Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Iz84A7ccCRd354CyGglkQssmapw.roa
File:                     Iz84A7ccCRd354CyGglkQssmapw.roa (raw, json)
Hash identifier:          rmNN01p9hOt+WHOu9Mxd/x+xYBPF6opUrxIS5VwMGPY=
Subject key identifier:   23:3F:38:03:B7:1C:09:17:77:E7:80:B2:1A:09:64:42:CB:26:6A:9C
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       052B
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Iz84A7ccCRd354CyGglkQssmapw.roa
Signing time:             Thu 27 Jul 2023 16:54:12 +0000
ROA not before:           Thu 27 Jul 2023 16:54:12 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     9605
IP address blocks:        49.108.160.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 23 Jun 2024 14:09:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1323 (0x52b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jul 27 16:54:12 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=233F3803B71C091777E780B21A096442CB266A9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:de:94:01:9e:a2:e8:e9:12:a8:3d:f4:80:7f:
                    86:f5:6f:c7:cb:96:c9:04:6a:06:6f:a1:24:ac:8a:
                    e3:09:8c:f2:f8:5f:72:86:b6:fc:eb:89:01:68:34:
                    a6:6a:61:a5:30:6d:20:13:e1:31:dc:1b:da:8c:1b:
                    f3:59:8a:5c:33:e5:46:7a:18:6f:c8:35:d9:fb:ee:
                    1f:2b:4f:22:45:ae:e6:2d:af:75:4c:04:de:06:8d:
                    a5:b8:bc:00:35:0a:8d:09:ab:f4:63:4a:c7:7c:bf:
                    1d:36:0e:f7:67:18:01:33:fa:ab:df:31:b5:af:a5:
                    d3:da:1b:52:0a:06:d0:2b:69:bf:79:19:59:7b:af:
                    61:40:cc:9c:a2:8b:d3:0a:af:d4:87:13:24:57:81:
                    16:ec:32:ec:12:ea:e8:ec:1a:88:56:92:43:88:35:
                    a3:8f:67:43:97:d3:ff:f5:32:61:83:05:a5:57:1a:
                    64:54:ce:54:ca:42:f7:86:0b:09:64:f5:bc:ff:62:
                    84:16:50:9c:4a:5f:30:5f:56:9c:4d:16:8d:44:98:
                    e2:79:6a:37:d2:b1:a5:24:59:81:40:d3:de:4e:0c:
                    04:d2:85:47:d6:2c:12:fe:fb:a4:93:be:bb:d2:e2:
                    df:6a:6c:f0:72:04:d3:bc:69:27:e7:bd:d9:b6:47:
                    56:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:3F:38:03:B7:1C:09:17:77:E7:80:B2:1A:09:64:42:CB:26:6A:9C
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Iz84A7ccCRd354CyGglkQssmapw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.108.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         63:72:c0:5f:79:d2:c9:16:7e:da:d5:a4:38:c2:6d:75:58:83:
         88:7c:3b:15:51:35:ca:75:79:d0:01:71:33:7c:c5:2f:e5:0f:
         a3:79:83:bc:7e:a0:7c:07:52:f2:4b:9d:74:9b:47:55:5a:0b:
         83:9b:e5:0a:63:32:fe:0e:5c:d6:d9:07:b5:05:f0:f0:a5:bd:
         0b:00:6a:b7:ea:5c:35:dd:be:51:49:f9:fb:6f:6e:34:75:c1:
         23:2d:9e:4b:73:12:77:d9:6a:fb:16:cf:35:cb:3d:6b:e1:be:
         06:ab:a7:d1:bb:b0:b5:0a:79:83:a9:a0:75:6b:39:f6:41:e9:
         ec:b5:bf:34:3a:65:64:0b:7d:4f:24:81:fe:84:c0:dd:cf:9b:
         62:78:4a:fe:ea:bd:f3:0a:d1:8c:ce:71:8f:91:a9:12:29:f8:
         3f:84:24:1e:74:b8:e2:b7:d5:60:88:99:25:a3:6b:b0:58:af:
         79:fd:69:ff:09:41:40:39:43:37:27:ed:aa:02:e7:39:40:25:
         3b:aa:d3:8c:51:7a:e7:95:62:b0:23:82:95:6c:8c:73:ef:8a:
         b3:09:8e:d3:99:8c:e0:0b:46:fd:b1:27:55:b8:8d:e6:50:60:
         aa:44:c4:06:ed:31:2a:de:13:34:a0:ba:6e:0e:2e:98:ec:b4:
         d3:39:00:3f
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICBSswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA3Mjcx
NjU0MTJaFw0yNDA3MTQwMTMwMDNaMDMxMTAvBgNVBAMTKDIzM0YzODAzQjcxQzA5
MTc3N0U3ODBCMjFBMDk2NDQyQ0IyNjZBOUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCc3pQBnqLo6RKoPfSAf4b1b8fLlskEagZvoSSsiuMJjPL4X3KG
tvzriQFoNKZqYaUwbSAT4THcG9qMG/NZilwz5UZ6GG/INdn77h8rTyJFruYtr3VM
BN4GjaW4vAA1Co0Jq/RjSsd8vx02DvdnGAEz+qvfMbWvpdPaG1IKBtArab95GVl7
r2FAzJyii9MKr9SHEyRXgRbsMuwS6ujsGohWkkOINaOPZ0OX0//1MmGDBaVXGmRU
zlTKQveGCwlk9bz/YoQWUJxKXzBfVpxNFo1EmOJ5ajfSsaUkWYFA095ODATShUfW
LBL++6STvrvS4t9qbPByBNO8aSfnvdm2R1ZFAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUIz84A7ccCRd354CyGglkQssmapwwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L0l6ODRBN2NjQ1JkMzU0Q3lHZ2xrUXNzbWFwdy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAUxbKAwDQYJKoZIhvcNAQELBQADggEBAGNywF950skWftrVpDjCbXVYg4h8
OxVRNcp1edABcTN8xS/lD6N5g7x+oHwHUvJLnXSbR1VaC4Ob5QpjMv4OXNbZB7UF
8PClvQsAarfqXDXdvlFJ+ftvbjR1wSMtnktzEnfZavsWzzXLPWvhvgarp9G7sLUK
eYOpoHVrOfZB6ey1vzQ6ZWQLfU8kgf6EwN3Pm2J4Sv7qvfMK0YzOcY+RqRIp+D+E
JB50uOK31WCImSWja7BYr3n9af8JQUA5Qzcn7aoC5zlAJTuq04xReueVYrAjgpVs
jHPvirMJjtOZjOALRv2xJ1W4jeZQYKpExAbtMSreEzSgum4OLpjstNM5AD8=
-----END CERTIFICATE-----
Generated at Mon Jun 17 11:39:11 2024 by rpki-client on console-fra.rpki-client.org