Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/D2bN-tcL2OAq5qovgwUt-W5V6bg.roa
File:                     D2bN-tcL2OAq5qovgwUt-W5V6bg.roa (raw, json)
Hash identifier:          egCU0PP2P8L80hgMC95E/rWBOFF7orpCaJ1nhMcsJsI=
Subject key identifier:   0F:66:CD:FA:D7:0B:D8:E0:2A:E6:AA:2F:83:05:2D:F9:6E:55:E9:B8
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       074C
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/D2bN-tcL2OAq5qovgwUt-W5V6bg.roa
Signing time:             Tue 30 Apr 2024 01:58:54 +0000
ROA not before:           Tue 30 Apr 2024 01:58:54 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        49.106.188.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1868 (0x74c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr 30 01:58:54 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=0F66CDFAD70BD8E02AE6AA2F83052DF96E55E9B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:7f:9b:cc:b2:2d:65:79:4c:65:ca:bb:db:4b:
                    13:42:6c:23:ee:ed:06:d9:bd:c6:00:58:6a:89:4e:
                    a4:7f:d5:b7:36:e3:ed:72:84:5c:bc:3a:9e:fd:a3:
                    45:f6:ca:b3:74:82:4d:dc:10:57:11:06:fb:ac:9b:
                    71:88:5d:70:55:f5:dc:4a:a2:74:12:14:18:a3:2a:
                    1c:21:ef:e1:c8:bc:c9:40:e2:20:fc:3e:a2:e6:7c:
                    71:31:20:50:75:71:98:4e:8f:68:e2:e9:6f:25:2b:
                    0b:b5:8d:c0:5c:79:17:14:0a:1c:12:22:3c:38:41:
                    40:b4:b7:a6:92:55:a8:74:9f:db:83:40:ab:07:ff:
                    72:ea:be:a3:41:d5:77:18:3c:b8:91:b1:f5:ed:9c:
                    bf:27:e4:45:8d:bc:da:54:13:65:e6:7a:10:a8:4b:
                    b6:46:5c:91:b5:c0:82:d8:6c:1f:a2:c1:de:8f:50:
                    bc:49:47:2c:8d:6d:dd:9d:6a:01:df:f7:3c:f0:e8:
                    cd:08:21:36:be:85:e5:42:c3:1c:64:93:1f:dd:41:
                    66:1d:f6:be:ab:1b:73:74:a4:a7:8c:5c:9e:5f:e0:
                    d9:73:74:85:ff:cd:77:31:70:04:80:3e:d8:1b:8c:
                    fc:8e:1d:a8:e0:8f:cc:f6:2e:37:83:6b:20:1b:12:
                    93:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:66:CD:FA:D7:0B:D8:E0:2A:E6:AA:2F:83:05:2D:F9:6E:55:E9:B8
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/D2bN-tcL2OAq5qovgwUt-W5V6bg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.106.188.0/23

    Signature Algorithm: sha256WithRSAEncryption
         15:1c:44:56:6c:2c:eb:bf:04:37:a6:d6:48:9e:58:80:03:5a:
         7e:d5:ab:86:a3:27:4c:26:b2:39:16:a3:f0:58:a0:9f:70:24:
         61:81:e2:43:f9:39:94:1a:25:2e:e0:4b:46:8b:1e:94:7e:56:
         45:51:ee:21:1b:a9:0a:81:26:40:24:20:8b:5c:d9:5d:a8:77:
         31:8d:33:7b:9a:8c:50:08:30:29:47:68:63:0f:5c:fd:aa:07:
         c9:f2:e0:b9:34:b5:3e:9e:5e:bb:7a:49:97:9a:d8:5a:05:40:
         9a:92:54:ad:70:a7:35:c5:02:27:7f:4f:b4:54:55:c3:35:6e:
         20:cb:32:7c:60:7b:aa:6b:23:29:d4:76:12:b4:b5:08:0f:06:
         eb:cf:e3:6f:83:48:da:08:77:7d:b0:04:57:67:4c:b1:d6:ea:
         d6:0d:c2:cf:4c:1e:09:2a:fc:f9:61:37:bf:51:9a:91:96:4a:
         4f:01:72:c0:95:46:f2:70:bb:60:17:e6:0c:21:c5:f4:67:b3:
         02:a4:1b:af:e8:25:c3:55:cc:3a:07:f9:e6:4b:b9:b8:be:93:
         d2:06:17:13:92:b4:e6:f8:7b:a8:bb:27:95:61:7d:df:6b:79:
         bd:00:13:dd:26:c3:ea:17:4e:94:dc:86:5d:47:ce:50:65:fb:
         40:86:dc:18
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICB0wwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw
MTU4NTRaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDBGNjZDREZBRDcwQkQ4
RTAyQUU2QUEyRjgzMDUyREY5NkU1NUU5QjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDOf5vMsi1leUxlyrvbSxNCbCPu7QbZvcYAWGqJTqR/1bc24+1y
hFy8Op79o0X2yrN0gk3cEFcRBvusm3GIXXBV9dxKonQSFBijKhwh7+HIvMlA4iD8
PqLmfHExIFB1cZhOj2ji6W8lKwu1jcBceRcUChwSIjw4QUC0t6aSVah0n9uDQKsH
/3LqvqNB1XcYPLiRsfXtnL8n5EWNvNpUE2XmehCoS7ZGXJG1wILYbB+iwd6PULxJ
RyyNbd2dagHf9zzw6M0IITa+heVCwxxkkx/dQWYd9r6rG3N0pKeMXJ5f4NlzdIX/
zXcxcASAPtgbjPyOHajgj8z2LjeDayAbEpOXAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUD2bN+tcL2OAq5qovgwUt+W5V6bgwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L0QyYk4tdGNMMk9BcTVxb3Znd1V0LVc1VjZiZy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAExarwwDQYJKoZIhvcNAQELBQADggEBABUcRFZsLOu/BDem1kieWIADWn7V
q4ajJ0wmsjkWo/BYoJ9wJGGB4kP5OZQaJS7gS0aLHpR+VkVR7iEbqQqBJkAkIItc
2V2odzGNM3uajFAIMClHaGMPXP2qB8ny4Lk0tT6eXrt6SZea2FoFQJqSVK1wpzXF
Aid/T7RUVcM1biDLMnxge6prIynUdhK0tQgPBuvP42+DSNoId32wBFdnTLHW6tYN
ws9MHgkq/PlhN79RmpGWSk8BcsCVRvJwu2AX5gwhxfRnswKkG6/oJcNVzDoH+eZL
ubi+k9IGFxOStOb4e6i7J5Vhfd9reb0AE90mw+oXTpTchl1HzlBl+0CG3Bg=
-----END CERTIFICATE-----
Generated at Sat Jun 1 13:38:46 2024 by rpki-client on console-fra.rpki-client.org