Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/VHEkMGIQ2O2w91eDU8Vg4WUf8OU.roa
File:                     VHEkMGIQ2O2w91eDU8Vg4WUf8OU.roa (raw, json)
Hash identifier:          YHnCcHvmSz1ormZVrdOdnc5IuDQI3HVWIEKEFP9gDi4=
Subject key identifier:   54:71:24:30:62:10:D8:ED:B0:F7:57:83:53:C5:60:E1:65:1F:F0:E5
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       05CE
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/VHEkMGIQ2O2w91eDU8Vg4WUf8OU.roa
Signing time:             Thu 29 Feb 2024 01:32:11 +0000
ROA not before:           Thu 29 Feb 2024 01:32:11 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     9605
IP address blocks:        49.97.106.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 12:58:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1486 (0x5ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Feb 29 01:32:11 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=547124306210D8EDB0F7578353C560E1651FF0E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:a9:55:1e:2d:d8:35:8a:46:db:b5:96:a4:ff:
                    54:22:17:4c:ce:e8:7f:42:c3:bc:ec:88:bb:ae:69:
                    9f:17:a2:ec:04:25:bd:bc:25:96:18:01:c2:82:55:
                    fd:50:a5:6f:24:7d:fc:4e:0c:f2:b6:20:d5:20:0f:
                    d5:f6:c9:e5:d6:aa:b4:ba:12:28:a7:4d:9f:27:3b:
                    42:e9:8a:21:e5:ab:a2:4a:89:78:a3:70:aa:28:bc:
                    ff:6a:e1:46:7f:c4:f7:0f:e7:64:83:ac:5e:00:5b:
                    cb:6c:e2:ab:64:bb:c4:57:26:78:27:cd:71:17:ee:
                    73:86:f5:4f:56:4a:fb:b7:cf:81:63:ad:60:63:2c:
                    95:79:32:40:fe:ac:fb:9d:a5:17:f8:e6:9d:11:95:
                    cd:8a:4a:c3:04:ad:69:9b:02:90:78:d8:9e:75:43:
                    8b:c0:87:cf:38:00:6e:8d:1f:fa:b7:03:fa:12:45:
                    b0:b2:06:84:ff:82:65:35:5d:18:9d:ec:a0:a1:a4:
                    6a:f4:7f:59:05:20:7f:13:eb:9f:f9:58:46:58:de:
                    61:99:ea:99:90:f7:82:af:85:33:f3:bf:ac:7a:7a:
                    36:57:5d:26:58:35:cb:b5:15:28:7a:35:93:15:fe:
                    37:ff:a2:50:cd:ea:71:cd:d9:1c:68:29:9c:59:4b:
                    05:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:71:24:30:62:10:D8:ED:B0:F7:57:83:53:C5:60:E1:65:1F:F0:E5
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/VHEkMGIQ2O2w91eDU8Vg4WUf8OU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.97.106.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6c:4b:d5:8b:39:5d:2e:69:c4:82:dd:f2:9a:3e:e4:19:4d:50:
         fe:ec:fe:e9:5e:c7:e4:bb:53:f1:5e:4c:19:6d:d0:41:8a:2f:
         da:fd:6d:5e:b9:c5:c8:3f:f9:0d:9d:61:58:e4:27:6c:57:60:
         86:63:6a:d6:ba:19:c7:5d:11:72:9b:6e:d0:38:97:3b:8d:b1:
         57:b8:a1:94:56:09:e1:31:32:3b:a6:96:f7:fc:07:7c:ac:0a:
         85:4e:de:00:3c:6c:0f:e3:29:f6:72:95:a1:07:27:60:8f:76:
         3f:7e:e2:9f:cc:fe:b2:61:9a:44:fc:cb:bb:c8:6c:06:0f:b6:
         f0:9b:e4:86:9f:23:bd:5f:3c:53:18:70:4f:04:ef:94:21:b8:
         bc:a4:25:f3:fa:dd:77:c5:06:1e:34:74:ca:7c:80:8a:db:1f:
         4f:70:91:1e:6d:cb:0b:de:c0:e9:ef:8f:16:d7:d5:f8:19:ad:
         27:44:cc:d0:86:29:ba:20:5b:bc:f5:c2:75:df:f9:94:94:a8:
         24:ac:61:41:fa:dd:e7:bd:52:17:ae:6f:df:39:dd:96:0a:cc:
         ed:a3:4c:06:e8:82:fa:01:a2:d4:de:06:ee:76:f6:05:93:cc:
         89:68:f2:14:db:50:06:31:e3:cf:30:c0:c5:a0:21:b8:5b:f3:
         d4:03:43:2a
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICBc4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDAyMjkw
MTMyMTFaFw0yNTAyMTQwMTMwMDNaMDMxMTAvBgNVBAMTKDU0NzEyNDMwNjIxMEQ4
RURCMEY3NTc4MzUzQzU2MEUxNjUxRkYwRTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDvqVUeLdg1ikbbtZak/1QiF0zO6H9Cw7zsiLuuaZ8XouwEJb28
JZYYAcKCVf1QpW8kffxODPK2INUgD9X2yeXWqrS6EiinTZ8nO0LpiiHlq6JKiXij
cKoovP9q4UZ/xPcP52SDrF4AW8ts4qtku8RXJngnzXEX7nOG9U9WSvu3z4FjrWBj
LJV5MkD+rPudpRf45p0Rlc2KSsMErWmbApB42J51Q4vAh884AG6NH/q3A/oSRbCy
BoT/gmU1XRid7KChpGr0f1kFIH8T65/5WEZY3mGZ6pmQ94KvhTPzv6x6ejZXXSZY
Ncu1FSh6NZMV/jf/olDN6nHN2RxoKZxZSwWhAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUVHEkMGIQ2O2w91eDU8Vg4WUf8OUwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L1ZIRWtNR0lRMk8ydzkxZURVOFZnNFdVZjhPVS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAExYWowDQYJKoZIhvcNAQELBQADggEBAGxL1Ys5XS5pxILd8po+5BlNUP7s
/ulex+S7U/FeTBlt0EGKL9r9bV65xcg/+Q2dYVjkJ2xXYIZjata6GcddEXKbbtA4
lzuNsVe4oZRWCeExMjumlvf8B3ysCoVO3gA8bA/jKfZylaEHJ2CPdj9+4p/M/rJh
mkT8y7vIbAYPtvCb5IafI71fPFMYcE8E75QhuLykJfP63XfFBh40dMp8gIrbH09w
kR5tywvewOnvjxbX1fgZrSdEzNCGKbogW7z1wnXf+ZSUqCSsYUH63ee9Uheub985
3ZYKzO2jTAbogvoBotTeBu529gWTzIlo8hTbUAYx488wwMWgIbhb89QDQyo=
-----END CERTIFICATE-----
Generated at Fri Nov 22 14:21:24 2024 by rpki-client on console-ams.rpki-client.org