Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/5Pdy1qxsHXo-Vs3TGPN47Lok-5M.roa
File:                     5Pdy1qxsHXo-Vs3TGPN47Lok-5M.roa (raw, json)
Hash identifier:          EOQNqjVNSqITIzZfAtLEgNBU5DE1jSI4j+Aw8Lxycq0=
Subject key identifier:   E4:F7:72:D6:AC:6C:1D:7A:3E:56:CD:D3:18:F3:78:EC:BA:24:FB:93
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0498
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/5Pdy1qxsHXo-Vs3TGPN47Lok-5M.roa
Signing time:             Thu 27 Jul 2023 16:46:08 +0000
ROA not before:           Thu 27 Jul 2023 16:46:08 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     9605
IP address blocks:        49.110.0.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 23 Jun 2024 11:53:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1176 (0x498)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jul 27 16:46:08 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=E4F772D6AC6C1D7A3E56CDD318F378ECBA24FB93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:5f:bf:2c:49:18:a1:32:5c:8e:5c:85:65:87:
                    e9:d4:ca:5a:00:12:f2:60:8a:b2:2f:0f:5e:52:7e:
                    7a:e7:68:a7:3a:31:af:00:f8:5d:14:fe:14:22:fe:
                    3d:30:5c:17:7d:0c:b0:9e:c9:23:38:a4:12:5e:ba:
                    8b:ec:2b:ff:f3:93:82:b6:b5:cf:3a:0a:05:9b:7a:
                    29:4d:80:7a:1c:57:0f:fa:24:9d:f0:de:50:f4:d0:
                    ad:a6:eb:7d:3f:63:52:06:75:c6:cf:ec:7a:f3:a3:
                    cb:b8:c5:99:20:07:5c:3d:76:f0:e8:f9:50:d0:9f:
                    ae:fb:89:61:be:cb:87:b5:c0:db:e6:eb:4b:d5:97:
                    74:1e:81:0b:7b:7e:76:5e:d0:15:69:a1:78:20:ca:
                    91:e7:6a:22:ca:2e:90:dd:8c:c8:24:c1:27:9f:c4:
                    53:1a:7e:fa:ff:b1:f3:68:d1:53:3c:43:16:88:bc:
                    a3:cd:1f:31:e9:e1:d0:45:a3:4b:1c:b3:4e:bb:4f:
                    41:5e:f0:9d:4a:4f:ff:55:19:fa:5f:ef:32:f2:95:
                    20:de:52:89:43:52:3c:bf:5d:e7:36:6d:e4:4b:74:
                    49:f1:30:11:78:29:ec:80:58:1b:6b:42:3e:6c:04:
                    ed:82:7b:ad:2b:2e:8c:26:bc:51:b2:74:09:d5:f1:
                    a8:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:F7:72:D6:AC:6C:1D:7A:3E:56:CD:D3:18:F3:78:EC:BA:24:FB:93
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/5Pdy1qxsHXo-Vs3TGPN47Lok-5M.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.110.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         62:b6:f6:e5:71:3c:51:6e:aa:e9:0e:15:29:6d:16:98:6e:1b:
         96:65:7f:bb:91:99:1c:04:a1:ac:c0:32:ca:db:8c:eb:29:46:
         98:0e:c8:57:b3:8c:60:da:43:08:01:44:a1:e3:43:10:9b:b2:
         83:cc:26:62:b6:24:a3:6b:f9:59:b6:26:b4:24:b7:49:bd:65:
         29:b8:4c:94:93:de:e2:b9:2c:b0:ac:03:7e:9a:1f:45:3e:30:
         06:89:6b:ae:1a:bf:b1:7e:49:c9:f4:44:a2:db:c8:83:7c:ff:
         1d:56:43:ab:c1:40:06:81:6c:01:38:a4:dc:76:6a:7b:c7:a2:
         94:52:4b:5b:74:09:c7:ef:95:d2:c8:90:fa:ce:7f:d1:a2:6c:
         ed:5a:1c:71:2b:24:ea:c0:c8:0f:50:e2:73:4d:4f:b2:90:14:
         07:79:73:fe:9a:6e:54:50:28:3a:ea:04:0a:6d:ff:3c:fc:44:
         cb:c0:5b:eb:a8:dc:5c:32:a4:02:56:59:e6:85:eb:d7:dd:c9:
         a1:cf:ce:40:81:c2:5e:1a:7a:7e:eb:63:49:ed:c5:72:80:c2:
         87:e5:3e:f5:7e:e3:65:77:7f:16:59:73:2d:66:16:b1:f7:1d:
         ea:99:41:3b:15:b1:b3:15:f2:a1:37:05:aa:92:4f:bc:44:5e:
         0b:9c:34:80
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICBJgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA3Mjcx
NjQ2MDhaFw0yNDA3MTQwMTMwMDNaMDMxMTAvBgNVBAMTKEU0Rjc3MkQ2QUM2QzFE
N0EzRTU2Q0REMzE4RjM3OEVDQkEyNEZCOTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDLX78sSRihMlyOXIVlh+nUyloAEvJgirIvD15SfnrnaKc6Ma8A
+F0U/hQi/j0wXBd9DLCeySM4pBJeuovsK//zk4K2tc86CgWbeilNgHocVw/6JJ3w
3lD00K2m630/Y1IGdcbP7Hrzo8u4xZkgB1w9dvDo+VDQn677iWG+y4e1wNvm60vV
l3QegQt7fnZe0BVpoXggypHnaiLKLpDdjMgkwSefxFMafvr/sfNo0VM8QxaIvKPN
HzHp4dBFo0scs067T0Fe8J1KT/9VGfpf7zLylSDeUolDUjy/Xec2beRLdEnxMBF4
KeyAWBtrQj5sBO2Ce60rLowmvFGydAnV8ag7AgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQU5Pdy1qxsHXo+Vs3TGPN47Lok+5MwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5LzVQZHkxcXhzSFhvLVZzM1RHUE40N0xvay01TS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAUxbgAwDQYJKoZIhvcNAQELBQADggEBAGK29uVxPFFuqukOFSltFphuG5Zl
f7uRmRwEoazAMsrbjOspRpgOyFezjGDaQwgBRKHjQxCbsoPMJmK2JKNr+Vm2JrQk
t0m9ZSm4TJST3uK5LLCsA36aH0U+MAaJa64av7F+Scn0RKLbyIN8/x1WQ6vBQAaB
bAE4pNx2anvHopRSS1t0CcfvldLIkPrOf9GibO1aHHErJOrAyA9Q4nNNT7KQFAd5
c/6ablRQKDrqBApt/zz8RMvAW+uo3FwypAJWWeaF69fdyaHPzkCBwl4aen7rY0nt
xXKAwoflPvV+42V3fxZZcy1mFrH3HeqZQTsVsbMV8qE3BaqST7xEXgucNIA=
-----END CERTIFICATE-----
Generated at Sun Jun 16 12:57:20 2024 by rpki-client on console-fra.rpki-client.org