Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/yL1FYBfnY_mDNbPUhbiXM00JGdg.roa
File:                     yL1FYBfnY_mDNbPUhbiXM00JGdg.roa (raw, json)
Hash identifier:          WabPxyEGsBBFOgPP2Z4yFMs5qImOdhbsANg/9llzkCI=
Subject key identifier:   C8:BD:45:60:17:E7:63:F9:83:35:B3:D4:85:B8:97:33:4D:09:19:D8
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0782
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/yL1FYBfnY_mDNbPUhbiXM00JGdg.roa
Signing time:             Tue 30 Apr 2024 02:04:41 +0000
ROA not before:           Tue 30 Apr 2024 02:04:41 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        49.104.40.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1922 (0x782)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr 30 02:04:41 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=C8BD456017E763F98335B3D485B897334D0919D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:58:50:b7:62:69:de:8e:46:84:5d:41:ac:fb:
                    36:a5:ed:27:e4:1c:7f:1d:fe:ac:2a:87:e3:64:60:
                    6f:7b:d1:75:28:56:86:b5:1c:a1:bd:06:ca:ab:37:
                    34:0d:d5:9a:ca:44:39:3f:a5:aa:0a:b1:1f:8b:cf:
                    0a:b4:39:87:71:ab:75:41:3f:c9:f3:7b:81:a7:5b:
                    46:7c:0a:08:b7:63:d0:eb:13:fe:c6:f9:ea:0d:88:
                    d6:27:ee:2e:4e:26:cb:3e:61:01:e4:96:aa:67:ce:
                    fa:8b:0a:bd:55:c7:86:88:b9:03:7d:18:82:ad:86:
                    d3:cd:d3:6f:93:2a:f6:ea:ed:2d:94:a4:d4:2b:54:
                    b4:a5:a8:86:70:b2:06:1e:e1:54:4c:82:ed:31:9d:
                    08:d1:d1:7b:39:27:f9:a0:86:1a:64:03:da:f9:9d:
                    ec:c9:9b:9f:4b:e6:9f:64:3b:78:67:83:19:10:21:
                    31:7b:68:0a:35:dd:c0:5b:1e:f6:a2:5e:30:20:db:
                    21:e8:3f:13:21:89:50:9b:02:a3:25:4c:29:1e:a1:
                    f2:17:96:0b:01:ad:49:27:ff:77:f2:61:e6:4f:56:
                    0d:fe:d6:39:a0:18:c3:34:69:f3:8a:fd:99:b8:91:
                    0f:d6:fc:b8:6e:3a:20:62:ff:87:1d:13:6a:6e:4d:
                    65:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:BD:45:60:17:E7:63:F9:83:35:B3:D4:85:B8:97:33:4D:09:19:D8
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/yL1FYBfnY_mDNbPUhbiXM00JGdg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.104.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ba:c6:77:fa:46:a8:50:20:9c:cd:b5:5f:cb:57:7a:4c:0d:52:
         c5:6e:e8:07:fb:7a:be:69:b7:4b:6d:89:1c:b6:db:f9:03:89:
         3d:7d:d7:47:63:c3:f7:40:ad:3f:09:38:87:c4:0b:14:25:15:
         b1:29:4a:62:32:c9:6c:79:7f:88:02:05:2f:38:16:12:2e:1b:
         0d:f3:25:26:f6:e2:c4:ff:8b:34:13:89:09:89:fc:0a:76:9f:
         7b:bd:65:60:a4:0c:9d:89:e8:4b:b5:68:cd:eb:38:1a:b9:bf:
         62:94:c8:09:67:64:5f:73:36:f9:c3:9e:65:52:32:7e:78:b0:
         b6:48:57:74:ed:16:88:26:6f:9b:70:4c:ac:60:e9:d6:cf:07:
         ea:ca:e5:60:9d:08:65:43:3b:b1:16:7a:e1:d9:7a:7b:36:21:
         1f:bf:67:18:48:d8:b4:c5:74:04:d4:81:95:dd:40:ad:07:d5:
         b9:8e:4e:00:2b:a2:db:1f:e0:76:95:a8:df:e8:8a:16:7f:9d:
         5c:5a:0d:a1:67:05:5f:62:b7:39:24:e8:37:53:d8:43:0b:66:
         e3:35:85:83:b8:8e:95:5d:ae:ff:f5:5c:b7:84:60:5f:bb:68:
         51:7f:35:df:3f:a6:05:e7:01:96:dc:4f:d3:3c:58:14:e8:f6:
         04:48:e5:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:54:43 2024 by rpki-client on console-ams.rpki-client.org