Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/vYSBDmTS33ghf0JLuMgWQyK2Zc8.roa
File:                     vYSBDmTS33ghf0JLuMgWQyK2Zc8.roa (raw, json)
Hash identifier:          JM2As4/8PugUZwQkOdKjxI25pZC5BVn8mzWQQKXxmD8=
Subject key identifier:   BD:84:81:0E:64:D2:DF:78:21:7F:42:4B:B8:C8:16:43:22:B6:65:CF
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0756
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/vYSBDmTS33ghf0JLuMgWQyK2Zc8.roa
Signing time:             Tue 30 Apr 2024 02:01:33 +0000
ROA not before:           Tue 30 Apr 2024 02:01:33 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        49.106.196.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1878 (0x756)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr 30 02:01:33 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=BD84810E64D2DF78217F424BB8C8164322B665CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e8:a3:01:99:76:ac:f8:f9:ab:a2:ca:a2:67:
                    16:32:74:0e:ab:79:41:ac:20:e1:a1:dd:e6:61:39:
                    b9:20:77:76:f3:e5:4d:f9:a0:b4:e8:81:49:11:7e:
                    55:e4:ea:57:eb:66:aa:52:10:05:ba:54:54:11:1e:
                    9c:f7:6d:44:d4:30:c0:01:53:9a:53:fa:9b:8e:bf:
                    28:0a:11:49:61:44:97:85:15:82:c9:ee:86:20:86:
                    5f:11:81:3d:09:db:18:48:38:a6:a3:b5:c3:00:97:
                    ee:02:fe:b5:56:2f:56:2f:09:2a:57:45:90:b5:05:
                    1c:2f:3f:4e:c9:20:93:c6:68:c5:6a:ac:b4:a8:ef:
                    29:87:16:26:06:c1:1b:84:19:1a:16:9a:2b:48:6d:
                    89:72:7a:a9:ae:14:1b:22:82:ad:7d:02:97:d9:6a:
                    30:82:a2:22:54:c3:42:7e:63:82:5d:86:fa:8e:bf:
                    88:1c:5f:3f:19:c1:86:72:e7:be:e3:63:de:b2:be:
                    16:ef:2b:9f:bd:2d:ea:98:33:a5:96:4f:99:d4:82:
                    fa:53:da:b3:8c:63:51:fa:1f:db:6e:13:82:f1:da:
                    46:b4:9c:7c:55:eb:1c:78:49:6b:77:2a:74:6b:c4:
                    cf:89:14:04:65:67:3c:bc:45:27:0f:0b:18:cb:25:
                    56:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:84:81:0E:64:D2:DF:78:21:7F:42:4B:B8:C8:16:43:22:B6:65:CF
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/vYSBDmTS33ghf0JLuMgWQyK2Zc8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.106.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c5:cb:7c:dd:14:b0:e7:a5:64:d1:98:8c:3c:86:68:b6:eb:c1:
         5e:cc:56:08:a1:a5:80:18:5d:79:ec:d6:d7:75:95:81:84:5c:
         7e:1e:0c:31:fc:ef:5c:4e:46:75:b6:ad:c8:97:ef:67:6f:4b:
         2e:2a:fd:c1:09:17:1b:8b:63:f2:ec:45:05:7f:60:3c:26:fb:
         52:d7:4e:d6:58:ce:73:74:3d:11:16:ac:15:ba:e4:41:46:f2:
         ef:98:19:17:77:85:ec:ce:c2:79:35:5c:90:6c:37:07:df:b1:
         63:88:af:9b:32:a5:4b:13:97:64:85:8c:98:44:da:f9:85:52:
         57:b1:e7:9b:db:ac:d7:16:99:d9:bd:73:17:7e:57:70:58:d6:
         b1:b2:14:1c:70:2f:91:44:f4:53:af:50:c2:7a:42:ea:cf:e7:
         c6:7c:02:21:9c:20:f4:74:71:31:93:85:eb:75:52:df:f5:54:
         4f:ad:f1:2a:35:c7:02:ad:53:81:4a:4a:b4:4d:cc:77:79:a0:
         89:6a:8c:5e:df:12:e7:c8:be:c5:13:80:89:83:47:8e:7d:af:
         bb:b5:f7:06:15:f6:83:e5:79:89:d2:61:c2:93:9b:9f:e6:d6:
         e2:5d:09:4f:b7:20:cd:55:6e:a7:e9:f8:d9:59:4c:37:c7:8b:
         34:06:f3:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 15:54:38 2024 by rpki-client on console-ams.rpki-client.org