Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/EgD1V4QLld9tSeX8A3VsWtzVafc.roa
File:                     EgD1V4QLld9tSeX8A3VsWtzVafc.roa (raw, json)
Hash identifier:          g9XhcsoWb1ZFV1aX/F6vFSwf/fyN8DlPgx5pGEUuVA8=
Subject key identifier:   12:00:F5:57:84:0B:95:DF:6D:49:E5:FC:03:75:6C:5A:DC:D5:69:F7
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       091C
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/EgD1V4QLld9tSeX8A3VsWtzVafc.roa
Signing time:             Tue 30 Apr 2024 02:28:49 +0000
ROA not before:           Tue 30 Apr 2024 02:28:49 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        49.98.86.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2332 (0x91c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr 30 02:28:49 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=1200F557840B95DF6D49E5FC03756C5ADCD569F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:13:5e:34:6a:cb:f7:56:5f:f8:02:1b:e3:a5:
                    3d:4b:7b:e7:8a:ea:c4:0f:41:aa:e2:c4:d8:9a:74:
                    f6:11:15:b6:96:75:6d:31:23:d9:7d:1b:11:a1:55:
                    2b:0f:c9:6b:b0:d6:02:e9:1d:a8:ad:fe:7b:2e:4b:
                    53:47:d4:32:a9:22:ca:5c:0f:62:1e:19:93:5d:d4:
                    07:3e:fa:46:65:c2:e1:38:7c:51:b5:ef:13:01:c7:
                    ee:ed:79:a8:4a:ce:0c:ee:e1:75:de:25:52:82:b3:
                    ab:5e:e4:ac:2e:31:c2:87:66:67:59:5f:e2:77:be:
                    d6:13:9a:54:d2:83:b2:6b:a9:cc:71:0b:5d:45:e2:
                    1b:79:06:21:b7:d6:0a:e6:0f:10:31:59:42:be:60:
                    87:04:ff:bf:ae:31:35:66:13:fe:f2:e6:ba:09:eb:
                    91:d7:52:76:9b:bc:eb:43:c0:e6:3b:ef:f5:2d:19:
                    51:37:c7:40:89:b7:ec:21:35:8f:72:7c:70:55:84:
                    6e:7a:cc:82:46:05:10:66:c6:47:e7:12:86:95:f8:
                    93:5d:66:92:c1:34:7a:75:89:aa:29:92:9b:5b:e0:
                    16:f5:4f:22:f7:d9:67:32:f1:a2:79:e6:50:26:cc:
                    27:0a:bb:6f:a6:d6:9c:b8:26:3c:57:6f:f0:97:d0:
                    c3:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:00:F5:57:84:0B:95:DF:6D:49:E5:FC:03:75:6C:5A:DC:D5:69:F7
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/EgD1V4QLld9tSeX8A3VsWtzVafc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.98.86.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b0:66:d9:1c:66:30:ab:bc:7b:c2:8d:25:3f:32:9b:09:95:e4:
         67:5b:bb:d8:f7:4a:d1:e5:49:64:88:e9:3d:76:b2:36:ae:20:
         61:ff:ff:15:5b:5f:9d:b0:ce:3f:87:60:af:26:8c:f8:39:23:
         d1:64:a8:ed:10:b8:16:ab:a6:2e:02:7e:02:8c:f2:23:8b:f6:
         e0:d9:4f:7b:da:2b:de:f5:4c:3d:32:43:84:18:75:27:b5:88:
         cb:ca:24:b7:7d:e4:35:52:35:07:01:6c:b7:07:92:fa:e7:a6:
         1c:a9:1d:86:d5:4f:32:ae:17:bd:ae:c2:b4:3e:eb:c3:f2:98:
         37:7e:8b:82:ac:94:aa:25:85:bb:1d:01:a7:2c:ee:4c:5a:4b:
         d2:ea:03:06:95:0c:30:bf:d4:95:8b:e6:c7:72:1e:c8:02:6f:
         c1:17:32:f7:11:b8:e6:fa:0b:65:3c:73:d0:a4:bd:95:4d:46:
         10:e6:fa:bb:02:71:40:3d:65:be:70:14:91:6b:41:9e:68:25:
         e8:7a:3d:d9:3d:24:82:24:63:c0:f5:01:e7:2e:3b:83:e1:c1:
         33:6f:84:c0:3b:ab:e7:1d:5d:f3:36:95:1b:23:50:a8:ae:25:
         7c:96:45:b8:59:c6:a6:81:a5:e2:f8:45:3d:ea:ba:9c:b8:d1:
         77:54:93:ec
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICCRwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw
MjI4NDlaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDEyMDBGNTU3ODQwQjk1
REY2RDQ5RTVGQzAzNzU2QzVBRENENTY5RjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDDE140asv3Vl/4AhvjpT1Le+eK6sQPQarixNiadPYRFbaWdW0x
I9l9GxGhVSsPyWuw1gLpHait/nsuS1NH1DKpIspcD2IeGZNd1Ac++kZlwuE4fFG1
7xMBx+7teahKzgzu4XXeJVKCs6te5KwuMcKHZmdZX+J3vtYTmlTSg7JrqcxxC11F
4ht5BiG31grmDxAxWUK+YIcE/7+uMTVmE/7y5roJ65HXUnabvOtDwOY77/UtGVE3
x0CJt+whNY9yfHBVhG56zIJGBRBmxkfnEoaV+JNdZpLBNHp1iaopkptb4Bb1TyL3
2Wcy8aJ55lAmzCcKu2+m1py4JjxXb/CX0MNjAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUEgD1V4QLld9tSeX8A3VsWtzVafcwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L0VnRDFWNFFMbGQ5dFNlWDhBM1ZzV3R6VmFmYy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAExYlYwDQYJKoZIhvcNAQELBQADggEBALBm2RxmMKu8e8KNJT8ymwmV5Gdb
u9j3StHlSWSI6T12sjauIGH//xVbX52wzj+HYK8mjPg5I9FkqO0QuBarpi4CfgKM
8iOL9uDZT3vaK971TD0yQ4QYdSe1iMvKJLd95DVSNQcBbLcHkvrnphypHYbVTzKu
F72uwrQ+68PymDd+i4KslKolhbsdAacs7kxaS9LqAwaVDDC/1JWL5sdyHsgCb8EX
MvcRuOb6C2U8c9CkvZVNRhDm+rsCcUA9Zb5wFJFrQZ5oJeh6Pdk9JIIkY8D1Aecu
O4PhwTNvhMA7q+cdXfM2lRsjUKiuJXyWRbhZxqaBpeL4RT3qupy40XdUk+w=
-----END CERTIFICATE-----
Generated at Sat Jun 1 13:38:46 2024 by rpki-client on console-fra.rpki-client.org