Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/iNmXFT0c6_14Dhcaf252acpWP2k.roa
File:                     iNmXFT0c6_14Dhcaf252acpWP2k.roa (raw, json)
Hash identifier:          TNSPD+xhSZf+8oxQqKkF3PTY24L+Mh6/V5yKOvnD1jQ=
Subject key identifier:   88:D9:97:15:3D:1C:EB:FD:78:0E:17:1A:7F:6E:76:69:CA:56:3F:69
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       05B6
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/iNmXFT0c6_14Dhcaf252acpWP2k.roa
Signing time:             Thu 27 Jul 2023 17:02:11 +0000
ROA not before:           Thu 27 Jul 2023 17:02:11 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     9605
IP address blocks:        49.102.161.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1462 (0x5b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jul 27 17:02:11 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=88D997153D1CEBFD780E171A7F6E7669CA563F69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:8f:6e:8e:d5:1b:22:86:00:00:ac:6a:fa:44:
                    45:32:59:a6:17:e5:4d:9b:28:57:c5:de:be:53:ef:
                    40:2c:ba:b2:73:e8:8d:ef:cd:9d:d3:b6:14:a4:fc:
                    55:8f:c4:9d:67:ca:a9:2c:64:7d:5e:f9:b4:25:c7:
                    a5:94:96:38:7a:67:fd:c6:4b:3e:7e:1a:76:fe:a2:
                    32:35:50:65:0f:6d:ea:3f:99:c6:4a:11:48:a6:92:
                    c1:5a:66:81:22:00:a0:66:40:2b:27:92:19:c8:a2:
                    7f:4e:d0:93:db:d4:62:e8:53:e7:29:f5:db:77:b1:
                    32:4b:d9:1c:16:2f:d5:4e:43:28:ae:38:0d:c2:27:
                    ba:be:01:b3:4d:bf:b4:2c:50:67:07:80:8d:ac:7e:
                    4e:90:b8:f7:09:8e:83:a3:c2:9b:8b:61:88:26:34:
                    0d:08:ce:59:b3:b6:54:60:a4:67:aa:f2:96:76:fd:
                    6e:fa:1f:c4:66:74:f7:07:d4:48:7a:d2:ff:fa:25:
                    58:c7:6c:2c:c9:f0:bd:c6:97:2f:a1:a8:74:ef:ef:
                    90:0b:46:2b:ef:7c:53:9c:7d:2c:c8:3a:ac:28:ac:
                    65:8c:3b:53:21:29:51:3e:17:f2:07:2e:1c:bf:19:
                    d8:31:4f:ac:20:69:42:db:0e:70:73:f2:ec:38:23:
                    1b:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:D9:97:15:3D:1C:EB:FD:78:0E:17:1A:7F:6E:76:69:CA:56:3F:69
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/iNmXFT0c6_14Dhcaf252acpWP2k.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.102.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:1e:4d:9c:6c:8f:53:0e:3a:53:b3:62:57:d1:e4:86:c6:95:
         76:2c:ce:f1:84:99:92:60:6c:70:54:9d:d1:4c:06:f6:aa:2c:
         0d:9d:45:25:70:21:07:ab:3e:ec:57:1e:4b:05:ef:c7:13:92:
         96:10:32:f1:81:af:dd:2a:b2:50:ba:5d:0e:3f:eb:e4:01:ef:
         96:e3:71:80:4d:0b:cd:dc:e3:5f:43:1d:64:9f:4b:da:d9:bd:
         4a:9d:4a:d3:1f:fa:04:42:28:a8:3b:82:51:7f:9d:92:87:a3:
         48:e6:a2:13:69:b6:b7:e7:46:65:5c:8d:6f:2e:e3:92:16:42:
         88:d3:b9:40:cb:e6:8d:28:56:6e:58:37:45:d3:05:99:d8:f1:
         3c:25:82:c5:d3:67:f5:08:e1:f3:9e:ac:58:ac:84:7e:01:94:
         28:97:51:87:d4:c1:48:5b:f7:2d:3b:16:f7:a5:1e:61:16:5e:
         37:a4:1f:ba:e6:cd:ad:09:81:fb:02:fe:83:7c:15:55:54:79:
         ec:59:5d:82:a1:e9:47:89:d7:fa:1b:30:cf:65:90:c4:29:8b:
         00:1b:f8:fa:56:c2:d5:e4:0f:d2:66:1f:1b:b0:c9:b2:5c:0c:
         f6:98:a4:61:d9:38:3d:9e:43:de:73:da:45:20:f6:9f:13:eb:
         7f:28:28:ba
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICBbYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA3Mjcx
NzAyMTFaFw0yNDA3MTQwMTMwMDNaMDMxMTAvBgNVBAMTKDg4RDk5NzE1M0QxQ0VC
RkQ3ODBFMTcxQTdGNkU3NjY5Q0E1NjNGNjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDNj26O1RsihgAArGr6REUyWaYX5U2bKFfF3r5T70AsurJz6I3v
zZ3TthSk/FWPxJ1nyqksZH1e+bQlx6WUljh6Z/3GSz5+Gnb+ojI1UGUPbeo/mcZK
EUimksFaZoEiAKBmQCsnkhnIon9O0JPb1GLoU+cp9dt3sTJL2RwWL9VOQyiuOA3C
J7q+AbNNv7QsUGcHgI2sfk6QuPcJjoOjwpuLYYgmNA0IzlmztlRgpGeq8pZ2/W76
H8RmdPcH1Eh60v/6JVjHbCzJ8L3Gly+hqHTv75ALRivvfFOcfSzIOqworGWMO1Mh
KVE+F/IHLhy/GdgxT6wgaULbDnBz8uw4IxsnAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUiNmXFT0c6/14Dhcaf252acpWP2kwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L2lObVhGVDBjNl8xNERoY2FmMjUyYWNwV1Ayay5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAAxZqEwDQYJKoZIhvcNAQELBQADggEBAK4eTZxsj1MOOlOzYlfR5IbGlXYs
zvGEmZJgbHBUndFMBvaqLA2dRSVwIQerPuxXHksF78cTkpYQMvGBr90qslC6XQ4/
6+QB75bjcYBNC83c419DHWSfS9rZvUqdStMf+gRCKKg7glF/nZKHo0jmohNptrfn
RmVcjW8u45IWQojTuUDL5o0oVm5YN0XTBZnY8TwlgsXTZ/UI4fOerFishH4BlCiX
UYfUwUhb9y07FvelHmEWXjekH7rmza0JgfsC/oN8FVVUeexZXYKh6UeJ1/obMM9l
kMQpiwAb+PpWwtXkD9JmHxuwybJcDPaYpGHZOD2eQ95z2kUg9p8T638oKLo=
-----END CERTIFICATE-----
Generated at Sat Jun 1 13:38:48 2024 by rpki-client on console-fra.rpki-client.org