Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/VqFoY0AmHmHd_Nz39hfWf73vKSg.roa
File:                     VqFoY0AmHmHd_Nz39hfWf73vKSg.roa (raw, json)
Hash identifier:          Q4IDA3ZGsP4GWhIW3yTmVsGYrGKvVk88NmefluYG8jI=
Subject key identifier:   56:A1:68:63:40:26:1E:61:DD:FC:DC:F7:F6:17:D6:7F:BD:EF:29:28
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       085D
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/VqFoY0AmHmHd_Nz39hfWf73vKSg.roa
Signing time:             Tue 30 Apr 2024 02:16:33 +0000
ROA not before:           Tue 30 Apr 2024 02:16:33 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        49.106.228.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:41:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2141 (0x85d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr 30 02:16:33 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=56A1686340261E61DDFCDCF7F617D67FBDEF2928
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:2e:e0:77:64:5a:46:df:e2:17:a8:e6:d3:3d:
                    ec:de:11:c5:62:14:39:56:04:f5:e2:01:3d:6d:43:
                    b8:f3:75:60:29:25:06:dd:23:49:c3:04:e3:03:9d:
                    ab:17:5b:8c:a4:d3:fb:60:5b:c0:d7:32:26:f6:0b:
                    6f:a0:4d:26:da:c0:47:15:54:75:57:5c:fa:07:e8:
                    c9:a1:12:dc:3e:45:f4:3b:2d:5e:e0:13:5b:a8:97:
                    48:5c:5b:7f:19:d4:bb:e5:3c:04:06:6f:1b:5c:a2:
                    e0:5a:6d:e5:fe:0a:4c:d8:02:d8:fc:c7:a7:4a:6b:
                    f1:ef:08:0a:8a:ac:75:8a:fe:09:f4:59:c4:a6:b7:
                    ba:30:23:74:40:8e:a4:a5:29:29:a1:dc:41:89:fa:
                    74:b2:94:66:3a:fc:78:e4:50:a6:4d:78:4d:09:e2:
                    2a:0a:f1:e5:a5:cb:19:81:c7:a4:9e:c7:7c:f7:51:
                    0a:24:b2:df:7d:6f:1b:27:64:65:77:79:20:14:d4:
                    43:90:87:55:af:c3:1c:a7:77:b4:3f:23:34:59:c8:
                    cd:d2:73:02:66:49:30:2a:a9:a9:d5:a4:02:90:70:
                    c5:9c:81:88:84:0a:3b:7a:3b:59:1c:04:a2:e4:3d:
                    af:ea:7c:4c:b9:92:05:05:ee:c8:32:54:35:3f:5c:
                    f0:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:A1:68:63:40:26:1E:61:DD:FC:DC:F7:F6:17:D6:7F:BD:EF:29:28
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/VqFoY0AmHmHd_Nz39hfWf73vKSg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.106.228.0/23

    Signature Algorithm: sha256WithRSAEncryption
         99:cb:a1:69:d9:4b:57:f6:72:2d:93:df:71:bd:86:06:70:2f:
         2c:b5:be:4b:d0:83:d8:d2:2d:ca:31:b5:d1:f6:41:27:4f:5a:
         9d:fb:49:dc:fc:c5:34:28:5c:b5:22:f1:0f:39:f7:c5:10:85:
         bf:1f:a3:6c:cf:5f:cd:99:23:7c:bd:96:78:bb:3d:b5:7c:52:
         aa:ec:64:73:91:ca:52:93:d4:43:b1:25:b2:ea:08:f6:14:db:
         e6:ae:7a:7b:08:1b:bf:a4:5d:cf:82:6a:49:06:2f:b4:e8:08:
         00:89:54:d0:3a:e2:57:6a:80:cf:95:51:17:af:36:0a:98:51:
         1b:f3:b0:74:c0:79:e0:04:59:22:d9:69:59:88:7f:70:7c:d8:
         82:c4:11:e4:86:28:6f:98:51:81:7a:02:7a:21:ae:af:ad:21:
         db:67:f1:57:4f:36:3a:39:3c:92:0d:ba:cf:34:c2:95:17:6c:
         9d:17:0e:f8:92:54:8d:7c:67:3c:15:bd:3c:ea:8c:4d:25:9b:
         83:7b:bb:0c:d6:39:26:04:1e:85:b8:0f:51:5a:f0:8d:c8:71:
         2a:73:7b:46:d8:e2:99:b2:6e:51:85:29:d8:e4:29:be:a1:3e:
         e6:7d:99:64:58:87:52:06:e5:e2:39:6c:57:fa:93:a6:d9:a5:
         0d:ea:e6:99
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICCF0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw
MjE2MzNaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDU2QTE2ODYzNDAyNjFF
NjFEREZDRENGN0Y2MTdENjdGQkRFRjI5MjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDGLuB3ZFpG3+IXqObTPezeEcViFDlWBPXiAT1tQ7jzdWApJQbd
I0nDBOMDnasXW4yk0/tgW8DXMib2C2+gTSbawEcVVHVXXPoH6MmhEtw+RfQ7LV7g
E1uol0hcW38Z1LvlPAQGbxtcouBabeX+CkzYAtj8x6dKa/HvCAqKrHWK/gn0WcSm
t7owI3RAjqSlKSmh3EGJ+nSylGY6/HjkUKZNeE0J4ioK8eWlyxmBx6Sex3z3UQok
st99bxsnZGV3eSAU1EOQh1Wvwxynd7Q/IzRZyM3ScwJmSTAqqanVpAKQcMWcgYiE
Cjt6O1kcBKLkPa/qfEy5kgUF7sgyVDU/XPBJAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUVqFoY0AmHmHd/Nz39hfWf73vKSgwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L1ZxRm9ZMEFtSG1IZF9OejM5aGZXZjczdktTZy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAExauQwDQYJKoZIhvcNAQELBQADggEBAJnLoWnZS1f2ci2T33G9hgZwLyy1
vkvQg9jSLcoxtdH2QSdPWp37Sdz8xTQoXLUi8Q8598UQhb8fo2zPX82ZI3y9lni7
PbV8UqrsZHORylKT1EOxJbLqCPYU2+auensIG7+kXc+CakkGL7ToCACJVNA64ldq
gM+VURevNgqYURvzsHTAeeAEWSLZaVmIf3B82ILEEeSGKG+YUYF6Anohrq+tIdtn
8VdPNjo5PJINus80wpUXbJ0XDviSVI18ZzwVvTzqjE0lm4N7uwzWOSYEHoW4D1Fa
8I3IcSpze0bY4pmyblGFKdjkKb6hPuZ9mWRYh1IG5eI5bFf6k6bZpQ3q5pk=
-----END CERTIFICATE-----
Generated at Fri Nov 22 15:24:01 2024 by rpki-client on console-fra.rpki-client.org