Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/wDBC64TxTBLXEgMRx6XZrzk_XGo.roa
File:                     wDBC64TxTBLXEgMRx6XZrzk_XGo.roa (raw, json)
Hash identifier:          Ec0blPE4uAs/bawP1eM7V2H24AlEmkO370BlLZ4ztRw=
Subject key identifier:   C0:30:42:EB:84:F1:4C:12:D7:12:03:11:C7:A5:D9:AF:39:3F:5C:6A
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       05E8
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/wDBC64TxTBLXEgMRx6XZrzk_XGo.roa
Signing time:             Thu 29 Feb 2024 01:35:36 +0000
ROA not before:           Thu 29 Feb 2024 01:35:36 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     9605
IP address blocks:        49.96.248.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1512 (0x5e8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Feb 29 01:35:36 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=C03042EB84F14C12D7120311C7A5D9AF393F5C6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e0:f9:d9:e7:13:3d:37:7e:7c:3a:1c:d1:62:
                    cb:a9:10:fb:03:72:b4:20:84:71:59:60:ea:72:07:
                    7e:51:dc:7f:c7:56:9f:10:6d:16:13:33:ca:37:d3:
                    45:4b:5c:62:e2:8b:eb:63:d9:b6:65:61:78:3c:5b:
                    b3:62:66:6d:90:46:cd:4a:7b:f1:28:b4:95:ee:0b:
                    29:c9:a3:c8:6e:4b:09:46:16:a1:05:5a:eb:6c:55:
                    78:d5:a0:13:92:26:b4:69:51:95:39:92:89:c2:b2:
                    e6:d8:fc:8b:88:b1:59:28:2f:e9:39:14:6d:c3:d3:
                    da:0b:8b:34:c1:18:e1:25:04:26:c8:ee:50:28:1a:
                    ce:fe:e7:d3:a2:d1:b1:6d:7e:20:e2:08:ae:2e:b8:
                    a0:27:eb:82:c9:67:a1:8a:be:52:ea:ed:67:92:75:
                    bc:16:b9:9f:fc:10:99:2c:44:e0:be:a2:bf:1d:58:
                    da:5f:bd:b9:bc:bf:c3:e3:0a:59:c0:f8:1b:dd:c7:
                    b9:9f:62:43:f2:14:7f:aa:cd:03:41:0a:b3:0d:ea:
                    c8:0b:2e:c3:87:76:81:07:bb:0a:4b:4d:73:7d:7a:
                    bd:00:b8:40:17:54:3a:57:63:93:06:66:f4:ad:0e:
                    47:d5:67:d7:92:f4:4f:5c:38:43:a4:c3:0f:c2:a9:
                    dd:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:30:42:EB:84:F1:4C:12:D7:12:03:11:C7:A5:D9:AF:39:3F:5C:6A
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/wDBC64TxTBLXEgMRx6XZrzk_XGo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.96.248.0/23

    Signature Algorithm: sha256WithRSAEncryption
         23:8a:02:de:08:2b:e8:f3:f5:ad:8f:85:2a:83:38:2d:8e:fe:
         f8:7a:f3:a4:4f:42:66:4d:3a:7b:7b:69:9c:97:a7:89:9a:54:
         76:fc:df:aa:24:c5:12:83:c5:35:c3:29:c4:26:b5:ab:88:9b:
         3d:38:80:5a:e3:d5:a9:cd:8e:f9:f0:f7:aa:a4:e2:3a:3d:12:
         80:e3:1a:ae:5a:fc:c0:0f:23:9a:20:29:3e:f5:77:dc:a1:a1:
         80:f3:42:4a:ec:9b:14:bc:0c:c8:89:61:8e:09:6d:eb:7e:2a:
         63:6b:94:b3:05:50:da:cb:3c:eb:ba:36:c7:87:82:6f:43:0c:
         42:b4:4d:ea:e1:16:f9:f5:50:71:4b:83:a3:af:1d:80:e9:da:
         6f:d4:a7:a0:95:ba:cb:3c:48:5f:8f:a1:e7:70:f7:2e:60:8c:
         ea:bb:41:47:ed:14:35:98:ee:93:77:c0:d3:ff:9f:55:a2:44:
         5c:ef:bc:7e:38:68:24:aa:c8:67:c4:84:7d:fe:3a:43:6b:90:
         9c:1f:2e:4e:68:e8:49:35:77:4c:c0:1a:d7:5f:6c:41:e2:8e:
         f1:b3:21:d1:b1:32:a0:6d:44:5b:0b:a9:b6:c1:60:9b:60:0d:
         80:37:1f:b7:9d:07:d4:5b:86:04:93:3a:68:16:37:48:20:9d:
         17:dd:65:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 15:54:38 2024 by rpki-client on console-ams.rpki-client.org