Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/hQXQiwMLAXptYvWeMZUuhGFya40.roa
File:                     hQXQiwMLAXptYvWeMZUuhGFya40.roa (raw, json)
Hash identifier:          PXZbqOfAVFo1H3nevyn60WtOYkhCyV8f8xMT8Y6Ih+g=
Subject key identifier:   85:05:D0:8B:03:0B:01:7A:6D:62:F5:9E:31:95:2E:84:61:72:6B:8D
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       068C
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/hQXQiwMLAXptYvWeMZUuhGFya40.roa
Signing time:             Tue 30 Apr 2024 01:38:07 +0000
ROA not before:           Tue 30 Apr 2024 01:38:07 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        49.106.217.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Dec 2024 00:11:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1676 (0x68c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr 30 01:38:07 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=8505D08B030B017A6D62F59E31952E8461726B8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:89:b3:56:ec:0c:00:64:c4:a0:4f:ab:99:e9:
                    75:7a:6f:ab:44:54:e2:d0:c5:a5:19:30:5a:9d:99:
                    4f:0e:d4:7b:31:f5:4a:58:d8:82:17:d0:e9:77:d3:
                    a6:91:5b:25:0b:81:8f:66:75:27:21:9b:6f:bd:45:
                    3e:72:94:6f:90:6b:01:49:a5:bc:d8:2d:53:3b:7c:
                    89:32:f7:0b:52:67:b6:68:17:92:20:ac:55:62:7f:
                    0f:3d:45:2c:23:39:e1:b4:7c:15:cd:12:7c:c7:4e:
                    d3:ec:ae:ea:8b:b0:25:c0:2a:e9:a1:1a:ba:e6:7a:
                    c7:bd:9b:ef:0a:36:9d:a3:d9:cd:62:62:9c:03:c7:
                    08:d2:86:c9:c8:26:f7:94:4a:e4:6b:c8:24:c8:a9:
                    8a:b0:0f:c5:50:33:e3:46:b5:57:b2:56:f7:71:48:
                    88:4c:d8:b6:60:41:f6:45:0d:3a:08:5b:f4:fc:da:
                    ac:78:f4:b8:c9:a4:50:95:78:eb:cf:0e:18:90:11:
                    74:4c:e0:57:b6:0a:ba:54:98:34:0d:98:ce:c8:ea:
                    50:de:1e:88:9c:61:ee:de:42:7a:fe:78:7b:33:0e:
                    4c:0b:a8:61:16:a7:21:5f:57:cc:a1:1a:0d:fb:c8:
                    44:7e:cd:4b:5e:b8:57:01:2f:61:82:85:5b:2d:15:
                    51:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:05:D0:8B:03:0B:01:7A:6D:62:F5:9E:31:95:2E:84:61:72:6B:8D
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/hQXQiwMLAXptYvWeMZUuhGFya40.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.106.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:96:f0:87:89:96:1a:83:c1:39:52:20:24:32:b2:71:7f:b3:
         45:4f:7c:70:1a:b9:4f:2a:01:58:3b:90:99:0a:32:4c:77:f9:
         70:66:25:df:7e:30:95:b3:2f:7b:ba:a9:5e:90:4f:76:6b:e9:
         35:45:b0:a2:a9:fc:93:03:17:60:ca:92:63:f1:60:0a:99:5e:
         f6:d9:5e:db:54:44:7f:e1:c4:1b:f9:fd:81:20:b7:c9:cc:5e:
         9d:91:60:94:ac:6b:df:4c:0e:60:b2:d4:3c:8a:f3:c9:43:6e:
         33:ed:10:39:8f:85:ab:58:3b:f8:36:8c:a9:c4:a5:1d:77:2c:
         77:18:08:bf:0f:44:d7:51:60:f9:35:35:52:6a:a1:fe:90:d4:
         bd:1d:af:92:2f:33:88:67:13:70:fd:30:47:a6:1f:1c:47:5f:
         b7:8f:7a:e7:62:9e:94:a1:30:fc:49:3f:5c:da:9c:a6:76:06:
         19:d4:29:65:53:e0:b5:82:15:df:71:d2:1a:35:45:65:45:df:
         3c:9d:66:ae:f6:a3:7e:fb:f3:20:92:4b:e1:ec:e2:fb:eb:ee:
         eb:cb:93:48:c0:a1:76:4c:68:c3:ef:25:86:96:a8:e1:6b:37:
         f4:72:1f:41:fd:0c:0a:ce:4e:2d:b3:18:2e:27:40:e5:11:34:
         51:df:42:ca
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICBowwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw
MTM4MDdaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDg1MDVEMDhCMDMwQjAx
N0E2RDYyRjU5RTMxOTUyRTg0NjE3MjZCOEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC7ibNW7AwAZMSgT6uZ6XV6b6tEVOLQxaUZMFqdmU8O1Hsx9UpY
2IIX0Ol306aRWyULgY9mdSchm2+9RT5ylG+QawFJpbzYLVM7fIky9wtSZ7ZoF5Ig
rFVifw89RSwjOeG0fBXNEnzHTtPsruqLsCXAKumhGrrmese9m+8KNp2j2c1iYpwD
xwjShsnIJveUSuRryCTIqYqwD8VQM+NGtVeyVvdxSIhM2LZgQfZFDToIW/T82qx4
9LjJpFCVeOvPDhiQEXRM4Fe2CrpUmDQNmM7I6lDeHoicYe7eQnr+eHszDkwLqGEW
pyFfV8yhGg37yER+zUteuFcBL2GChVstFVEtAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUhQXQiwMLAXptYvWeMZUuhGFya40wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L2hRWFFpd01MQVhwdFl2V2VNWlV1aEdGeWE0MC5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAAxatkwDQYJKoZIhvcNAQELBQADggEBAKaW8IeJlhqDwTlSICQysnF/s0VP
fHAauU8qAVg7kJkKMkx3+XBmJd9+MJWzL3u6qV6QT3Zr6TVFsKKp/JMDF2DKkmPx
YAqZXvbZXttURH/hxBv5/YEgt8nMXp2RYJSsa99MDmCy1DyK88lDbjPtEDmPhatY
O/g2jKnEpR13LHcYCL8PRNdRYPk1NVJqof6Q1L0dr5IvM4hnE3D9MEemHxxHX7eP
eudinpShMPxJP1zanKZ2BhnUKWVT4LWCFd9x0ho1RWVF3zydZq72o3778yCSS+Hs
4vvr7uvLk0jAoXZMaMPvJYaWqOFrN/RyH0H9DArOTi2zGC4nQOURNFHfQso=
-----END CERTIFICATE-----
Generated at Tue Nov 26 02:27:15 2024 by rpki-client on console-ams.rpki-client.org