0:c4:ec:7e:30:
                    77:fa:21:4f:1b:4d:9e:59:ff:4b:76:ec:32:1e:91:
                    fc:53:20:a0:3c:ec:8f:58:72:9d:b4:c8:ac:76:48:
                    94:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:81:2D:AC:7C:90:3B:AB:08:3E:7A:E7:F5:62:7E:F9:0D:A8:4E:90
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/u4EtrHyQO6sIPnrn9WJ--Q2oTpA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.98.118.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a0:ca:cd:84:6e:74:8c:a9:2d:5c:d0:7a:1a:8c:ac:b8:ce:06:
         be:5c:21:f6:7a:07:94:69:c9:9f:60:82:10:43:c1:fc:7c:8d:
         aa:6c:91:fb:3c:a2:f4:5c:e9:b6:12:8b:73:04:6f:0e:79:32:
         f6:be:96:79:13:38:35:fe:96:b2:07:ef:c3:b7:2b:d3:c2:51:
         d6:a7:83:c6:63:31:91:6b:99:1f:17:c2:21:9b:47:43:3a:55:
         38:9d:e9:23:6b:63:8d:70:e7:e6:1a:1d:5c:db:77:f0:e4:eb:
         56:f9:22:ee:96:ad:b6:23:b7:d4:5b:1a:a8:c7:3b:ad:a8:de:
         e6:e2:e8:24:0c:c9:2b:15:b5:bd:c3:f4:7c:62:33:48:0e:75:
         a0:4d:73:91:67:f9:24:c8:eb:c6:4d:14:e5:34:0a:17:eb:8d:
         c9:f6:af:a1:3e:a6:f7:36:dd:4a:0e:12:53:1e:69:55:91:e3:
         ff:ba:a2:44:ca:db:a9:be:a9:1e:ce:54:a6:23:05:42:6c:06:
         c0:d8:e3:86:b0:1a:e7:c4:93:dd:14:9b:6d:cb:2b:dd:88:ec:
         11:02:4c:06:9e:f0:74:fd:5c:a2:c3:84:73:7a:56:64:4d:2a:
         e7:40:4e:3e:11:70:fd:28:9d:cd:b8:85:d8:01:fc:40:39:05:
         a8:af:a7:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:45:41 2024 by rpki-client on console-ams.rpki-client.org