Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/E_ziaHBUcPQCfTwzDEeSiwkHNxg.roa
File:                     E_ziaHBUcPQCfTwzDEeSiwkHNxg.roa (raw, json)
Hash identifier:          WZ5kQYTVZzRWs7sfX/hth13+swfytHBMRGJvvb7N+fY=
Subject key identifier:   13:FC:E2:68:70:54:70:F4:02:7D:3C:33:0C:47:92:8B:09:07:37:18
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       05F0
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/E_ziaHBUcPQCfTwzDEeSiwkHNxg.roa
Signing time:             Thu 29 Feb 2024 01:35:40 +0000
ROA not before:           Thu 29 Feb 2024 01:35:40 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     9605
IP address blocks:        49.97.6.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 23 Jun 2024 11:53:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1520 (0x5f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Feb 29 01:35:40 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=13FCE268705470F4027D3C330C47928B09073718
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:41:a3:62:22:f9:f6:36:33:d9:45:24:21:80:
                    04:ae:d0:d0:4a:4a:83:10:d8:96:7b:a6:9a:4e:33:
                    17:48:31:fa:c4:56:88:f4:d2:0f:5f:4c:24:ae:59:
                    26:57:3a:a1:40:6d:df:d2:d6:10:06:72:ef:bf:5e:
                    a5:2c:dd:ab:b4:3a:32:4f:ac:34:71:e5:d6:76:6f:
                    12:bd:ac:2b:4d:92:ed:bf:36:c5:74:05:a9:e4:1a:
                    77:2b:81:5a:fa:a6:db:60:13:a5:15:9f:19:39:61:
                    b5:00:ce:f7:28:9b:45:38:18:fb:67:40:e5:19:b5:
                    1f:5a:be:70:5f:97:21:9a:be:69:99:f8:66:61:fe:
                    9c:3e:e1:ce:1f:2b:74:48:7e:7c:14:c8:de:1c:52:
                    a7:1b:43:8e:4b:42:ae:1a:5f:79:cf:b9:66:66:12:
                    27:80:f0:64:7f:76:85:89:cf:0f:61:22:26:13:ab:
                    59:e5:8c:c9:fb:89:29:47:86:54:61:16:24:98:bb:
                    17:b1:3b:fc:34:60:7a:0a:00:58:7b:c1:43:6c:3d:
                    71:eb:c2:52:3b:03:4e:37:05:38:d9:b7:51:72:b4:
                    62:1e:29:9c:3b:40:81:92:da:23:76:85:c2:59:7f:
                    1f:e9:1d:95:82:53:ee:09:be:7c:6c:15:79:c8:20:
                    80:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:FC:E2:68:70:54:70:F4:02:7D:3C:33:0C:47:92:8B:09:07:37:18
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/E_ziaHBUcPQCfTwzDEeSiwkHNxg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.97.6.0/23

    Signature Algorithm: sha256WithRSAEncryption
         e4:50:b5:59:b6:c4:ee:f2:a8:5f:71:7b:be:03:95:cc:59:25:
         d7:ac:f9:bf:3b:12:0f:dc:5f:4b:bb:fa:ba:ce:bf:66:b4:63:
         f8:ea:fe:f2:70:95:ee:1d:b8:26:b3:52:8c:6e:6c:87:cd:d6:
         fd:78:03:14:b3:6b:f1:68:e8:8a:40:c7:f7:e9:f5:ca:d9:21:
         97:92:36:4b:a2:27:1f:a3:e3:49:e1:14:76:d5:a4:50:a4:48:
         47:84:40:f5:63:4e:99:39:00:9c:a3:d7:30:94:93:7d:c7:51:
         85:3d:1d:70:9d:d8:80:30:86:6a:7b:bd:7c:d5:77:11:68:b8:
         d9:fe:3a:ff:21:d9:20:e5:e8:30:c6:35:84:17:d3:f3:f7:51:
         7f:fe:cf:88:63:cd:ba:2e:6b:3c:72:80:18:0b:32:5c:d9:ed:
         ce:2b:b4:42:54:69:26:9b:c2:f5:7a:81:77:7f:b3:0d:01:52:
         62:05:17:3d:fe:7a:22:c0:ca:d4:85:1d:69:0a:51:19:00:f3:
         b0:d7:59:c1:2f:7e:11:47:73:bc:18:96:c0:00:67:52:f7:56:
         9e:98:f8:c3:1f:7d:a3:02:f5:19:d5:f8:2b:fd:14:6a:0a:0b:
         e6:ee:32:b9:45:ba:a5:6e:a4:8c:3f:97:b3:58:de:65:92:4e:
         5c:da:7f:c4
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICBfAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDAyMjkw
MTM1NDBaFw0yNTAyMTQwMTMwMDNaMDMxMTAvBgNVBAMTKDEzRkNFMjY4NzA1NDcw
RjQwMjdEM0MzMzBDNDc5MjhCMDkwNzM3MTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQChQaNiIvn2NjPZRSQhgASu0NBKSoMQ2JZ7pppOMxdIMfrEVoj0
0g9fTCSuWSZXOqFAbd/S1hAGcu+/XqUs3au0OjJPrDRx5dZ2bxK9rCtNku2/NsV0
BankGncrgVr6pttgE6UVnxk5YbUAzvcom0U4GPtnQOUZtR9avnBflyGavmmZ+GZh
/pw+4c4fK3RIfnwUyN4cUqcbQ45LQq4aX3nPuWZmEieA8GR/doWJzw9hIiYTq1nl
jMn7iSlHhlRhFiSYuxexO/w0YHoKAFh7wUNsPXHrwlI7A043BTjZt1FytGIeKZw7
QIGS2iN2hcJZfx/pHZWCU+4JvnxsFXnIIIABAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUE/ziaHBUcPQCfTwzDEeSiwkHNxgwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L0VfemlhSEJVY1BRQ2ZUd3pERWVTaXdrSE54Zy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAExYQYwDQYJKoZIhvcNAQELBQADggEBAORQtVm2xO7yqF9xe74DlcxZJdes
+b87Eg/cX0u7+rrOv2a0Y/jq/vJwle4duCazUoxubIfN1v14AxSza/Fo6IpAx/fp
9crZIZeSNkuiJx+j40nhFHbVpFCkSEeEQPVjTpk5AJyj1zCUk33HUYU9HXCd2IAw
hmp7vXzVdxFouNn+Ov8h2SDl6DDGNYQX0/P3UX/+z4hjzbouazxygBgLMlzZ7c4r
tEJUaSabwvV6gXd/sw0BUmIFFz3+eiLAytSFHWkKURkA87DXWcEvfhFHc7wYlsAA
Z1L3Vp6Y+MMffaMC9RnV+Cv9FGoKC+buMrlFuqVupIw/l7NY3mWSTlzaf8Q=
-----END CERTIFICATE-----
Generated at Sun Jun 16 12:57:21 2024 by rpki-client on console-fra.rpki-client.org