Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/4e_TafO_ZB-6OMeE6xA2QZKZErI.roa
File:                     4e_TafO_ZB-6OMeE6xA2QZKZErI.roa (raw, json)
Hash identifier:          gWTAHNFFx+JuA3gHv9oi2scdSjOTVYTRqIQXPu78bL4=
Subject key identifier:   E1:EF:D3:69:F3:BF:64:1F:BA:38:C7:84:EB:10:36:41:92:99:12:B2
Certificate issuer:       /CN=F89E0F15C1E20E191AAF17288F6E30FF01869A6E
Certificate serial:       50
Authority key identifier: F8:9E:0F:15:C1:E2:0E:19:1A:AF:17:28:8F:6E:30:FF:01:86:9A:6E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/4e_TafO_ZB-6OMeE6xA2QZKZErI.roa
Signing time:             Sun 30 Jun 2024 01:44:26 +0000
ROA not before:           Sun 30 Jun 2024 01:44:26 +0000
ROA not after:            Tue 24 Jun 2025 10:46:45 +0000
asID:                     9605
IP address blocks:        148.68.128.0/17 maxlen: 17

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:32:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 80 (0x50)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F89E0F15C1E20E191AAF17288F6E30FF01869A6E
        Validity
            Not Before: Jun 30 01:44:26 2024 GMT
            Not After : Jun 24 10:46:45 2025 GMT
        Subject: CN=E1EFD369F3BF641FBA38C784EB103641929912B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:cb:68:67:71:ff:0b:49:d4:a2:6f:76:ba:b2:
                    62:90:52:00:72:d8:27:19:84:58:c6:7b:0d:86:63:
                    00:72:cd:08:6b:4a:3a:91:80:97:78:6f:31:5f:8c:
                    75:90:ae:8e:a1:03:b1:20:64:8f:5b:6e:ce:09:60:
                    41:7c:5f:bf:b9:c9:66:c7:e0:5d:26:6a:7b:3f:53:
                    ac:f5:c7:4a:4c:d3:7d:eb:cc:ec:bf:c6:b7:a6:4e:
                    bd:12:3d:6f:87:b6:79:64:2b:12:f3:e4:d4:80:77:
                    88:21:db:04:46:e3:e9:37:69:8f:c1:2f:04:7e:2d:
                    e6:58:ae:2e:97:5b:f8:01:36:fd:31:29:df:1b:5a:
                    76:35:1d:df:87:83:a9:86:49:e2:c1:26:af:2d:95:
                    d5:74:4c:88:d2:b1:c0:10:10:ca:9a:ed:92:fe:04:
                    23:3e:46:c7:3b:94:24:5a:1c:e2:c4:fe:b2:27:a2:
                    03:43:3c:2b:9f:75:49:31:b1:1b:ec:33:ab:d2:d2:
                    61:2d:cd:88:cd:50:27:07:30:14:78:1a:f3:15:1e:
                    a0:43:fd:1c:f9:be:ae:ce:0f:44:b6:0f:ff:c6:b8:
                    81:27:d0:27:51:ea:50:59:97:a5:50:43:a7:2b:39:
                    00:44:1e:43:78:c1:a7:6d:30:6d:65:0c:0f:0f:9c:
                    25:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:EF:D3:69:F3:BF:64:1F:BA:38:C7:84:EB:10:36:41:92:99:12:B2
            X509v3 Authority Key Identifier:
