Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/z7PkuYyzRjg45xnloFXflO-n9eY.roa
File:                     z7PkuYyzRjg45xnloFXflO-n9eY.roa (raw, json)
Hash identifier:          JoqiqqivCQsi5VKeHR+Lvff+e8zenVa/qV26dC+WFCw=
Subject key identifier:   CF:B3:E4:B9:8C:B3:46:38:38:E7:19:E5:A0:55:DF:94:EF:A7:F5:E6
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       05DC
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/z7PkuYyzRjg45xnloFXflO-n9eY.roa
Signing time:             Thu 29 Feb 2024 01:32:18 +0000
ROA not before:           Thu 29 Feb 2024 01:32:18 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     9605
IP address blocks:        49.97.8.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1500 (0x5dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Feb 29 01:32:18 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=CFB3E4B98CB3463838E719E5A055DF94EFA7F5E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:fa:8c:37:15:56:9b:2b:96:19:82:e0:2e:1b:
                    3c:3e:5d:40:47:3b:f7:00:be:5d:92:30:d8:9e:82:
                    7b:20:a1:bf:0f:f2:82:81:07:c9:6b:02:3c:53:8f:
                    dd:85:19:be:a5:4f:65:92:22:9a:2a:b4:dc:85:f0:
                    40:5b:c7:ca:de:0d:c5:d5:61:0c:85:be:60:3c:45:
                    8f:89:bc:93:f6:4c:c8:3d:65:02:69:a8:51:43:62:
                    42:1d:8b:af:b7:1a:73:b1:33:3d:42:82:fb:77:b8:
                    20:38:b8:6e:a0:98:04:89:2f:eb:c1:2d:21:8f:8b:
                    d4:75:63:7a:94:da:d7:ac:c6:ce:63:8c:79:40:a6:
                    1a:d5:a0:86:62:9c:c4:0c:23:86:7a:46:c5:98:13:
                    e3:48:a6:87:60:a4:c4:5d:95:41:bd:84:90:b1:0d:
                    62:94:82:e2:69:29:3e:66:de:23:93:b6:56:93:9d:
                    36:a1:d1:37:0a:bd:98:56:22:d5:75:aa:b7:f7:9b:
                    c3:c6:91:55:7c:73:0e:6f:45:2e:d0:e7:ff:41:de:
                    89:b8:b9:f8:b6:00:f7:e2:91:31:e9:b0:82:14:4d:
                    28:1d:82:90:b9:b9:fe:9f:35:ef:30:f8:02:88:3a:
                    7e:01:9d:47:5b:55:ad:90:ad:eb:63:dd:4d:50:45:
                    87:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:B3:E4:B9:8C:B3:46:38:38:E7:19:E5:A0:55:DF:94:EF:A7:F5:E6
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/z7PkuYyzRjg45xnloFXflO-n9eY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.97.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         aa:09:60:74:d3:b0:ba:26:66:17:c3:67:3b:52:7b:b0:75:e5:
         0e:18:7f:d6:66:34:28:92:75:24:89:87:33:59:28:62:3a:55:
         c0:71:65:04:a4:e9:e5:8b:68:23:c0:51:66:a5:66:20:84:e3:
         b8:75:75:cf:f1:74:52:e7:3f:68:f4:8f:37:a6:f7:73:92:03:
         86:63:91:8a:fb:2d:44:68:e2:07:60:98:53:e8:26:58:35:43:
         53:33:ab:2f:63:5b:7f:2c:2e:f5:b2:ac:eb:9d:7d:14:a4:85:
         bd:8e:8b:af:21:d9:1c:7d:3a:93:e1:fa:aa:fe:56:1b:88:19:
         2d:67:e1:40:c2:f3:34:0d:c2:a2:fe:36:3c:fe:b8:90:1b:9e:
         ed:b2:7a:9a:2d:87:4d:8f:be:1a:1b:25:d4:0f:fb:e1:5a:3d:
         be:61:d1:cc:34:02:3f:c4:d9:3e:78:79:65:36:8e:c3:a0:72:
         84:17:bd:41:46:73:78:84:58:34:4c:eb:c3:3c:01:c0:f6:84:
         ce:14:b0:5d:65:ef:68:90:3b:85:56:78:8f:32:00:a4:94:78:
         de:b9:7d:8c:4a:31:21:00:e2:a4:02:b2:d7:ed:70:b2:bd:75:
         55:34:2d:c0:15:61:97:63:65:cd:df:24:de:3f:fc:b0:53:83:
         6e:a9:68:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 15:54:38 2024 by rpki-client on console-ams.rpki-client.org