Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/w-EaP3u_6Z3FYHkDf60IPCQZdbc.roa
File:                     w-EaP3u_6Z3FYHkDf60IPCQZdbc.roa (raw, json)
Hash identifier:          x+bhJuAS0BtD7lSO6/96mADUblJlOgqhuclPy0buOeU=
Subject key identifier:   C3:E1:1A:3F:7B:BF:E9:9D:C5:60:79:03:7F:AD:08:3C:24:19:75:B7
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       08B1
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/w-EaP3u_6Z3FYHkDf60IPCQZdbc.roa
Signing time:             Tue 30 Apr 2024 02:22:38 +0000
ROA not before:           Tue 30 Apr 2024 02:22:38 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        49.106.92.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2225 (0x8b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr 30 02:22:38 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=C3E11A3F7BBFE99DC56079037FAD083C241975B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:98:90:7c:16:b3:9d:1d:13:41:08:d0:c0:21:
                    e8:69:76:13:7d:4b:a8:b9:0a:92:be:53:21:a6:75:
                    7a:5a:46:cb:60:d8:15:5d:14:a9:8d:b9:63:83:4f:
                    20:17:91:f9:31:ca:f1:3e:ce:08:f1:40:d2:ff:bc:
                    83:f8:ec:d8:b9:31:b8:a4:52:f6:3e:a6:ee:b8:3d:
                    51:13:ec:15:22:39:05:7c:96:cd:5c:f7:53:d6:49:
                    50:26:66:f8:b1:87:fd:e5:fe:c5:9a:7b:c3:69:02:
                    c1:54:d4:06:53:c0:62:40:11:77:11:28:08:8d:00:
                    34:f5:25:bc:42:05:72:11:62:27:85:41:d3:54:fd:
                    fd:96:c2:2d:22:3e:7e:d9:18:2b:22:66:22:bf:83:
                    db:25:8a:b2:ee:f3:b0:9b:63:ad:39:2a:ef:aa:ef:
                    97:de:44:b4:85:52:1e:27:f0:36:48:9d:d7:84:b7:
                    fe:b8:ec:03:27:af:9e:3c:ac:11:cf:91:a2:91:e2:
                    0d:66:ca:e2:8b:ed:b5:2b:49:32:4e:4a:25:e6:0f:
                    1e:bc:36:1c:44:b2:52:2a:50:6e:fa:a0:60:67:25:
                    d1:7e:5f:13:57:b3:22:b9:ac:48:17:e4:bf:9e:04:
                    75:0f:d0:f3:7f:e5:19:30:8b:91:bf:e8:3d:50:d4:
                    5c:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:E1:1A:3F:7B:BF:E9:9D:C5:60:79:03:7F:AD:08:3C:24:19:75:B7
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/w-EaP3u_6Z3FYHkDf60IPCQZdbc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.106.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         46:d4:40:d5:75:f4:e1:59:85:f9:92:0b:2f:c4:6a:c9:d3:4f:
         e3:d6:cb:96:ac:b4:87:12:5d:53:bf:6e:63:88:68:32:18:00:
         6e:2c:35:01:e3:70:e7:bb:2f:7f:f3:eb:7e:0d:d1:b2:2a:10:
         81:e2:77:7e:6d:91:45:3c:9a:3f:c6:ca:05:95:22:9a:77:99:
         dc:fc:5e:55:d4:1a:c6:df:94:85:00:8c:74:13:3e:fc:26:32:
         ff:1d:9d:cd:e9:ea:05:d2:0e:12:c1:30:1c:4a:2f:38:49:de:
         f0:3f:85:2f:5b:db:f1:e5:48:9b:c3:b6:1c:49:8c:95:c2:4b:
         3a:e0:61:ec:f1:38:37:49:d1:53:67:ab:29:2e:2d:c0:1d:e4:
         14:b6:3b:ca:23:b1:b2:23:58:3e:15:7d:ac:3f:7e:5a:66:72:
         f8:3d:c6:96:dd:71:ba:90:66:7c:fc:fc:12:5d:e4:d2:5e:26:
         1e:43:8a:66:67:55:2a:72:8e:b8:f6:d5:9b:51:be:bb:3a:34:
         cb:29:3b:59:d9:92:0f:79:5b:da:27:04:5c:d2:27:c0:16:99:
         34:69:f9:b1:5c:c8:3f:ce:9f:ea:71:db:2f:41:a4:ad:44:10:
         b5:30:6d:77:49:02:00:60:ef:e9:4f:1a:68:e5:cf:29:06:83:
         f4:1e:ff:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:59:12 2024 by rpki-client on console-fra.rpki-client.org