Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/UIWmyFQ_2-B7H6CXjB4y7M4HkhA.roa
File:                     UIWmyFQ_2-B7H6CXjB4y7M4HkhA.roa (raw, json)
Hash identifier:          O/c9WFlpw/1a8SQrsI7YQrUXTYiXdcMsMBHXWSj8Ko0=
Subject key identifier:   50:85:A6:C8:54:3F:DB:E0:7B:1F:A0:97:8C:1E:32:EC:CE:07:92:10
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       02EC
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/UIWmyFQ_2-B7H6CXjB4y7M4HkhA.roa
Signing time:             Thu 01 Jun 2023 16:04:35 +0000
ROA not before:           Thu 01 Jun 2023 16:04:35 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.98.124.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 May 2024 13:36:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 748 (0x2ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun  1 16:04:35 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=5085A6C8543FDBE07B1FA0978C1E32ECCE079210
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e5:51:5b:20:17:75:74:11:dd:b0:60:2a:a5:
                    09:aa:9e:ac:02:79:12:23:34:ee:74:6d:c9:d6:84:
                    c3:0a:50:ac:ce:01:28:fb:15:e9:47:23:c3:75:a5:
                    5f:02:6b:1e:dd:11:13:03:a3:39:c2:22:e5:df:77:
                    09:82:cc:bc:cf:9c:38:75:c2:3c:1f:96:48:08:92:
                    4a:9d:e9:43:12:e1:5a:65:a7:65:ea:27:ba:01:fb:
                    9e:6a:bb:ba:bf:85:60:cc:2c:54:fa:f8:c6:54:4c:
                    29:44:94:ec:3f:5f:8b:bd:20:7d:e1:63:3a:59:f4:
                    0d:30:90:b0:c6:1b:65:ad:d0:9a:1c:44:b7:7c:be:
                    14:42:06:d5:f0:f1:0e:6b:fc:af:b7:48:5e:63:00:
                    31:04:f2:15:ae:d2:25:75:87:1d:58:68:6d:ea:c1:
                    fc:7b:3f:a9:7b:f7:9d:34:ec:93:1f:b4:7c:ae:22:
                    aa:33:71:ee:4d:d3:6e:8c:68:b4:f0:75:05:c1:77:
                    b4:7a:4a:cc:16:87:aa:ae:ce:1f:67:11:33:bc:e9:
                    ed:21:1c:cd:ff:34:94:0e:b6:1b:37:17:a6:14:fd:
                    b4:e6:ae:26:18:9c:4f:02:e7:03:32:4f:68:84:f6:
                    27:86:9a:32:f3:79:5c:f7:ac:cd:29:3c:aa:7c:0d:
                    a1:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:85:A6:C8:54:3F:DB:E0:7B:1F:A0:97:8C:1E:32:EC:CE:07:92:10
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/UIWmyFQ_2-B7H6CXjB4y7M4HkhA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.98.124.0/23

    Signature Algorithm: sha256WithRSAEncryption
         18:22:a1:99:10:73:c6:c3:08:f8:8f:fd:dc:9a:e0:63:92:39:
         ce:b6:87:8d:ad:29:2c:ab:ee:26:6f:d1:f1:cc:3f:33:56:31:
         79:ba:5c:1a:01:89:12:79:6b:61:b6:28:41:0c:f7:63:5a:1f:
         ac:db:d0:83:84:c1:4d:11:f5:24:ac:af:17:a2:4f:5b:30:19:
         f5:fe:07:03:e4:c1:75:85:44:46:03:db:43:bb:62:bd:16:2a:
         0f:8e:9e:18:75:76:ef:39:e8:8e:36:4a:8a:e3:bf:04:3e:80:
         3a:19:bc:5a:e5:97:3b:18:e7:42:7a:44:74:1a:f9:c6:e0:b8:
         87:3c:10:99:28:8f:9b:ba:6f:c1:92:75:6a:e8:3f:9c:75:e2:
         07:0d:18:c9:cb:cd:4a:20:03:e1:9a:eb:a0:59:e7:1b:41:b4:
         e8:4c:1e:b1:30:b3:ff:7a:9b:c7:bf:50:d1:38:2d:d5:73:74:
         f2:19:e6:9d:ca:52:aa:3c:29:78:72:cb:b7:a0:d8:0a:df:15:
         f2:33:63:3f:de:6f:c9:bd:6a:37:92:df:a3:39:24:2b:da:b2:
         8d:ac:5e:17:d8:83:43:6e:49:0c:18:70:b8:a6:89:e4:8c:a8:
         df:e7:ad:30:1e:81:87:9a:40:af:d7:09:72:db:ed:78:26:c3:
         b6:63:96:19
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAuwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA2MDEx
NjA0MzVaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDUwODVBNkM4NTQzRkRC
RTA3QjFGQTA5NzhDMUUzMkVDQ0UwNzkyMTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCw5VFbIBd1dBHdsGAqpQmqnqwCeRIjNO50bcnWhMMKUKzOASj7
FelHI8N1pV8Cax7dERMDoznCIuXfdwmCzLzPnDh1wjwflkgIkkqd6UMS4Vplp2Xq
J7oB+55qu7q/hWDMLFT6+MZUTClElOw/X4u9IH3hYzpZ9A0wkLDGG2Wt0JocRLd8
vhRCBtXw8Q5r/K+3SF5jADEE8hWu0iV1hx1YaG3qwfx7P6l795007JMftHyuIqoz
ce5N026MaLTwdQXBd7R6SswWh6quzh9nETO86e0hHM3/NJQOths3F6YU/bTmriYY
nE8C5wMyT2iE9ieGmjLzeVz3rM0pPKp8DaEdAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUUIWmyFQ/2+B7H6CXjB4y7M4HkhAwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L1VJV215RlFfMi1CN0g2Q1hqQjR5N000SGtoQS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAExYnwwDQYJKoZIhvcNAQELBQADggEBABgioZkQc8bDCPiP/dya4GOSOc62
h42tKSyr7iZv0fHMPzNWMXm6XBoBiRJ5a2G2KEEM92NaH6zb0IOEwU0R9SSsrxei
T1swGfX+BwPkwXWFREYD20O7Yr0WKg+Onhh1du856I42SorjvwQ+gDoZvFrllzsY
50J6RHQa+cbguIc8EJkoj5u6b8GSdWroP5x14gcNGMnLzUogA+Ga66BZ5xtBtOhM
HrEws/96m8e/UNE4LdVzdPIZ5p3KUqo8KXhyy7eg2ArfFfIzYz/eb8m9ajeS36M5
JCvaso2sXhfYg0NuSQwYcLimieSMqN/nrTAegYeaQK/XCXLb7Xgmw7Zjlhk=
-----END CERTIFICATE-----
Generated at Sat Apr 27 10:15:56 2024 by rpki-client on console-ams.rpki-client.org