Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/i7l4l4b1y3wYpNCmUfy3mp8yyLk.roa
File:                     i7l4l4b1y3wYpNCmUfy3mp8yyLk.roa (raw, json)
Hash identifier:          1isi0Ak7CHfanBL6nW9ja4A40yaYjKe8s3lb81bWYrc=
Subject key identifier:   8B:B9:78:97:86:F5:CB:7C:18:A4:D0:A6:51:FC:B7:9A:9F:32:C8:B9
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       03DB
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/i7l4l4b1y3wYpNCmUfy3mp8yyLk.roa
Signing time:             Tue 06 Jun 2023 16:03:39 +0000
ROA not before:           Tue 06 Jun 2023 16:03:39 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.104.248.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 May 2024 13:36:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 987 (0x3db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun  6 16:03:39 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=8BB9789786F5CB7C18A4D0A651FCB79A9F32C8B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:00:89:ae:14:02:3f:89:62:22:48:46:e0:e9:
                    df:bc:1b:bf:5f:7d:39:de:4d:8f:92:bb:37:df:46:
                    1d:57:92:44:59:b7:2b:01:55:3f:3c:78:c9:bd:03:
                    7c:1f:5b:73:f0:98:43:2e:fa:73:eb:47:aa:39:1f:
                    e9:a7:f1:28:e2:a2:1d:d4:aa:e8:6a:bb:6e:79:0d:
                    6e:c5:a4:fe:39:85:3b:e5:32:f6:fd:fc:fd:0d:76:
                    f1:b9:1f:62:66:7b:75:69:f7:5a:6c:44:06:e4:95:
                    23:c8:5e:c2:d4:26:51:f1:7f:18:7c:43:e3:e7:fa:
                    1c:c5:56:9f:e0:8a:1e:cf:8f:dd:f9:c6:f2:b6:ad:
                    35:79:b7:d8:d7:db:13:98:d4:b9:3f:4f:47:5a:04:
                    ca:43:81:f1:1b:7d:75:de:e6:dc:95:18:9b:66:f8:
                    d4:26:44:4c:ce:fa:81:75:75:e5:6a:79:2d:69:fb:
                    43:e1:d5:ab:b8:9a:b1:56:5b:31:3e:a0:dc:9a:2b:
                    76:91:2f:c8:f2:3e:20:93:7c:b3:c1:63:d1:61:46:
                    2b:dd:31:bc:82:a8:91:1e:81:a2:eb:46:6d:09:64:
                    8b:33:65:18:3b:63:dd:30:2a:75:28:d9:71:13:57:
                    8a:4b:bd:de:2f:d8:64:90:3e:65:67:39:77:71:d2:
                    53:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:B9:78:97:86:F5:CB:7C:18:A4:D0:A6:51:FC:B7:9A:9F:32:C8:B9
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/i7l4l4b1y3wYpNCmUfy3mp8yyLk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.104.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c6:b9:a4:cc:ed:9d:28:77:1f:a4:f9:74:1c:78:b4:a0:cd:19:
         f9:83:71:ef:f5:3d:2b:e5:d9:1a:5c:c0:b5:80:3a:b5:db:8b:
         d1:5d:2a:a8:84:d3:ad:5c:00:53:02:43:b3:be:cc:ce:49:28:
         9b:07:61:af:d8:c0:28:f9:48:9d:50:21:8f:7f:ee:03:73:44:
         2a:61:20:02:a2:aa:63:4c:62:b3:e7:a7:2b:64:ea:d5:7d:98:
         1f:00:d6:80:3e:47:ee:96:0e:75:85:c1:54:d6:c0:0e:14:0a:
         2f:ad:ab:be:36:55:a7:00:39:74:3e:81:92:73:3f:5a:db:29:
         41:c5:bd:be:e5:55:ac:00:c3:91:ea:51:e7:d2:88:00:dd:71:
         a9:25:f2:6c:af:42:dc:3a:c4:d2:b9:27:71:ce:58:d1:15:3d:
         3a:95:ff:59:e2:91:5f:3a:b3:82:8a:c8:e5:f6:40:a5:e8:6d:
         ef:d9:e8:06:e8:b8:ba:10:24:d1:7e:db:29:8c:90:83:50:5a:
         7a:aa:7a:e8:66:a0:8e:b0:79:f2:bc:36:a0:32:ed:11:d4:db:
         69:3c:d9:74:71:a2:64:39:82:e0:55:6f:2d:ce:fb:e0:6f:b7:
         d6:49:a4:64:d6:b4:3d:43:96:a1:1e:94:88:85:97:00:a0:98:
         c5:19:ac:e6
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICA9swDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA2MDYx
NjAzMzlaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDhCQjk3ODk3ODZGNUNC
N0MxOEE0RDBBNjUxRkNCNzlBOUYzMkM4QjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDDAImuFAI/iWIiSEbg6d+8G79ffTneTY+SuzffRh1XkkRZtysB
VT88eMm9A3wfW3PwmEMu+nPrR6o5H+mn8Sjioh3Uquhqu255DW7FpP45hTvlMvb9
/P0NdvG5H2Jme3Vp91psRAbklSPIXsLUJlHxfxh8Q+Pn+hzFVp/gih7Pj935xvK2
rTV5t9jX2xOY1Lk/T0daBMpDgfEbfXXe5tyVGJtm+NQmREzO+oF1deVqeS1p+0Ph
1au4mrFWWzE+oNyaK3aRL8jyPiCTfLPBY9FhRivdMbyCqJEegaLrRm0JZIszZRg7
Y90wKnUo2XETV4pLvd4v2GSQPmVnOXdx0lPzAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUi7l4l4b1y3wYpNCmUfy3mp8yyLkwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L2k3bDRsNGIxeTN3WXBOQ21VZnkzbXA4eXlMay5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAIxaPgwDQYJKoZIhvcNAQELBQADggEBAMa5pMztnSh3H6T5dBx4tKDNGfmD
ce/1PSvl2RpcwLWAOrXbi9FdKqiE061cAFMCQ7O+zM5JKJsHYa/YwCj5SJ1QIY9/
7gNzRCphIAKiqmNMYrPnpytk6tV9mB8A1oA+R+6WDnWFwVTWwA4UCi+tq742VacA
OXQ+gZJzP1rbKUHFvb7lVawAw5HqUefSiADdcakl8myvQtw6xNK5J3HOWNEVPTqV
/1nikV86s4KKyOX2QKXobe/Z6AbouLoQJNF+2ymMkINQWnqqeuhmoI6wefK8NqAy
7RHU22k82XRxomQ5guBVby3O++Bvt9ZJpGTWtD1DlqEelIiFlwCgmMUZrOY=
-----END CERTIFICATE-----
Generated at Sat Apr 27 10:15:57 2024 by rpki-client on console-ams.rpki-client.org