Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/vlsgQnaJ0JpO_ui8EGVFkJa2apw.roa
File:                     vlsgQnaJ0JpO_ui8EGVFkJa2apw.roa (raw, json)
Hash identifier:          ws/cWnexOnDnIHVkhSHOjs3r3wOLlTtL/QAHmy7pHvQ=
Subject key identifier:   BE:5B:20:42:76:89:D0:9A:4E:FE:E8:BC:10:65:45:90:96:B6:6A:9C
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0672
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/vlsgQnaJ0JpO_ui8EGVFkJa2apw.roa
Signing time:             Tue 30 Apr 2024 01:37:56 +0000
ROA not before:           Tue 30 Apr 2024 01:37:56 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        49.105.78.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1650 (0x672)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr 30 01:37:56 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=BE5B20427689D09A4EFEE8BC1065459096B66A9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d6:22:df:92:5d:96:be:eb:ca:59:ed:38:70:
                    be:49:f3:40:37:58:ad:47:e2:97:57:7f:60:bd:2f:
                    09:dd:de:8a:82:8c:93:38:6a:f7:4d:b8:c8:d2:ed:
                    d5:d6:b2:9a:eb:19:53:6d:37:1f:65:e9:33:23:69:
                    f6:9b:64:1c:02:5f:63:3e:2f:36:cc:f8:58:6b:ba:
                    45:84:a4:ad:87:69:b9:d3:de:c5:f7:60:42:9c:e4:
                    87:42:54:5e:89:06:47:63:b8:16:fa:ec:8a:6f:fe:
                    40:21:41:7c:a3:30:15:2c:f1:a4:2b:9d:fa:cb:9b:
                    54:7a:bf:6b:ac:a5:7d:50:d4:ff:73:19:b3:65:7d:
                    9d:27:0e:9e:31:7c:37:64:81:f7:db:11:5f:ab:d9:
                    ce:63:7f:d4:06:b8:5d:4b:c7:5d:66:c9:39:a6:3f:
                    b6:43:ec:4a:31:66:e7:69:fe:a7:59:8f:a7:8e:af:
                    10:a1:1e:6c:56:c1:b2:1b:b4:d3:d8:69:06:dc:77:
                    6c:26:0d:f4:96:d1:2a:11:9f:d4:0d:91:c0:c6:72:
                    b0:d7:a7:51:f4:b1:fc:c1:de:74:a9:86:35:0e:8c:
                    24:97:9f:11:06:ba:ec:c9:d9:cd:18:f4:2b:bd:4e:
                    e3:b2:c3:43:c6:2a:e3:dc:08:58:33:ec:05:85:8f:
                    49:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:5B:20:42:76:89:D0:9A:4E:FE:E8:BC:10:65:45:90:96:B6:6A:9C
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/vlsgQnaJ0JpO_ui8EGVFkJa2apw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.105.78.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ca:34:5c:d1:c2:15:b3:fc:41:d6:9d:4a:38:c1:4e:86:3a:a5:
         d5:c9:fa:d9:92:da:90:3c:17:56:ab:41:b5:93:39:80:a9:94:
         39:1a:48:9f:36:22:9c:99:9f:a0:c2:c6:11:a4:dc:ae:95:2c:
         48:fb:e5:bc:8a:34:09:1a:bd:2b:6c:47:5e:42:03:b9:d0:db:
         42:14:94:aa:b4:0b:05:70:50:e4:e4:ce:af:7f:50:f4:19:f0:
         d8:f9:f6:c0:8f:8f:90:7c:51:8e:aa:ec:1a:5c:af:8c:f0:20:
         84:da:13:fc:7d:84:9b:99:fa:fa:96:2d:d7:f3:44:13:da:0d:
         d9:88:31:ed:e9:bf:eb:26:37:6d:fa:b8:3b:d9:cc:99:b8:fb:
         e9:40:a5:9d:b1:12:19:3f:cf:ca:dc:60:5d:37:8f:58:92:c0:
         61:ff:7a:a5:a5:d8:d2:bf:2b:07:00:f7:63:01:4e:44:d7:17:
         68:cc:86:9c:01:43:6f:d5:b9:ff:4c:28:00:11:7d:9c:7f:44:
         7b:78:bd:fb:0f:91:2d:68:70:28:f6:6b:9a:5b:b9:70:43:0c:
         40:c8:41:19:f7:30:90:54:02:63:72:e7:13:93:b7:25:36:10:
         b9:04:1b:7a:cb:e9:5c:f1:6e:15:4e:04:51:e3:95:61:42:37:
         aa:7f:30:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:45:42 2024 by rpki-client on console-ams.rpki-client.org