Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/axYwxNKEsqoVqiW66MBixmrlFX8.roa
File:                     axYwxNKEsqoVqiW66MBixmrlFX8.roa (raw, json)
Hash identifier:          bdmpQ4w5qVP+a2FN7KASoa3Fl/NS6Hc+HY73pCgbinw=
Subject key identifier:   6B:16:30:C4:D2:84:B2:AA:15:AA:25:BA:E8:C0:62:C6:6A:E5:15:7F
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0500
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/axYwxNKEsqoVqiW66MBixmrlFX8.roa
Signing time:             Thu 27 Jul 2023 16:52:06 +0000
ROA not before:           Thu 27 Jul 2023 16:52:06 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     9605
IP address blocks:        49.105.80.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 23 Jun 2024 11:53:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1280 (0x500)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jul 27 16:52:06 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=6B1630C4D284B2AA15AA25BAE8C062C66AE5157F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:98:26:04:c6:db:69:3a:ee:b6:e7:24:2d:25:
                    3d:15:36:dc:65:ea:8b:ff:6d:12:90:cc:38:16:e6:
                    79:82:78:69:d0:6b:f3:5c:31:0b:22:bf:c6:42:2f:
                    28:8b:e8:9d:4b:37:cb:41:fb:5a:56:b0:e6:fd:a7:
                    a4:51:c6:c0:ce:48:6d:55:3d:27:0d:d4:ac:77:d4:
                    36:f9:a6:dc:3a:22:4c:6c:51:7f:c2:3f:47:38:d3:
                    18:60:7c:23:c1:01:ea:4d:6f:10:70:1c:f2:92:3a:
                    2f:59:74:8a:1d:e4:0e:58:88:f6:e0:3f:2d:eb:ed:
                    d7:e5:f4:9c:5d:2c:df:6d:78:0e:89:93:47:76:ee:
                    02:bf:27:1f:a9:de:8a:af:32:e9:04:91:ef:ac:e8:
                    48:46:70:d5:77:61:8c:31:bb:79:be:16:20:42:a2:
                    7c:1d:44:90:b5:03:48:6a:20:17:48:d0:37:81:47:
                    04:a4:5f:c3:da:70:8e:92:2e:bb:3f:20:e6:af:ef:
                    08:dc:6f:0a:24:af:28:47:d2:ae:8b:e8:67:99:3a:
                    85:6e:4a:78:5c:0b:c7:75:97:0d:2a:49:6f:5d:64:
                    f5:2f:b4:ba:02:dd:0d:10:3b:ff:92:2d:25:23:21:
                    13:43:c3:29:23:cf:fa:77:ed:97:df:50:f6:cd:61:
                    b2:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:16:30:C4:D2:84:B2:AA:15:AA:25:BA:E8:C0:62:C6:6A:E5:15:7F
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/axYwxNKEsqoVqiW66MBixmrlFX8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.105.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:91:7e:20:0c:96:fe:7b:40:dd:fc:69:e2:e6:c8:a5:c9:2d:
         4e:f2:63:1a:89:ed:76:4e:bd:63:c8:e9:03:76:a0:aa:8f:2e:
         f4:f4:a3:f1:96:ed:d5:47:66:6a:7b:2b:df:d4:10:25:e3:90:
         fd:d5:a9:ab:2a:04:b5:28:8a:a5:83:db:2d:53:6d:78:29:b5:
         de:a6:e5:80:10:07:24:f1:90:3c:11:92:7a:77:33:74:ce:e8:
         d1:1d:fe:df:cb:1f:98:45:d6:34:2b:ac:ba:2f:5f:f3:f8:b0:
         65:d0:5c:d8:7f:25:d4:11:87:e2:1a:1a:21:94:31:bf:1b:92:
         a1:52:ae:20:79:ed:07:84:25:65:64:ed:b6:ac:21:47:ea:f0:
         04:a6:8c:d4:f4:b5:1e:3d:ae:dc:56:16:4b:a8:c0:be:16:c2:
         d9:84:78:a5:cc:a8:90:e9:ae:4b:8c:34:cb:2c:0c:73:38:7e:
         e7:ea:27:08:af:a6:0c:19:e2:ed:56:7c:b4:fb:29:b8:be:15:
         90:ed:92:b7:d5:2a:c5:f1:30:66:5d:06:4c:ad:a4:b3:7a:de:
         1d:82:6b:48:a9:5a:04:77:57:87:98:e3:e8:75:e1:fd:84:22:
         3a:bc:8e:c0:ec:b8:26:1d:0b:87:c9:ff:4a:4e:42:c7:44:ad:
         48:70:c2:17
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICBQAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA3Mjcx
NjUyMDZaFw0yNDA3MTQwMTMwMDNaMDMxMTAvBgNVBAMTKDZCMTYzMEM0RDI4NEIy
QUExNUFBMjVCQUU4QzA2MkM2NkFFNTE1N0YwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDJmCYExttpOu625yQtJT0VNtxl6ov/bRKQzDgW5nmCeGnQa/Nc
MQsiv8ZCLyiL6J1LN8tB+1pWsOb9p6RRxsDOSG1VPScN1Kx31Db5ptw6IkxsUX/C
P0c40xhgfCPBAepNbxBwHPKSOi9ZdIod5A5YiPbgPy3r7dfl9JxdLN9teA6Jk0d2
7gK/Jx+p3oqvMukEke+s6EhGcNV3YYwxu3m+FiBConwdRJC1A0hqIBdI0DeBRwSk
X8PacI6SLrs/IOav7wjcbwokryhH0q6L6GeZOoVuSnhcC8d1lw0qSW9dZPUvtLoC
3Q0QO/+SLSUjIRNDwykjz/p37ZffUPbNYbKFAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUaxYwxNKEsqoVqiW66MBixmrlFX8wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L2F4WXd4TktFc3FvVnFpVzY2TUJpeG1ybEZYOC5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAAxaVAwDQYJKoZIhvcNAQELBQADggEBAI6RfiAMlv57QN38aeLmyKXJLU7y
YxqJ7XZOvWPI6QN2oKqPLvT0o/GW7dVHZmp7K9/UECXjkP3VqasqBLUoiqWD2y1T
bXgptd6m5YAQByTxkDwRknp3M3TO6NEd/t/LH5hF1jQrrLovX/P4sGXQXNh/JdQR
h+IaGiGUMb8bkqFSriB57QeEJWVk7basIUfq8ASmjNT0tR49rtxWFkuowL4WwtmE
eKXMqJDprkuMNMssDHM4fufqJwivpgwZ4u1WfLT7Kbi+FZDtkrfVKsXxMGZdBkyt
pLN63h2Ca0ipWgR3V4eY4+h14f2EIjq8jsDsuCYdC4fJ/0pOQsdErUhwwhc=
-----END CERTIFICATE-----
Generated at Sun Jun 16 12:57:22 2024 by rpki-client on console-fra.rpki-client.org