Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/vFaGZcMIpna2VPNbjGcjnJv25sM.roa
File:                     vFaGZcMIpna2VPNbjGcjnJv25sM.roa (raw, json)
Hash identifier:          tzQC8gRkDyUgQfllqZzSxCiYEJLaeLQoi5UzWnsjr2w=
Subject key identifier:   BC:56:86:65:C3:08:A6:76:B6:54:F3:5B:8C:67:23:9C:9B:F6:E6:C3
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0319
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/vFaGZcMIpna2VPNbjGcjnJv25sM.roa
Signing time:             Thu 01 Jun 2023 16:05:33 +0000
ROA not before:           Thu 01 Jun 2023 16:05:33 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.98.50.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 May 2024 13:36:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 793 (0x319)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun  1 16:05:33 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=BC568665C308A676B654F35B8C67239C9BF6E6C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:02:df:f4:a7:06:44:b6:1f:31:18:fc:92:da:
                    59:49:5d:19:ea:f6:ea:f1:20:38:8c:32:23:ae:9e:
                    d2:f5:23:94:92:60:86:07:a2:4a:92:4d:d3:1b:9c:
                    6e:fe:53:32:b1:04:5b:78:e6:4e:39:e8:d4:e1:24:
                    b5:46:6a:91:a7:1f:24:05:74:1a:ed:10:6f:11:37:
                    d4:fe:1a:25:e2:ec:e7:b0:01:de:30:ca:0f:f9:6a:
                    54:13:09:b2:63:42:bf:34:5b:04:40:7b:bb:6e:c4:
                    08:27:1f:d3:72:66:ae:2a:cc:5c:a6:8b:2e:51:f2:
                    cb:cc:22:15:ed:60:3d:c8:3f:05:20:74:a0:ee:6e:
                    56:a8:ed:75:02:1f:92:f6:54:37:6c:bb:82:cc:6b:
                    2d:27:8f:d9:e3:50:96:11:87:27:9c:a7:cd:ef:0a:
                    52:bb:13:35:93:7d:36:0b:1e:a4:17:3b:6c:f7:e3:
                    ad:ad:7e:9e:f9:1c:9e:ce:22:97:c1:b2:6a:fd:3f:
                    02:75:db:45:aa:dc:d3:1d:8c:61:c3:1f:3e:c1:52:
                    c4:81:a3:70:61:5d:f2:38:be:7a:7e:10:0a:59:2e:
                    a6:8b:b0:58:7f:ae:7f:f3:4b:a2:79:4c:a3:de:ea:
                    29:16:2e:57:c1:f4:8c:bd:db:19:37:09:61:30:67:
                    a4:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:56:86:65:C3:08:A6:76:B6:54:F3:5B:8C:67:23:9C:9B:F6:E6:C3
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/vFaGZcMIpna2VPNbjGcjnJv25sM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.98.50.0/23

    Signature Algorithm: sha256WithRSAEncryption
         03:98:42:22:ac:90:7b:66:e1:22:92:84:89:fe:2d:00:58:fb:
         7f:04:7f:87:5d:8f:62:10:a8:63:12:0a:e0:c9:6b:1b:3d:d8:
         ba:54:90:fe:1a:03:3d:1c:94:e1:6c:24:8f:44:4a:27:19:eb:
         68:bc:63:e6:67:d5:3c:aa:3a:18:7b:3a:67:42:48:07:18:d8:
         09:3d:cc:18:94:4d:d3:71:90:7d:41:78:8a:b6:cc:12:11:33:
         bb:38:78:1c:e6:7d:43:5d:ac:89:65:1d:78:3c:95:05:51:dc:
         a3:46:76:fa:d1:fa:70:4f:34:03:59:b4:06:8a:9e:7a:1e:f7:
         de:dd:de:43:e8:0c:20:e4:5c:f7:84:bf:0a:44:0e:c9:03:bd:
         8b:83:f8:0c:20:3b:8c:10:c5:ec:1a:8b:f8:99:69:9c:bd:d5:
         33:ba:b3:bc:79:5c:a0:a3:fa:7e:1a:f7:0d:7b:0f:b9:ae:4b:
         7b:4d:48:65:8d:5c:20:40:d7:22:a1:11:67:47:74:16:97:06:
         11:88:73:16:a1:c4:5b:ae:ee:b5:5b:26:89:c5:88:11:45:87:
         8f:db:41:6f:5f:59:f0:6e:4e:90:1b:27:0a:52:06:a9:76:8d:
         c0:17:0e:16:cf:28:8e:5c:8a:53:bc:2c:31:94:f5:65:29:16:
         40:3f:50:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:15:58 2024 by rpki-client on console-ams.rpki-client.org