Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/fGlPrLLtn2bEyJf4dnmiUahI0bI.roa
File:                     fGlPrLLtn2bEyJf4dnmiUahI0bI.roa (raw, json)
Hash identifier:          DZdFY30uE0ZzUVNCcV2KOd43rD29hm99iRQhgG3cB3g=
Subject key identifier:   7C:69:4F:AC:B2:ED:9F:66:C4:C8:97:F8:76:79:A2:51:A8:48:D1:B2
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0680
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/fGlPrLLtn2bEyJf4dnmiUahI0bI.roa
Signing time:             Tue 30 Apr 2024 01:38:01 +0000
ROA not before:           Tue 30 Apr 2024 01:38:01 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        49.96.35.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1664 (0x680)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr 30 01:38:01 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=7C694FACB2ED9F66C4C897F87679A251A848D1B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:28:24:2b:5d:aa:f9:49:5c:6c:69:0f:d1:84:
                    02:25:8f:1e:ca:86:2d:59:f6:bb:d1:f7:66:c6:ec:
                    42:e3:f7:61:41:e9:c8:e6:94:57:d8:0c:39:03:c9:
                    bf:71:d6:a4:4e:c7:27:4e:df:0b:6e:77:72:56:32:
                    0a:12:88:31:39:61:80:74:0b:7a:58:17:e7:a5:27:
                    2a:6e:86:d3:bf:cd:74:ca:7d:33:99:e7:5c:38:af:
                    8c:25:0e:37:7e:33:5b:13:e3:6b:9e:fa:55:b0:51:
                    2c:1d:e1:ba:a6:b6:fe:27:34:c8:b0:71:6c:bd:fe:
                    6a:88:2c:6f:6f:72:d1:ea:99:39:62:d0:40:d5:d3:
                    d5:74:48:7b:b8:71:06:f3:57:c1:45:4e:dc:2c:54:
                    89:f7:7d:3d:08:eb:42:07:c7:ec:67:c9:f0:16:59:
                    89:cd:ce:03:cf:88:53:d5:8c:e5:b4:eb:28:b3:9f:
                    cd:19:ba:d3:88:90:56:f2:7b:60:40:a2:d1:36:92:
                    11:9c:2e:fe:13:c7:9e:03:89:71:47:0f:d5:6e:65:
                    79:26:15:c3:cf:a9:f1:03:85:5a:af:e8:3d:00:88:
                    ee:67:66:c9:3d:f2:6f:2d:e3:c1:69:e4:2d:5c:a0:
                    4b:1b:21:dc:2b:1b:7c:c9:06:ae:7a:46:0c:f5:96:
                    8a:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:69:4F:AC:B2:ED:9F:66:C4:C8:97:F8:76:79:A2:51:A8:48:D1:B2
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/fGlPrLLtn2bEyJf4dnmiUahI0bI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.96.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:86:98:69:34:bf:c8:bb:f0:97:43:6e:e1:40:0e:7e:80:b7:
         15:f8:ff:0b:73:f1:c3:3a:96:94:22:8d:4a:6f:fe:18:1f:38:
         6e:b3:92:e6:34:70:2d:2d:9d:25:e2:d6:1a:d4:35:a8:a9:c9:
         4e:5c:44:c5:1b:01:5b:10:a5:eb:4a:30:90:44:8e:77:39:dd:
         24:f2:7f:b5:8e:c0:71:e2:7c:36:6d:35:6a:7b:23:6f:29:77:
         1d:ec:31:7c:c3:d9:db:2c:e3:66:18:3a:74:63:9e:e1:a5:5a:
         1f:15:14:fc:ed:88:0f:77:4a:d6:f1:02:1d:3b:22:7f:4a:47:
         8a:c5:74:2e:d9:4c:5f:6f:17:ad:b3:35:bc:cc:98:65:96:2f:
         d7:85:be:21:2a:7c:26:d4:08:51:83:8d:b1:d6:05:85:88:1d:
         54:60:f0:ac:f4:44:10:62:cf:0e:e3:ca:5e:eb:ae:b7:aa:7d:
         19:db:32:82:97:5c:9f:50:4e:82:bc:9a:3a:97:5f:ce:45:e9:
         e5:12:6c:c8:01:81:fb:32:6e:cb:dc:e5:68:be:cb:64:cf:b5:
         c0:4c:06:2d:fe:a1:a9:49:9a:84:ce:0e:8e:9a:8d:3e:ff:eb:
         bc:9f:fb:36:54:50:91:5d:3a:c8:2a:8f:b4:eb:a6:11:a3:26:
         b4:d5:af:9c
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICBoAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw
MTM4MDFaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDdDNjk0RkFDQjJFRDlG
NjZDNEM4OTdGODc2NzlBMjUxQTg0OEQxQjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDOKCQrXar5SVxsaQ/RhAIljx7Khi1Z9rvR92bG7ELj92FB6cjm
lFfYDDkDyb9x1qROxydO3wtud3JWMgoSiDE5YYB0C3pYF+elJypuhtO/zXTKfTOZ
51w4r4wlDjd+M1sT42ue+lWwUSwd4bqmtv4nNMiwcWy9/mqILG9vctHqmTli0EDV
09V0SHu4cQbzV8FFTtwsVIn3fT0I60IHx+xnyfAWWYnNzgPPiFPVjOW06yizn80Z
utOIkFbye2BAotE2khGcLv4Tx54DiXFHD9VuZXkmFcPPqfEDhVqv6D0AiO5nZsk9
8m8t48Fp5C1coEsbIdwrG3zJBq56Rgz1lopXAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUfGlPrLLtn2bEyJf4dnmiUahI0bIwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L2ZHbFByTEx0bjJiRXlKZjRkbm1pVWFoSTBiSS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAAxYCMwDQYJKoZIhvcNAQELBQADggEBAFCGmGk0v8i78JdDbuFADn6AtxX4
/wtz8cM6lpQijUpv/hgfOG6zkuY0cC0tnSXi1hrUNaipyU5cRMUbAVsQpetKMJBE
jnc53STyf7WOwHHifDZtNWp7I28pdx3sMXzD2dss42YYOnRjnuGlWh8VFPztiA93
StbxAh07In9KR4rFdC7ZTF9vF62zNbzMmGWWL9eFviEqfCbUCFGDjbHWBYWIHVRg
8Kz0RBBizw7jyl7rrreqfRnbMoKXXJ9QToK8mjqXX85F6eUSbMgBgfsybsvc5Wi+
y2TPtcBMBi3+oalJmoTODo6ajT7/67yf+zZUUJFdOsgqj7TrphGjJrTVr5w=
-----END CERTIFICATE-----
Generated at Mon Nov 25 23:59:11 2024 by rpki-client on console-fra.rpki-client.org