Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/fZ_FKL1d6HnRSCFdUWlna4IibQs.roa
File:                     fZ_FKL1d6HnRSCFdUWlna4IibQs.roa (raw, json)
Hash identifier:          kD3ncsyX0k4RMQrKoKCxCaODrDYiB/JqIpL7JmUWQDc=
Subject key identifier:   7D:9F:C5:28:BD:5D:E8:79:D1:48:21:5D:51:69:67:6B:82:22:6D:0B
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       042B
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/fZ_FKL1d6HnRSCFdUWlna4IibQs.roa
Signing time:             Tue 06 Jun 2023 16:09:09 +0000
ROA not before:           Tue 06 Jun 2023 16:09:09 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.104.46.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 May 2024 13:36:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1067 (0x42b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun  6 16:09:09 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=7D9FC528BD5DE879D148215D5169676B82226D0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:d6:76:9f:ae:77:38:e1:eb:52:ae:35:99:1e:
                    c3:d4:4b:53:f7:7f:bd:93:fe:9f:22:50:4f:13:a3:
                    55:72:80:fb:2c:93:8f:fd:25:93:82:02:1d:c8:9d:
                    c9:47:64:76:2d:00:18:27:cd:e0:21:e1:c9:4d:06:
                    94:65:18:7d:2e:c9:74:9e:a1:84:14:e9:a0:a4:22:
                    c2:42:ae:83:8a:30:3c:bb:f1:47:28:3d:76:d1:b8:
                    ed:33:05:1c:11:bc:fa:26:e2:46:14:44:77:4d:5d:
                    96:1e:93:9e:ee:13:80:82:b8:64:58:59:a9:ae:45:
                    04:b7:7d:fe:11:25:68:e2:53:80:96:e9:db:43:4e:
                    57:3b:c9:20:36:61:3d:c5:d4:a1:f2:bd:da:0e:8a:
                    5c:d0:81:99:2a:53:b1:2b:41:e3:f2:97:c0:0e:2a:
                    a6:37:12:e6:e2:f6:46:39:44:c8:f2:30:d6:7e:e2:
                    e7:95:5f:b6:51:bc:59:2f:59:34:14:b3:bd:06:73:
                    43:71:fe:b5:9c:61:5b:d5:ad:8f:19:7f:08:ed:10:
                    a9:21:70:36:bb:f9:ce:b7:d5:26:19:9c:61:a1:3e:
                    89:e8:3c:0c:f1:41:d8:4b:c1:f8:f3:92:58:be:c0:
                    73:e4:4a:df:50:a5:6d:ce:d6:bb:9d:a1:1a:fd:cd:
                    22:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:9F:C5:28:BD:5D:E8:79:D1:48:21:5D:51:69:67:6B:82:22:6D:0B
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/fZ_FKL1d6HnRSCFdUWlna4IibQs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.104.46.0/23

    Signature Algorithm: sha256WithRSAEncryption
         62:1a:b5:35:e9:66:bd:6d:77:de:74:ae:38:77:27:b5:21:b5:
         80:57:b7:a0:7c:50:06:10:18:ab:d9:88:80:49:bd:41:d9:97:
         51:c4:44:6c:fe:38:88:c8:f9:43:7d:8b:2a:85:0c:a8:6b:a1:
         2b:a5:c9:7c:19:34:7b:d9:4d:1c:25:19:45:08:bf:14:b6:93:
         f4:10:46:8e:14:49:0e:5b:6b:72:66:49:12:db:b7:55:7c:89:
         b9:ec:28:cc:f3:32:d3:cd:40:04:ff:69:7a:45:91:09:3d:f6:
         b6:9e:c0:4c:93:99:80:5a:c8:60:56:1e:95:2b:ff:92:dc:f9:
         4d:74:b7:a1:08:e7:a3:86:5a:14:20:d1:20:d5:79:4d:4c:09:
         72:85:66:25:52:7a:d2:54:c1:cd:32:92:58:86:db:f9:e4:92:
         87:37:6b:15:a0:49:e7:5f:4b:88:c2:97:eb:ab:93:66:c8:be:
         1c:4c:77:02:4d:56:d6:c9:ef:33:44:95:7b:b1:53:3f:69:b2:
         17:9f:78:0e:67:c7:01:16:18:e2:72:c0:f6:35:2d:24:aa:c5:
         52:51:2e:66:14:ff:8a:54:eb:d4:25:ea:dd:03:c8:96:d9:2d:
         80:bb:52:92:70:92:05:ba:20:ce:70:83:c0:eb:4a:54:a8:79:
         40:58:90:c1
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICBCswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA2MDYx
NjA5MDlaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDdEOUZDNTI4QkQ1REU4
NzlEMTQ4MjE1RDUxNjk2NzZCODIyMjZEMEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDT1nafrnc44etSrjWZHsPUS1P3f72T/p8iUE8To1VygPssk4/9
JZOCAh3InclHZHYtABgnzeAh4clNBpRlGH0uyXSeoYQU6aCkIsJCroOKMDy78Uco
PXbRuO0zBRwRvPom4kYURHdNXZYek57uE4CCuGRYWamuRQS3ff4RJWjiU4CW6dtD
Tlc7ySA2YT3F1KHyvdoOilzQgZkqU7ErQePyl8AOKqY3Eubi9kY5RMjyMNZ+4ueV
X7ZRvFkvWTQUs70Gc0Nx/rWcYVvVrY8ZfwjtEKkhcDa7+c631SYZnGGhPonoPAzx
QdhLwfjzkli+wHPkSt9QpW3O1rudoRr9zSIZAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUfZ/FKL1d6HnRSCFdUWlna4IibQswHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L2ZaX0ZLTDFkNkhuUlNDRmRVV2xuYTRJaWJRcy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAExaC4wDQYJKoZIhvcNAQELBQADggEBAGIatTXpZr1td950rjh3J7UhtYBX
t6B8UAYQGKvZiIBJvUHZl1HERGz+OIjI+UN9iyqFDKhroSulyXwZNHvZTRwlGUUI
vxS2k/QQRo4USQ5ba3JmSRLbt1V8ibnsKMzzMtPNQAT/aXpFkQk99raewEyTmYBa
yGBWHpUr/5Lc+U10t6EI56OGWhQg0SDVeU1MCXKFZiVSetJUwc0ykliG2/nkkoc3
axWgSedfS4jCl+urk2bIvhxMdwJNVtbJ7zNElXuxUz9pshefeA5nxwEWGOJywPY1
LSSqxVJRLmYU/4pU69Ql6t0DyJbZLYC7UpJwkgW6IM5wg8DrSlSoeUBYkME=
-----END CERTIFICATE-----
Generated at Sat Apr 27 10:15:57 2024 by rpki-client on console-ams.rpki-client.org