Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/wI7dC1wqSo06Vo-TjD_zibNgetw.roa
File:                     wI7dC1wqSo06Vo-TjD_zibNgetw.roa (raw, json)
Hash identifier:          r3Hrx8TLVGxzahKOv1f/N2lGRvzX46vcOgrOOZ1lgI0=
Subject key identifier:   C0:8E:DD:0B:5C:2A:4A:8D:3A:56:8F:93:8C:3F:F3:89:B3:60:7A:DC
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       072D
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/wI7dC1wqSo06Vo-TjD_zibNgetw.roa
Signing time:             Tue 30 Apr 2024 01:55:57 +0000
ROA not before:           Tue 30 Apr 2024 01:55:57 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        49.106.202.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 22 Jun 2024 01:30:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1837 (0x72d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr 30 01:55:57 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=C08EDD0B5C2A4A8D3A568F938C3FF389B3607ADC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:1e:9a:fa:30:4b:67:17:eb:bd:e5:11:ae:99:
                    18:7c:5b:5a:66:79:e1:b2:be:21:70:cd:16:dd:e2:
                    59:8d:d7:80:98:f1:8e:04:a8:8d:3e:24:49:cd:b0:
                    eb:8b:e4:b7:51:94:ca:f5:df:0c:db:fa:6e:4f:79:
                    06:ff:5f:16:32:0c:b7:ee:c4:30:bf:c1:b6:0c:34:
                    bf:a2:69:b4:f8:e8:bf:bc:1b:a4:16:54:66:e8:ef:
                    2b:d3:4c:c8:f5:a4:f7:39:84:ae:c7:28:3c:ca:18:
                    54:c6:c9:f5:20:9d:fd:6d:2e:5e:ca:ca:d3:ea:6f:
                    69:e1:c8:51:11:70:7b:4c:9d:e4:d1:16:46:47:b7:
                    d1:e2:36:ed:4e:13:be:38:28:38:83:48:34:04:6c:
                    e2:3a:1c:ef:1d:51:69:df:f5:f7:9d:57:52:7f:de:
                    d7:f0:a9:66:6a:f4:72:77:d2:da:51:3f:97:37:54:
                    35:54:28:26:cd:d8:a7:29:42:77:10:b9:00:44:ff:
                    2c:61:b1:22:8d:e6:ca:38:38:52:15:fd:6f:45:fa:
                    5b:aa:c2:fd:93:8c:85:b4:d4:07:a8:99:e4:71:4b:
                    5b:44:ad:12:10:2b:0c:27:c8:5b:28:05:49:be:51:
                    c7:e0:99:da:2d:01:34:f7:8f:aa:a0:fa:31:32:53:
                    09:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:8E:DD:0B:5C:2A:4A:8D:3A:56:8F:93:8C:3F:F3:89:B3:60:7A:DC
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/wI7dC1wqSo06Vo-TjD_zibNgetw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.106.202.0/23

    Signature Algorithm: sha256WithRSAEncryption
         30:ce:dd:78:26:c7:65:a8:a5:21:8a:a8:a5:7c:a7:74:12:53:
         48:48:cd:1d:85:c6:1d:72:3e:7a:c6:74:6d:93:cc:93:c5:e6:
         d0:d2:c3:6c:29:2d:4b:ea:43:ca:69:92:3e:4e:ba:3c:79:14:
         ce:f2:b8:2e:2f:89:3c:09:09:94:96:60:ba:86:04:54:53:be:
         64:c8:52:19:12:8b:b1:97:df:fe:c0:6b:31:7b:64:c9:14:27:
         4c:94:22:34:aa:63:e5:dc:87:91:1b:a8:7b:bc:80:27:2b:a5:
         a7:99:45:6a:c9:96:ee:98:e6:d8:a0:41:23:59:9c:f3:d7:f7:
         4a:1e:70:28:17:e3:3c:c2:8a:f1:ae:07:cf:dd:f6:b6:95:6f:
         a4:46:b1:a6:09:ce:88:18:08:4b:f5:14:ef:f2:32:93:c1:74:
         c8:c5:77:41:9a:14:d4:7a:9d:17:78:2d:80:44:d8:43:49:90:
         ff:d1:36:1e:da:36:b5:b7:2f:25:a3:37:c2:a4:38:af:66:04:
         92:bf:c1:93:32:9c:d4:08:87:6c:1d:06:90:70:f5:db:b7:4d:
         f6:fd:96:5b:ca:b6:2a:7f:0d:08:61:f6:02:86:09:ef:3c:68:
         f5:97:fd:f6:c3:18:59:63:3a:b3:2c:35:d5:c7:dc:b4:d3:54:
         b2:da:59:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 02:01:43 2024 by rpki-client on console-fra.rpki-client.org