Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/LrcZhYtW6Vn-b-_3t4C2mwQk9Uk.roa
File:                     LrcZhYtW6Vn-b-_3t4C2mwQk9Uk.roa (raw, json)
Hash identifier:          srrGAI1iCqJNPawQXwTlS22oggultaCs5V8lFY68GRY=
Subject key identifier:   2E:B7:19:85:8B:56:E9:59:FE:6F:EF:F7:B7:80:B6:9B:04:24:F5:49
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       07EC
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/LrcZhYtW6Vn-b-_3t4C2mwQk9Uk.roa
Signing time:             Tue 30 Apr 2024 02:10:34 +0000
ROA not before:           Tue 30 Apr 2024 02:10:34 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        49.98.188.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2028 (0x7ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr 30 02:10:34 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=2EB719858B56E959FE6FEFF7B780B69B0424F549
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:fc:6f:e9:74:db:e9:83:ce:fa:fb:d6:c2:6d:
                    0a:04:17:55:ed:ca:ad:a4:25:ee:47:63:3f:35:6d:
                    f7:37:ae:11:0b:aa:ee:70:f3:8b:82:8a:44:47:36:
                    8d:88:17:67:9b:99:cc:3b:c8:6c:dd:c3:43:50:6c:
                    4f:6f:e7:5a:2d:65:9b:f1:73:26:01:29:c9:c4:d9:
                    2c:28:0d:c0:1b:12:98:0d:63:a2:03:30:c5:c2:0a:
                    70:e8:8d:b3:aa:f4:1b:40:ff:6b:9c:2b:58:7b:d7:
                    ce:d8:91:b5:ac:04:95:04:59:7d:b2:7c:c2:52:41:
                    4a:fd:43:55:4d:10:4a:bd:d2:e8:2e:e7:15:ad:3e:
                    2e:ea:83:df:b3:f6:51:4e:3e:c3:ef:05:6b:06:5f:
                    c6:da:2d:ca:78:c2:62:58:69:65:69:48:0e:4c:ee:
                    56:31:e1:e5:15:fc:ce:2e:69:fe:f0:d7:57:6e:d9:
                    3e:51:b3:76:e8:e0:19:38:05:a3:37:17:29:99:5d:
                    a1:fb:32:34:ab:57:25:69:22:6a:78:36:04:0b:2c:
                    11:f5:e0:77:0f:f8:b5:24:a3:c7:d4:0c:ab:44:2f:
                    4c:75:de:07:9b:97:f9:9e:6c:b5:c5:44:61:70:2c:
                    a9:97:98:ad:da:e8:09:10:19:35:75:2b:92:ef:b3:
                    61:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:B7:19:85:8B:56:E9:59:FE:6F:EF:F7:B7:80:B6:9B:04:24:F5:49
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/LrcZhYtW6Vn-b-_3t4C2mwQk9Uk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.98.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         cf:41:68:47:b0:68:b8:7c:57:31:d9:42:eb:56:4a:05:17:be:
         9c:42:fc:99:9f:16:7c:28:ac:d9:12:d9:79:85:49:83:47:e5:
         be:ba:03:cf:0c:d6:e0:83:fd:41:5f:24:cd:33:27:3f:51:b1:
         8b:25:93:cb:1f:27:3c:01:7d:6f:53:98:71:ca:15:4d:f7:65:
         67:03:aa:e8:b0:09:40:1f:2a:e5:f3:b3:75:22:34:38:68:57:
         60:bf:14:02:40:46:55:e4:3a:85:0c:41:f1:da:ba:fc:7d:e4:
         4c:55:d0:c6:6f:d5:11:3f:19:12:70:98:1c:08:03:a8:eb:bd:
         2c:c9:b7:ca:c9:f6:90:5b:67:d6:ba:01:ce:46:f0:72:70:d5:
         6e:16:3b:82:0a:87:50:d5:f2:08:40:d2:a9:42:2d:6c:fe:54:
         90:ef:36:fd:19:8a:38:e6:b9:57:23:47:df:9b:31:cb:d4:30:
         82:f9:77:51:44:8b:9f:d8:71:06:bf:4f:1e:b9:68:a2:d6:e1:
         04:6e:4f:d3:32:c5:52:35:1a:94:6f:8b:50:1c:40:69:cb:1b:
         9c:b5:48:93:ea:aa:fd:52:be:59:28:b6:43:dc:78:df:35:ac:
         98:94:a6:c4:45:b0:f1:b3:1e:3e:5b:4a:a7:b3:36:e0:5b:19:
         86:5a:7b:9f
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICB+wwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw
MjEwMzRaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDJFQjcxOTg1OEI1NkU5
NTlGRTZGRUZGN0I3ODBCNjlCMDQyNEY1NDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDj/G/pdNvpg876+9bCbQoEF1Xtyq2kJe5HYz81bfc3rhELqu5w
84uCikRHNo2IF2ebmcw7yGzdw0NQbE9v51otZZvxcyYBKcnE2SwoDcAbEpgNY6ID
MMXCCnDojbOq9BtA/2ucK1h7187YkbWsBJUEWX2yfMJSQUr9Q1VNEEq90ugu5xWt
Pi7qg9+z9lFOPsPvBWsGX8baLcp4wmJYaWVpSA5M7lYx4eUV/M4uaf7w11du2T5R
s3bo4Bk4BaM3FymZXaH7MjSrVyVpImp4NgQLLBH14HcP+LUko8fUDKtEL0x13geb
l/mebLXFRGFwLKmXmK3a6AkQGTV1K5Lvs2F7AgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQULrcZhYtW6Vn+b+/3t4C2mwQk9UkwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L0xyY1poWXRXNlZuLWItXzN0NEMybXdRazlVay5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAIxYrwwDQYJKoZIhvcNAQELBQADggEBAM9BaEewaLh8VzHZQutWSgUXvpxC
/JmfFnworNkS2XmFSYNH5b66A88M1uCD/UFfJM0zJz9RsYslk8sfJzwBfW9TmHHK
FU33ZWcDquiwCUAfKuXzs3UiNDhoV2C/FAJARlXkOoUMQfHauvx95ExV0MZv1RE/
GRJwmBwIA6jrvSzJt8rJ9pBbZ9a6Ac5G8HJw1W4WO4IKh1DV8ghA0qlCLWz+VJDv
Nv0ZijjmuVcjR9+bMcvUMIL5d1FEi5/YcQa/Tx65aKLW4QRuT9MyxVI1GpRvi1Ac
QGnLG5y1SJPqqv1SvlkotkPceN81rJiUpsRFsPGzHj5bSqezNuBbGYZae58=
-----END CERTIFICATE-----
Generated at Fri Nov 22 16:45:40 2024 by rpki-client on console-ams.rpki-client.org