Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/wrbPK9aazs5MNI3hn7cAYeT3Eko.roa
File:                     wrbPK9aazs5MNI3hn7cAYeT3Eko.roa (raw, json)
Hash identifier:          jXws2ks96H/cAqyqGRqrQ+ksmMSv8RDmIn/MzBTGIjU=
Subject key identifier:   C2:B6:CF:2B:D6:9A:CE:CE:4C:34:8D:E1:9F:B7:00:61:E4:F7:12:4A
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       06C8
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/wrbPK9aazs5MNI3hn7cAYeT3Eko.roa
Signing time:             Tue 30 Apr 2024 01:46:58 +0000
ROA not before:           Tue 30 Apr 2024 01:46:58 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        49.97.35.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:41:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1736 (0x6c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr 30 01:46:58 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=C2B6CF2BD69ACECE4C348DE19FB70061E4F7124A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:8d:c4:5e:23:0f:69:d6:76:fc:c8:bf:2f:48:
                    69:bb:9a:6a:2c:14:91:eb:b5:64:4f:22:ac:c7:43:
                    95:47:f5:f1:bc:b3:23:01:3c:48:82:42:3a:91:97:
                    47:1b:28:be:fd:f6:4a:22:85:3b:af:af:12:91:e6:
                    2c:73:a8:1e:cf:f4:89:f2:e0:81:06:0d:ba:78:5f:
                    9f:f5:c4:a8:d6:ef:0a:fa:02:21:e8:be:1d:dd:39:
                    03:dd:0f:c7:57:32:7c:a8:2a:2f:7b:82:f1:6b:e8:
                    01:d7:23:19:02:5a:23:08:4e:5a:8b:60:d0:15:ae:
                    d5:3c:ef:9d:5d:7c:ab:f2:20:7f:a6:b1:25:6b:54:
                    a7:90:28:88:7c:e7:23:07:f4:36:55:b1:5a:81:78:
                    73:06:89:c4:e7:86:63:3d:c4:54:bf:ae:a3:17:f4:
                    02:da:45:eb:b4:13:90:9a:87:c3:88:b4:b5:a6:bc:
                    74:52:27:28:0e:6e:31:7c:fe:df:8a:64:2c:45:9b:
                    39:cd:d5:8f:10:a3:5f:c9:ac:94:50:0f:a6:38:9c:
                    93:e2:1a:cd:50:19:e3:66:7c:90:1a:d5:3d:b7:34:
                    d4:38:8e:8b:51:f5:be:d9:98:a4:84:94:08:d2:b5:
                    d8:2a:e9:0e:49:f3:7b:51:e2:97:9d:ce:45:9d:cc:
                    ad:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:B6:CF:2B:D6:9A:CE:CE:4C:34:8D:E1:9F:B7:00:61:E4:F7:12:4A
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/wrbPK9aazs5MNI3hn7cAYeT3Eko.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.97.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:52:5c:13:66:9c:7e:31:ff:b6:e3:be:5a:6d:0f:45:b8:41:
         56:9a:dd:f7:cb:a6:d5:59:5b:04:c1:cc:d8:72:26:b4:19:26:
         ff:3f:48:bd:b9:0b:16:30:a6:d2:c3:c0:71:7a:38:73:aa:e6:
         a0:b1:98:8a:b6:4c:31:b6:ff:68:b9:2b:03:bf:7f:77:4f:f6:
         ca:9b:a6:f9:65:a2:25:c1:f4:cd:2c:89:20:14:2d:ff:5a:f7:
         3e:28:75:6e:4c:29:82:05:cb:06:2e:38:f6:5e:0b:fb:8f:71:
         f5:0b:cc:49:03:d6:65:dc:0a:92:e4:a3:38:3d:26:34:63:43:
         3b:1e:38:1c:0d:4f:1b:bc:39:56:4a:2a:9c:60:e0:65:1b:5f:
         dd:4c:eb:b5:b6:a1:45:38:3f:0f:cc:30:3a:88:39:86:83:d2:
         91:3c:d9:fb:da:d1:8d:07:81:7f:8f:8b:a9:5b:19:25:d0:c6:
         f1:a9:7f:42:62:35:69:22:b5:2f:c2:5a:63:06:32:04:44:ee:
         89:81:bd:fa:db:76:dc:9b:cb:66:42:fd:8b:18:b8:74:4a:d5:
         56:01:43:40:2d:f4:6e:53:13:96:3a:50:bc:06:be:44:57:15:
         e8:7e:df:a2:64:3d:39:38:46:fb:05:65:2c:5e:62:b1:0b:98:
         f5:b5:0c:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:24:03 2024 by rpki-client on console-fra.rpki-client.org