Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/1ORntJpQOJf3ZxyuS49dWdcoyp4.roa
File:                     1ORntJpQOJf3ZxyuS49dWdcoyp4.roa (raw, json)
Hash identifier:          YAxFIFGJz/kRP8qUrifMrF93PG+SSLckfavO+PoBfLA=
Subject key identifier:   D4:E4:67:B4:9A:50:38:97:F7:67:1C:AE:4B:8F:5D:59:D7:28:CA:9E
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0715
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/1ORntJpQOJf3ZxyuS49dWdcoyp4.roa
Signing time:             Tue 30 Apr 2024 01:53:00 +0000
ROA not before:           Tue 30 Apr 2024 01:53:00 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        49.98.88.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1813 (0x715)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr 30 01:53:00 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=D4E467B49A503897F7671CAE4B8F5D59D728CA9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:2a:0c:e5:b2:63:40:d0:73:9e:91:7b:5f:ec:
                    97:66:e6:3a:d7:d1:77:f5:4b:40:2e:c2:ff:09:58:
                    55:70:20:fe:14:e4:53:fc:0d:24:b1:8b:80:1c:9a:
                    35:98:d7:ca:85:4c:e7:74:0d:ed:21:9e:9a:29:6a:
                    b7:94:32:cb:19:f6:07:f2:7d:92:14:f0:81:f2:82:
                    a7:62:62:e5:38:8b:e7:f5:c8:6d:97:7c:2d:17:ef:
                    2f:01:11:4d:cf:b2:86:10:5c:dc:1e:e8:41:18:dd:
                    87:ee:fa:ec:68:c4:0f:b6:0c:07:c7:07:1c:8f:ca:
                    9c:d9:61:75:39:2d:d4:23:04:40:7d:17:73:62:fd:
                    e8:78:ba:bc:48:6c:28:40:47:8b:33:24:ec:af:06:
                    fe:04:84:8a:e2:80:71:ea:86:b5:d8:ba:43:f8:b5:
                    cd:d0:1b:10:6d:07:23:5a:83:50:b0:a6:82:41:e4:
                    73:b8:15:56:1f:85:5c:1d:4b:46:fa:8d:05:a0:f8:
                    7d:69:38:2d:8d:f1:6f:dc:8b:42:e3:d3:6a:b6:67:
                    b2:06:a4:5a:8b:45:d7:6b:b0:16:a5:59:ed:1d:4d:
                    92:83:d1:ad:4b:46:68:d7:f9:98:a6:42:a9:47:6d:
                    e9:24:02:ff:8f:13:ab:a4:f8:96:2c:4f:3f:ad:c8:
                    4c:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:E4:67:B4:9A:50:38:97:F7:67:1C:AE:4B:8F:5D:59:D7:28:CA:9E
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/1ORntJpQOJf3ZxyuS49dWdcoyp4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.98.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a4:7b:62:51:cc:66:4c:d7:ba:9e:f3:4e:3c:9c:49:05:a0:a7:
         48:29:5a:53:01:6d:8a:3c:52:49:6f:36:69:da:1f:06:a8:cf:
         d2:ff:6c:0e:64:5e:f0:94:5b:cc:e1:e3:11:89:9f:83:ca:39:
         40:1a:24:eb:6d:9e:66:62:e3:70:f3:b6:a3:ee:b3:73:ab:41:
         ce:94:cd:d5:7e:4c:4c:00:8b:d4:08:84:7e:91:31:ca:36:f5:
         70:c5:56:63:ad:43:4f:62:a0:17:9e:c3:43:8a:9a:21:5a:ed:
         7b:62:c2:68:fa:ee:8b:05:a2:a3:7f:aa:3e:74:f4:5b:13:46:
         ee:6b:2d:07:41:ae:43:c5:98:93:23:2b:be:fa:2b:3d:b2:69:
         fa:f1:c7:2e:4e:c9:df:58:f1:05:42:d7:7a:2f:59:0a:96:2e:
         88:84:8f:d4:ac:66:db:57:ec:a1:ac:2e:c5:35:06:31:7f:e7:
         b9:81:a8:4c:84:1f:d9:14:40:f1:46:ae:9e:f8:7a:e4:b2:cf:
         19:fe:9a:48:14:8d:f2:db:b1:79:4b:9e:d9:9e:8d:05:59:86:
         a6:f9:8b:a0:7b:0d:11:6d:13:7a:c0:9d:76:2c:65:28:82:9e:
         60:c4:fd:50:4e:50:bb:36:d5:29:5c:d6:49:d6:e7:10:25:3f:
         33:66:63:62
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICBxUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw
MTUzMDBaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKEQ0RTQ2N0I0OUE1MDM4
OTdGNzY3MUNBRTRCOEY1RDU5RDcyOENBOUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDYKgzlsmNA0HOekXtf7Jdm5jrX0Xf1S0Auwv8JWFVwIP4U5FP8
DSSxi4AcmjWY18qFTOd0De0hnpopareUMssZ9gfyfZIU8IHygqdiYuU4i+f1yG2X
fC0X7y8BEU3PsoYQXNwe6EEY3Yfu+uxoxA+2DAfHBxyPypzZYXU5LdQjBEB9F3Ni
/eh4urxIbChAR4szJOyvBv4EhIrigHHqhrXYukP4tc3QGxBtByNag1CwpoJB5HO4
FVYfhVwdS0b6jQWg+H1pOC2N8W/ci0Lj02q2Z7IGpFqLRddrsBalWe0dTZKD0a1L
RmjX+ZimQqlHbekkAv+PE6uk+JYsTz+tyEwzAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQU1ORntJpQOJf3ZxyuS49dWdcoyp4wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5LzFPUm50SnBRT0pmM1p4eXVTNDlkV2Rjb3lwNC5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAIxYlgwDQYJKoZIhvcNAQELBQADggEBAKR7YlHMZkzXup7zTjycSQWgp0gp
WlMBbYo8UklvNmnaHwaoz9L/bA5kXvCUW8zh4xGJn4PKOUAaJOttnmZi43DztqPu
s3OrQc6UzdV+TEwAi9QIhH6RMco29XDFVmOtQ09ioBeew0OKmiFa7Xtiwmj67osF
oqN/qj509FsTRu5rLQdBrkPFmJMjK776Kz2yafrxxy5Oyd9Y8QVC13ovWQqWLoiE
j9SsZttX7KGsLsU1BjF/57mBqEyEH9kUQPFGrp74euSyzxn+mkgUjfLbsXlLntme
jQVZhqb5i6B7DRFtE3rAnXYsZSiCnmDE/VBOULs21Slc1knW5xAlPzNmY2I=
-----END CERTIFICATE-----
Generated at Sat Jun 1 15:54:29 2024 by rpki-client on console-ams.rpki-client.org