Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/gJ2gdFcGHd2yygfbimP-em9A3_c.roa
File:                     gJ2gdFcGHd2yygfbimP-em9A3_c.roa (raw, json)
Hash identifier:          4DRm1Ky1H01Ga3a1v+TfG/wRpdO0nbs8T0CLJ8BMiG8=
Subject key identifier:   80:9D:A0:74:57:06:1D:DD:B2:CA:07:DB:8A:63:FE:7A:6F:40:DF:F7
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0637
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/gJ2gdFcGHd2yygfbimP-em9A3_c.roa
Signing time:             Tue 30 Apr 2024 01:31:23 +0000
ROA not before:           Tue 30 Apr 2024 01:31:23 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        49.98.184.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1591 (0x637)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr 30 01:31:23 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=809DA07457061DDDB2CA07DB8A63FE7A6F40DFF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:46:3b:d5:a0:d0:1a:d8:e9:b9:d2:82:41:5b:
                    71:93:c0:9a:70:fd:0c:0b:1d:66:9e:10:0d:40:9b:
                    70:a5:f5:c1:a7:63:83:a4:e3:aa:bc:80:c0:49:3e:
                    a3:e7:e1:6a:8d:a1:0f:82:4d:ed:9c:c2:1c:0e:c8:
                    74:88:78:b9:25:0e:dd:47:b7:c5:93:05:0d:d0:4d:
                    8e:10:df:cf:58:c5:80:8e:7b:95:84:96:72:98:3a:
                    55:f6:d7:f2:f2:8a:65:a6:be:22:c7:85:d7:c8:20:
                    55:73:e8:08:67:68:1d:b6:84:5c:fb:71:ec:5b:aa:
                    e4:f2:03:fb:a1:c7:f1:33:d1:c6:18:b3:eb:93:0b:
                    92:50:e2:c4:2d:da:39:c4:ed:8e:56:d7:8d:cf:41:
                    82:9d:f6:1a:d0:89:65:9c:0c:77:ef:92:a1:cf:a5:
                    f2:44:ce:d7:55:08:c8:85:b6:99:07:22:0c:54:a1:
                    f0:c3:aa:a5:26:a3:af:51:bc:02:a1:83:70:f8:44:
                    b6:44:9d:25:99:35:bf:77:73:96:6e:f6:9f:e7:5b:
                    e5:95:16:2b:6f:9a:a8:66:de:ca:1a:bf:53:49:69:
                    5d:0a:b5:9c:5a:70:78:38:ef:68:e0:9d:65:0a:ed:
                    88:a0:2c:17:dd:f2:ec:6b:62:59:85:54:3f:37:df:
                    89:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:9D:A0:74:57:06:1D:DD:B2:CA:07:DB:8A:63:FE:7A:6F:40:DF:F7
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/gJ2gdFcGHd2yygfbimP-em9A3_c.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.98.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b9:ea:24:7f:1c:36:bf:86:91:b7:02:5c:17:fc:23:3c:b5:17:
         e2:db:f9:64:53:60:c9:3c:54:16:57:ac:00:95:9f:85:b5:cf:
         86:3b:d4:62:ee:e5:ef:7a:03:7f:4b:24:53:51:ba:54:79:52:
         4f:bb:78:1c:8d:77:11:50:7a:4c:13:63:58:47:34:5d:ef:0d:
         e6:b6:20:08:c0:23:a8:9d:f4:96:c0:2d:14:a2:ce:a4:33:7d:
         66:ca:d6:9e:27:e3:19:1b:fb:fc:4e:6c:03:f1:8a:cb:93:ed:
         58:a4:66:b5:ae:17:c0:0a:3d:52:d2:18:39:53:46:29:ed:a9:
         12:37:ff:83:b6:e8:83:7a:91:8a:22:3a:92:9f:87:1f:ed:56:
         84:3f:09:27:f2:e5:89:74:cb:28:48:6a:8c:7f:66:7f:be:03:
         b7:d1:fe:0d:6e:9a:7b:6d:39:c2:92:c1:5d:b4:43:ce:40:68:
         43:b5:47:18:66:94:25:c8:21:d4:7c:0e:a9:40:4b:86:9c:89:
         3b:43:8a:6e:9a:bc:63:2a:8b:28:41:be:a6:f7:28:c9:56:f9:
         28:f4:40:68:08:e0:6d:b4:26:9b:87:62:54:7b:d2:dc:48:ae:
         dd:f8:59:57:ae:94:5f:0e:03:1b:f0:33:6f:58:ce:65:bc:61:
         46:ab:ec:e3
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICBjcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw
MTMxMjNaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDgwOURBMDc0NTcwNjFE
RERCMkNBMDdEQjhBNjNGRTdBNkY0MERGRjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC8RjvVoNAa2Om50oJBW3GTwJpw/QwLHWaeEA1Am3Cl9cGnY4Ok
46q8gMBJPqPn4WqNoQ+CTe2cwhwOyHSIeLklDt1Ht8WTBQ3QTY4Q389YxYCOe5WE
lnKYOlX21/LyimWmviLHhdfIIFVz6AhnaB22hFz7cexbquTyA/uhx/Ez0cYYs+uT
C5JQ4sQt2jnE7Y5W143PQYKd9hrQiWWcDHfvkqHPpfJEztdVCMiFtpkHIgxUofDD
qqUmo69RvAKhg3D4RLZEnSWZNb93c5Zu9p/nW+WVFitvmqhm3soav1NJaV0KtZxa
cHg472jgnWUK7YigLBfd8uxrYlmFVD8334kZAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUgJ2gdFcGHd2yygfbimP+em9A3/cwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L2dKMmdkRmNHSGQyeXlnZmJpbVAtZW05QTNfYy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAIxYrgwDQYJKoZIhvcNAQELBQADggEBALnqJH8cNr+GkbcCXBf8Izy1F+Lb
+WRTYMk8VBZXrACVn4W1z4Y71GLu5e96A39LJFNRulR5Uk+7eByNdxFQekwTY1hH
NF3vDea2IAjAI6id9JbALRSizqQzfWbK1p4n4xkb+/xObAPxisuT7VikZrWuF8AK
PVLSGDlTRintqRI3/4O26IN6kYoiOpKfhx/tVoQ/CSfy5Yl0yyhIaox/Zn++A7fR
/g1umnttOcKSwV20Q85AaEO1RxhmlCXIIdR8DqlAS4aciTtDim6avGMqiyhBvqb3
KMlW+Sj0QGgI4G20JpuHYlR70txIrt34WVeulF8OAxvwM29YzmW8YUar7OM=
-----END CERTIFICATE-----
Generated at Sat Jun 1 15:54:31 2024 by rpki-client on console-ams.rpki-client.org