Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/xzqEehc0fBzFACKriJUrRuEdrZ0.roa
File:                     xzqEehc0fBzFACKriJUrRuEdrZ0.roa (raw, json)
Hash identifier:          EbYrMlPovwHK9OXVpjw0uM9/3gZF2dfb6055KQbhwEI=
Subject key identifier:   C7:3A:84:7A:17:34:7C:1C:C5:00:22:AB:88:95:2B:46:E1:1D:AD:9D
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       07C3
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/xzqEehc0fBzFACKriJUrRuEdrZ0.roa
Signing time:             Tue 30 Apr 2024 02:08:46 +0000
ROA not before:           Tue 30 Apr 2024 02:08:46 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        49.97.88.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 23 Jun 2024 11:53:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1987 (0x7c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr 30 02:08:46 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=C73A847A17347C1CC50022AB88952B46E11DAD9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:76:45:a9:a8:c3:f1:07:26:d0:ed:98:05:d4:
                    ab:5d:46:ec:94:81:e0:84:c6:d8:c3:82:90:9e:48:
                    70:af:82:0f:ee:6d:e2:58:77:21:f2:ae:46:51:bf:
                    34:a7:bd:4c:55:81:26:01:88:fd:52:55:a2:88:50:
                    7a:94:96:bf:31:73:91:7a:44:62:59:e1:da:09:99:
                    aa:90:a7:ea:2f:38:1d:d0:d8:7a:30:6d:29:4c:3c:
                    99:b1:68:4f:28:f3:21:ff:8a:e9:42:85:a1:ae:4c:
                    54:80:b5:c4:25:d8:9c:8b:e1:32:44:28:c6:05:c2:
                    7e:f1:bc:33:80:ee:3b:32:45:67:e5:5e:30:64:5b:
                    58:e3:d9:a4:b1:ef:55:08:81:29:88:bb:7b:62:55:
                    a0:6a:e5:9e:9d:16:66:fe:98:56:65:e6:a6:ee:dc:
                    54:e1:3d:e0:76:8d:86:8a:56:3a:c2:27:3f:9f:c7:
                    57:9b:22:99:31:68:0e:8d:20:bb:21:2e:d6:db:93:
                    6b:2b:4d:56:f7:d3:dc:ef:dc:0d:55:34:b0:c3:14:
                    76:6b:73:67:d1:32:fc:f0:2a:ac:e5:9d:e5:45:91:
                    04:6d:9c:1e:52:f7:d6:68:da:00:a0:ed:cc:db:0c:
                    ff:0e:95:64:79:95:2e:7a:03:29:7e:84:e1:89:ed:
                    aa:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:3A:84:7A:17:34:7C:1C:C5:00:22:AB:88:95:2B:46:E1:1D:AD:9D
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/xzqEehc0fBzFACKriJUrRuEdrZ0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.97.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8a:7b:4a:7c:df:80:1c:ae:00:08:93:ee:98:bf:94:7b:49:7f:
         70:d5:00:ae:a2:58:2d:12:eb:c2:f2:a5:95:d9:4a:dc:3b:9e:
         e5:0d:f6:e3:ca:0a:85:ee:16:e9:22:29:10:9e:ec:03:f5:81:
         e8:dd:89:8f:be:cd:7e:3d:52:b8:80:1a:95:43:ca:81:59:4c:
         b6:ac:3f:19:42:78:5a:dd:57:1e:74:d7:31:82:37:66:6e:12:
         51:97:9d:ff:24:19:0d:ca:fa:1a:c4:36:52:9f:8b:4f:d4:b0:
         45:d4:39:ee:fa:17:07:e6:02:56:cd:45:e3:cc:a1:ff:89:54:
         45:e1:cb:b6:d9:e0:c9:66:9c:f7:d3:19:db:3f:85:dd:2f:b4:
         c8:e6:41:d6:a6:e7:78:62:b7:f6:b1:cd:f0:ff:12:a6:49:30:
         46:84:a5:06:8b:73:a5:d9:89:a4:00:c5:65:ad:64:30:8c:28:
         bd:a4:3c:3e:77:23:c3:74:c8:e0:37:3b:c7:85:07:b1:ea:7b:
         73:7a:fd:dd:9a:d5:67:68:83:94:11:56:44:6f:6b:ea:c5:32:
         27:ef:0a:c5:3f:ac:20:0c:bc:dc:69:a2:56:03:38:38:11:b5:
         2d:7d:83:ac:6b:3f:60:b2:4f:1f:dd:cc:2c:de:83:59:52:f9:
         90:e3:f8:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 12:57:23 2024 by rpki-client on console-fra.rpki-client.org