                keyid:F8:9E:0F:15:C1:E2:0E:19:1A:AF:17:28:8F:6E:30:FF:01:86:9A:6E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/4e_TafO_ZB-6OMeE6xA2QZKZErI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.68.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         90:08:ff:28:a8:94:d8:40:50:96:f8:05:6d:43:eb:d6:9b:54:
         2f:3a:61:64:15:3a:92:b5:54:70:b3:5e:5a:07:de:47:6b:61:
         68:38:60:6e:d1:08:f1:99:bb:3c:ad:3e:85:47:56:e7:96:01:
         6a:de:d1:02:d9:2f:74:88:1b:b4:f7:1e:81:ff:1b:a3:76:0c:
         da:ae:8d:2e:a9:77:7e:03:d8:a7:a3:08:7d:80:96:c8:3f:a5:
         39:9e:39:16:95:36:bc:5a:98:24:5a:23:b7:44:71:54:6b:b9:
         2f:e3:e2:76:ff:cb:ac:b7:77:71:5e:d4:df:7e:85:01:38:f8:
         69:7c:76:67:11:a2:1e:45:52:20:5f:36:e1:59:e6:22:bf:06:
         40:9c:9e:01:58:38:43:26:d9:3a:fa:03:d8:e8:04:a8:a6:0b:
         f7:fe:c8:aa:b7:65:52:9c:f2:8d:8e:89:01:c7:26:75:b8:14:
         34:1b:e6:18:fc:07:37:60:c9:be:b5:0b:31:56:9c:c5:a5:e7:
         28:eb:d4:bd:d7:c9:8f:10:77:0e:b8:7b:9b:8d:88:78:98:b5:
         41:a7:30:be:eb:0e:ad:9f:8e:99:c2:6c:ea:3e:4c:cc:0e:71:
         e2:6f:b7:a6:14:6c:98:5a:24:df:f7:da:ed:9b:00:6e:79:a3:
         de:ff:ae:7d
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBUDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhGODlF
MEYxNUMxRTIwRTE5MUFBRjE3Mjg4RjZFMzBGRjAxODY5QTZFMB4XDTI0MDYzMDAx
NDQyNloXDTI1MDYyNDEwNDY0NVowMzExMC8GA1UEAxMoRTFFRkQzNjlGM0JGNjQx
RkJBMzhDNzg0RUIxMDM2NDE5Mjk5MTJCMjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMTLaGdx/wtJ1KJvdrqyYpBSAHLYJxmEWMZ7DYZjAHLNCGtKOpGA
l3hvMV+MdZCujqEDsSBkj1tuzglgQXxfv7nJZsfgXSZqez9TrPXHSkzTfevM7L/G
t6ZOvRI9b4e2eWQrEvPk1IB3iCHbBEbj6Tdpj8EvBH4t5liuLpdb+AE2/TEp3xta
djUd34eDqYZJ4sEmry2V1XRMiNKxwBAQyprtkv4EIz5GxzuUJFoc4sT+sieiA0M8
K591STGxG+wzq9LSYS3NiM1QJwcwFHga8xUeoEP9HPm+rs4PRLYP/8a4gSfQJ1Hq
UFmXpVBDpys5AEQeQ3jBp20wbWUMDw+cJZcCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBTh79Np879kH7o4x4TrEDZBkpkSsjAfBgNVHSMEGDAWgBT4ng8VweIOGRqvFyiP
bjD/AYaabjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzA5Ly1KNFBGY0hpRGhrYXJ4Y29qMjR3X3dHR21tNC5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLy1KNFBGY0hpRGhrYXJ4Y29qMjR3X3dH
R21tNC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8zMDkvNGVfVGFmT19aQi02T01lRTZ4QTJRWktaRXJJLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEB5REgDANBgkqhkiG9w0BAQsFAAOCAQEAkAj/KKiU2EBQlvgFbUPr1ptULzph
ZBU6krVUcLNeWgfeR2thaDhgbtEI8Zm7PK0+hUdW55YBat7RAtkvdIgbtPcegf8b
o3YM2q6NLql3fgPYp6MIfYCWyD+lOZ45FpU2vFqYJFojt0RxVGu5L+Pidv/LrLd3
cV7U336FATj4aXx2ZxGiHkVSIF824VnmIr8GQJyeAVg4QybZOvoD2OgEqKYL9/7I
qrdlUpzyjY6JAccmdbgUNBvmGPwHN2DJvrULMVacxaXnKOvUvdfJjxB3Drh7m42I
eJi1QacwvusOrZ+OmcJs6j5MzA5x4m+3phRsmFok3/fa7ZsAbnmj3v+ufQ==
-----END CERTIFICATE-----
Generated at Fri Nov 22 15:23:58 2024 by rpki-client on console-fra.rpki-client.org