Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/uf0himmQ69IyT6DvwOiIsY4PZPo.roa
File:                     uf0himmQ69IyT6DvwOiIsY4PZPo.roa (raw, json)
Hash identifier:          ubl0C7jj83vi31zgkqiIyqTXnjoQYkBeyn+i7zTJ+n0=
Subject key identifier:   B9:FD:21:8A:69:90:EB:D2:32:4F:A0:EF:C0:E8:88:B1:8E:0F:64:FA
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0958
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/uf0himmQ69IyT6DvwOiIsY4PZPo.roa
Signing time:             Sun 30 Jun 2024 01:29:40 +0000
ROA not before:           Sun 30 Jun 2024 01:29:40 +0000
ROA not after:            Tue 24 Jun 2025 10:46:45 +0000
asID:                     9605
IP address blocks:        49.106.94.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2392 (0x958)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun 30 01:29:40 2024 GMT
            Not After : Jun 24 10:46:45 2025 GMT
        Subject: CN=B9FD218A6990EBD2324FA0EFC0E888B18E0F64FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:23:b9:fe:1c:e9:95:36:2e:7c:73:f4:ce:00:
                    8f:dd:6d:6c:02:48:c8:d4:3e:13:aa:6b:d1:b4:f4:
                    99:ba:9a:a5:46:4c:d5:69:79:de:32:9c:5c:1e:dd:
                    80:a4:5d:27:ab:85:4d:33:5b:16:5a:88:96:ea:33:
                    7f:9b:15:22:54:c4:7a:30:2e:23:e0:53:12:95:4d:
                    62:e5:e9:20:57:c2:77:88:37:70:3d:69:87:99:3c:
                    3c:77:1c:a6:a4:be:fb:65:a8:74:34:63:ca:30:01:
                    fa:c0:ae:2a:2a:d3:22:6b:44:28:7b:b1:bb:bd:f6:
                    5b:0c:9c:ab:bd:98:cd:e5:dd:13:97:bf:28:1a:3d:
                    47:a7:04:a0:0c:58:9f:27:dc:42:29:9f:8e:7a:89:
                    a6:10:aa:5f:1b:8e:d2:a1:fd:05:0c:07:ee:ca:03:
                    27:6b:08:ab:1e:26:0f:55:e5:25:01:7f:ce:aa:a5:
                    35:44:6f:84:8f:4a:f2:b3:5a:4e:23:9e:16:c3:ab:
                    46:74:38:fe:a8:5f:2c:cc:73:03:33:42:71:78:16:
                    e6:44:b5:47:48:ed:92:c7:d6:42:83:32:52:51:1a:
                    4f:c2:44:84:f0:1c:a9:04:5e:6c:50:dc:d2:e2:0f:
                    61:8d:4a:fd:64:27:f1:93:77:71:d0:95:d9:25:6d:
                    b4:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:FD:21:8A:69:90:EB:D2:32:4F:A0:EF:C0:E8:88:B1:8E:0F:64:FA
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/uf0himmQ69IyT6DvwOiIsY4PZPo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.106.94.0/23

    Signature Algorithm: sha256WithRSAEncryption
         36:d0:a0:1b:6c:02:b8:f8:e8:dc:ee:c0:07:e1:f1:03:c8:18:
         45:21:59:1a:70:04:7d:55:0c:be:20:33:39:4c:6e:3b:e3:4c:
         db:26:23:9b:07:20:f5:bf:ae:3e:38:ca:6e:48:f2:57:a0:09:
         53:bf:5c:e9:6c:0f:f4:a6:7e:1c:69:cb:24:3b:67:3a:12:eb:
         43:65:28:af:ef:0d:19:09:45:1c:d5:c8:57:37:d2:5d:11:b5:
         69:91:a2:72:d2:e1:a6:1a:b0:fb:a2:99:49:57:0a:97:cc:e3:
         64:19:0f:b7:dd:2d:5a:9d:5f:f9:eb:cc:57:df:62:08:a7:e5:
         13:7b:8a:32:6e:24:ff:01:f4:a8:7c:d7:a9:16:86:f0:cc:32:
         34:23:2c:f1:b4:64:6e:be:6b:72:06:92:2b:5a:a6:74:fa:df:
         f3:f6:1b:44:43:43:d5:87:f1:5f:c7:c5:3e:a6:1e:17:e0:92:
         ee:d5:6b:8c:16:94:cc:42:3c:c9:17:1a:d7:89:42:d9:f4:2a:
         c2:a6:6b:0c:00:cc:eb:be:06:c8:a7:3f:2e:60:01:ff:9d:d7:
         ff:6a:93:72:2e:10:a5:46:d9:71:c7:e3:ea:9a:cc:14:f4:69:
         c2:32:8d:fe:79:84:fb:22:8c:5e:0e:5c:ca:e5:d1:dc:0b:ab:
         7f:e3:b7:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:03:51 2025 by rpki-client