Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/wpDJLYX1tXnm05g43s7wLmMGvGI.roa
File:                     wpDJLYX1tXnm05g43s7wLmMGvGI.roa (raw, json)
Hash identifier:          ophD65pfvCWb9ED8CJQnjBRVpm9uWSLF2+bHbvHg/I0=
Subject key identifier:   C2:90:C9:2D:85:F5:B5:79:E6:D3:98:38:DE:CE:F0:2E:63:06:BC:62
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       06DD
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/wpDJLYX1tXnm05g43s7wLmMGvGI.roa
Signing time:             Tue 30 Apr 2024 01:49:37 +0000
ROA not before:           Tue 30 Apr 2024 01:49:37 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        49.104.40.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1757 (0x6dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr 30 01:49:37 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=C290C92D85F5B579E6D39838DECEF02E6306BC62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c7:c8:28:39:f3:6a:fa:d4:5c:02:38:60:55:
                    8f:8e:cf:c9:35:47:ce:6a:4d:64:71:37:33:55:a4:
                    98:c9:bf:ab:81:31:f2:03:db:5d:23:54:e7:b2:79:
                    74:f5:c6:61:19:80:d5:12:d8:bc:35:f4:2c:15:c5:
                    2f:82:c6:a1:45:8e:be:2d:10:80:35:5e:17:9d:03:
                    88:16:2e:23:e8:e7:f8:bd:54:e7:1e:67:37:ec:b4:
                    46:13:ed:34:0b:22:e8:37:04:ad:f3:52:96:da:cb:
                    a7:77:2e:06:ba:1c:2f:27:f9:92:30:50:98:ab:04:
                    49:67:0b:f5:0d:cf:ed:46:c6:e6:d1:c1:bc:96:c6:
                    1f:00:ab:0d:18:5d:b4:ff:a2:fe:07:66:fd:79:77:
                    71:0d:3c:c3:ee:37:eb:e4:f9:81:29:2d:17:9b:b5:
                    28:ec:b7:20:4b:31:9d:05:e8:27:f4:98:0f:9d:ab:
                    1c:b5:4b:27:e3:d8:43:93:af:69:72:66:8e:72:e3:
                    e5:1c:4e:7a:29:69:ea:b1:9c:52:b2:e6:6f:2c:b7:
                    d4:ef:84:6f:c7:a3:68:ce:24:fd:5c:40:d2:04:b3:
                    7f:77:5c:83:ba:dc:2c:01:74:41:d7:83:a4:4b:23:
                    10:71:13:fa:5c:bb:ef:34:31:6a:4d:47:34:49:7c:
                    b4:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:90:C9:2D:85:F5:B5:79:E6:D3:98:38:DE:CE:F0:2E:63:06:BC:62
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/wpDJLYX1tXnm05g43s7wLmMGvGI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.104.40.0/23

    Signature Algorithm: sha256WithRSAEncryption
         58:ae:ec:91:17:ac:f1:59:b7:8a:92:5d:1c:77:6c:0b:73:a0:
         c6:2a:ff:62:07:66:bc:be:f1:7d:b4:eb:35:55:ab:6a:64:bc:
         68:ef:a7:e5:4d:0f:3f:53:f2:8e:4b:a3:34:69:a9:af:1d:d2:
         ca:2c:f5:19:e0:22:5b:9b:89:70:c1:de:65:31:66:f9:70:02:
         b6:16:56:20:50:6d:59:27:75:ac:c1:88:76:02:1a:b7:12:7b:
         ca:bc:89:4f:e8:16:e8:48:9f:0f:80:dd:7b:80:18:79:94:09:
         31:3a:6b:96:65:54:38:d8:59:bf:64:56:96:02:52:88:a9:ca:
         42:83:e3:75:b7:f7:77:9b:51:00:7c:a6:84:f1:b6:78:d0:eb:
         11:3e:a3:98:0e:26:3b:a9:35:c1:68:3b:64:9a:90:9a:1b:83:
         05:46:39:29:5c:9a:d7:f5:00:f4:43:78:0e:e8:c6:ad:fc:19:
         9d:ce:13:60:2d:f7:ca:af:70:50:ba:11:00:8a:a3:3d:ec:e8:
         88:c5:4c:72:fb:03:35:dd:61:0f:a6:89:e2:c8:6c:4e:94:0d:
         59:ff:99:52:b6:32:84:97:16:e5:63:0c:78:3d:5d:04:d1:67:
         62:a2:ac:bf:7e:ac:f9:df:3e:63:75:37:69:d8:8e:fa:3b:63:
         4e:a6:ca:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:59:12 2024 by rpki-client on console-fra.rpki-client.org