Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Ic30brbFIxFtPe1IwI24njtVU5g.roa
File:                     Ic30brbFIxFtPe1IwI24njtVU5g.roa (raw, json)
Hash identifier:          +o8pl+K4bO4xsunG0wLSBMloMh3YUbZnsTn6YW2841A=
Subject key identifier:   21:CD:F4:6E:B6:C5:23:11:6D:3D:ED:48:C0:8D:B8:9E:3B:55:53:98
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       078B
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Ic30brbFIxFtPe1IwI24njtVU5g.roa
Signing time:             Tue 30 Apr 2024 02:04:45 +0000
ROA not before:           Tue 30 Apr 2024 02:04:45 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        49.110.128.0/17 maxlen: 17

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1931 (0x78b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr 30 02:04:45 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=21CDF46EB6C523116D3DED48C08DB89E3B555398
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:59:20:6b:e7:f1:c6:b4:a0:b4:ae:25:95:df:
                    a8:a0:23:44:2f:15:48:55:c1:a8:73:73:bc:b2:48:
                    46:1d:6b:91:e1:6a:d3:89:b8:31:bd:18:31:39:78:
                    af:8c:1a:20:d8:6c:c8:c2:33:2b:cc:50:c7:1a:73:
                    cc:fa:c2:3b:d7:2b:6c:ed:87:d4:ef:2b:b7:10:53:
                    33:85:f1:03:af:7f:92:d2:bd:83:f2:54:57:18:21:
                    11:69:92:f0:3d:e3:55:45:d9:ec:9d:3c:a8:37:ae:
                    65:8f:56:9b:1f:c9:b1:50:47:4a:5b:1d:32:9a:bc:
                    a6:4e:d4:cd:fb:cb:29:6c:e9:c3:bc:f1:3f:54:79:
                    31:c2:fa:31:e2:ae:e3:ed:08:ce:46:08:ca:25:be:
                    39:3b:4b:9e:26:f6:c7:99:30:67:6f:e1:08:66:c1:
                    b2:53:ce:05:34:14:bb:91:9e:3d:b0:57:86:f3:94:
                    43:50:c0:2a:64:ec:12:ef:91:69:97:1f:9a:fe:7f:
                    b1:52:e0:0e:3c:2d:e7:ff:2c:a9:8e:59:74:c8:d0:
                    b8:eb:12:64:62:36:48:ff:9d:46:4f:e8:39:f4:7b:
                    51:6a:5e:ad:4c:ec:3f:d0:df:bf:cb:12:f5:7f:23:
                    86:92:08:1f:2e:de:8c:62:52:24:a2:f5:37:24:ae:
                    e4:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:CD:F4:6E:B6:C5:23:11:6D:3D:ED:48:C0:8D:B8:9E:3B:55:53:98
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Ic30brbFIxFtPe1IwI24njtVU5g.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.110.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         09:2c:d7:c8:a4:fd:74:81:e9:9f:e8:c3:5b:64:5c:75:4d:15:
         4b:a3:e0:08:ac:f9:32:3c:13:7b:b9:b2:3d:bf:51:d7:b8:9a:
         4f:8e:7c:d1:2c:a1:7c:29:19:0c:2b:fe:d4:1a:e7:27:79:99:
         1b:17:1b:91:14:95:8a:71:28:61:6e:ae:51:c7:57:96:10:7c:
         b5:78:ab:d1:75:81:1f:b8:8d:52:71:f5:07:10:1d:6a:4f:d2:
         e6:68:ba:a1:8d:ff:90:60:be:80:55:51:18:34:18:fc:76:96:
         34:b0:a0:b9:b5:3d:76:48:13:d5:77:24:69:39:1c:e1:5c:8d:
         7b:6f:72:cf:ed:76:1d:7a:53:51:44:a5:19:a4:5e:44:d3:6d:
         3b:fb:2a:ce:4e:c7:1d:fb:dc:e1:77:81:12:d8:7b:e8:b7:4d:
         45:eb:1a:45:99:09:22:87:f1:b1:31:80:1e:ec:98:06:be:cc:
         4f:36:6b:9a:28:f3:27:42:7c:35:4b:5e:fd:bc:08:0d:97:68:
         b0:ac:93:e5:02:10:fc:8e:fb:a6:5f:15:33:3a:88:ba:7e:65:
         ae:16:cb:19:d3:6a:22:71:df:32:38:4f:52:4a:81:24:30:c6:
         88:29:3d:1c:4a:ef:9c:3e:2f:8e:32:2c:2a:55:77:c7:e4:4c:
         a6:7a:9c:ee
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICB4swDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw
MjA0NDVaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDIxQ0RGNDZFQjZDNTIz
MTE2RDNERUQ0OEMwOERCODlFM0I1NTUzOTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDdWSBr5/HGtKC0riWV36igI0QvFUhVwahzc7yySEYda5HhatOJ
uDG9GDE5eK+MGiDYbMjCMyvMUMcac8z6wjvXK2zth9TvK7cQUzOF8QOvf5LSvYPy
VFcYIRFpkvA941VF2eydPKg3rmWPVpsfybFQR0pbHTKavKZO1M37yyls6cO88T9U
eTHC+jHiruPtCM5GCMolvjk7S54m9seZMGdv4QhmwbJTzgU0FLuRnj2wV4bzlENQ
wCpk7BLvkWmXH5r+f7FS4A48Lef/LKmOWXTI0LjrEmRiNkj/nUZP6Dn0e1FqXq1M
7D/Q37/LEvV/I4aSCB8u3oxiUiSi9TckruSdAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUIc30brbFIxFtPe1IwI24njtVU5gwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L0ljMzBicmJGSXhGdFBlMUl3STI0bmp0VlU1Zy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAcxboAwDQYJKoZIhvcNAQELBQADggEBAAks18ik/XSB6Z/ow1tkXHVNFUuj
4Ais+TI8E3u5sj2/Ude4mk+OfNEsoXwpGQwr/tQa5yd5mRsXG5EUlYpxKGFurlHH
V5YQfLV4q9F1gR+4jVJx9QcQHWpP0uZouqGN/5BgvoBVURg0GPx2ljSwoLm1PXZI
E9V3JGk5HOFcjXtvcs/tdh16U1FEpRmkXkTTbTv7Ks5Oxx373OF3gRLYe+i3TUXr
GkWZCSKH8bExgB7smAa+zE82a5oo8ydCfDVLXv28CA2XaLCsk+UCEPyO+6ZfFTM6
iLp+Za4WyxnTaiJx3zI4T1JKgSQwxogpPRxK75w+L44yLCpVd8fkTKZ6nO4=
-----END CERTIFICATE-----
Generated at Sat Jun 1 15:54:30 2024 by rpki-client on console-ams.rpki-client.org