Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/R_yj0pxtITaH67IePje6J2RESx4.roa
File:                     R_yj0pxtITaH67IePje6J2RESx4.roa (raw, json)
Hash identifier:          hAAu0Mre+NCJL6HV6NbGv3ZIi5zorid6b6dTrDoaFek=
Subject key identifier:   47:FC:A3:D2:9C:6D:21:36:87:EB:B2:1E:3E:37:BA:27:64:44:4B:1E
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0475
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/R_yj0pxtITaH67IePje6J2RESx4.roa
Signing time:             Thu 27 Jul 2023 16:44:07 +0000
ROA not before:           Thu 27 Jul 2023 16:44:07 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     9605
IP address blocks:        49.110.124.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 23 Jun 2024 11:53:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1141 (0x475)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jul 27 16:44:07 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=47FCA3D29C6D213687EBB21E3E37BA2764444B1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:58:70:6e:91:5a:52:ab:3c:b8:4c:58:5c:20:
                    ca:d3:cf:80:dc:72:74:f0:93:cb:74:c1:3f:3e:3d:
                    6d:e0:67:a7:f4:2e:80:6e:74:9c:80:3e:00:f5:8a:
                    c2:58:ac:b4:70:d5:95:52:df:f6:81:03:8d:0c:98:
                    ef:7e:38:0c:e6:de:8b:e1:11:5d:00:ba:7c:36:29:
                    0d:61:d6:de:7f:08:0a:a5:16:42:11:be:a4:b6:be:
                    a8:40:d9:24:62:cd:1e:25:81:fe:1b:11:78:3e:1a:
                    7c:09:00:1a:3c:94:2f:88:9f:5d:ce:18:b4:93:0d:
                    f0:ea:dd:3e:23:bc:e9:66:4c:f7:1b:39:40:13:a1:
                    f9:8d:72:3f:04:76:2a:2c:7c:82:05:37:9f:18:5d:
                    3a:d5:11:3d:78:7f:1b:43:7b:6e:9e:a1:54:f5:7c:
                    8f:d0:a0:fa:bf:01:33:e2:d8:41:98:fd:9a:05:59:
                    81:53:c2:78:65:16:8c:50:7f:08:f4:b5:92:a7:45:
                    ff:85:76:ea:40:c6:68:74:b2:7a:39:9f:5f:a9:db:
                    71:d7:a8:12:8d:fa:c8:f2:a2:87:7b:94:05:dc:e2:
                    92:90:6c:64:56:da:49:b0:fc:e7:8f:8f:78:f2:e9:
                    2b:c5:d6:bb:aa:f0:29:76:19:3d:e5:d7:bd:3a:f8:
                    cf:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:FC:A3:D2:9C:6D:21:36:87:EB:B2:1E:3E:37:BA:27:64:44:4B:1E
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/R_yj0pxtITaH67IePje6J2RESx4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.110.124.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c3:1a:2a:26:45:f5:00:19:b4:8b:25:9d:eb:a2:02:d8:5e:69:
         26:f5:cb:2f:da:c9:89:5e:09:f6:e3:ff:e8:a3:08:5f:13:b4:
         46:57:d0:0f:da:1f:e8:fc:32:3b:e6:cd:5a:20:e0:eb:3a:e7:
         86:fb:4b:40:18:e9:31:41:7c:56:e4:e4:22:db:bd:58:db:60:
         b7:66:99:7f:37:5c:e9:58:1e:bd:ab:9c:18:8f:63:5d:07:21:
         a0:84:b6:32:2b:20:73:24:dd:f6:07:3d:61:00:46:9f:a7:dd:
         43:6b:0b:06:76:9b:b2:e7:7f:0d:c1:a4:75:3e:e2:fd:7f:15:
         22:bb:33:06:f6:2f:ff:eb:49:88:0d:5e:5a:5c:06:3f:3e:43:
         38:88:36:40:1c:cf:2d:57:c6:2e:b5:20:f2:80:29:c7:27:60:
         38:15:db:ad:6b:59:64:38:34:01:f2:16:39:9c:d6:49:b2:89:
         13:84:51:69:d0:08:c1:29:93:0b:4b:96:aa:8f:01:bd:98:c7:
         43:a0:13:43:e2:65:d8:0a:a0:ef:b6:6a:dc:2f:49:fd:db:fa:
         2f:25:91:6d:8c:af:0d:7f:c0:b3:52:c6:7a:3b:ec:9f:e9:7c:
         04:94:c9:ec:5d:a9:1d:8b:64:fe:42:e1:a5:cc:b9:61:06:73:
         66:d7:73:4b
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICBHUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA3Mjcx
NjQ0MDdaFw0yNDA3MTQwMTMwMDNaMDMxMTAvBgNVBAMTKDQ3RkNBM0QyOUM2RDIx
MzY4N0VCQjIxRTNFMzdCQTI3NjQ0NDRCMUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCyWHBukVpSqzy4TFhcIMrTz4DccnTwk8t0wT8+PW3gZ6f0LoBu
dJyAPgD1isJYrLRw1ZVS3/aBA40MmO9+OAzm3ovhEV0Aunw2KQ1h1t5/CAqlFkIR
vqS2vqhA2SRizR4lgf4bEXg+GnwJABo8lC+In13OGLSTDfDq3T4jvOlmTPcbOUAT
ofmNcj8EdiosfIIFN58YXTrVET14fxtDe26eoVT1fI/QoPq/ATPi2EGY/ZoFWYFT
wnhlFoxQfwj0tZKnRf+FdupAxmh0sno5n1+p23HXqBKN+sjyood7lAXc4pKQbGRW
2kmw/OePj3jy6SvF1ruq8Cl2GT3l1706+M8FAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUR/yj0pxtITaH67IePje6J2RESx4wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L1JfeWowcHh0SVRhSDY3SWVQamU2SjJSRVN4NC5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAExbnwwDQYJKoZIhvcNAQELBQADggEBAMMaKiZF9QAZtIslneuiAtheaSb1
yy/ayYleCfbj/+ijCF8TtEZX0A/aH+j8MjvmzVog4Os654b7S0AY6TFBfFbk5CLb
vVjbYLdmmX83XOlYHr2rnBiPY10HIaCEtjIrIHMk3fYHPWEARp+n3UNrCwZ2m7Ln
fw3BpHU+4v1/FSK7Mwb2L//rSYgNXlpcBj8+QziINkAczy1Xxi61IPKAKccnYDgV
261rWWQ4NAHyFjmc1kmyiROEUWnQCMEpkwtLlqqPAb2Yx0OgE0PiZdgKoO+2atwv
Sf3b+i8lkW2Mrw1/wLNSxno77J/pfASUyexdqR2LZP5C4aXMuWEGc2bXc0s=
-----END CERTIFICATE-----
Generated at Sun Jun 16 12:57:21 2024 by rpki-client on console-fra.rpki-client.org