Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/kb6K8jN6RHFSog170mMmHBR92yM.roa
File:                     kb6K8jN6RHFSog170mMmHBR92yM.roa (raw, json)
Hash identifier:          kh4zYrBWAJFEgQbdgX3zaMpAlAKcRZDWpMZLPRthsgo=
Subject key identifier:   91:BE:8A:F2:33:7A:44:71:52:A2:0D:7B:D2:63:26:1C:14:7D:DB:23
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       04DD
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/kb6K8jN6RHFSog170mMmHBR92yM.roa
Signing time:             Thu 27 Jul 2023 16:50:09 +0000
ROA not before:           Thu 27 Jul 2023 16:50:09 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     9605
IP address blocks:        49.105.79.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1245 (0x4dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jul 27 16:50:09 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=91BE8AF2337A447152A20D7BD263261C147DDB23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:ca:fd:6b:86:c7:b0:9b:37:72:cc:e0:7d:40:
                    be:a6:3f:70:ca:ad:be:d9:87:bc:ab:9b:eb:ea:7b:
                    4e:50:16:a5:9e:99:df:09:01:bb:5c:ec:23:2d:6a:
                    fe:3a:52:93:f7:45:80:bc:9a:03:00:b2:93:41:26:
                    4b:fa:4f:d0:ee:8d:20:9e:cd:50:9b:48:f1:04:8f:
                    5e:06:0e:3b:6b:6b:1c:4b:3b:6d:b0:88:9f:85:e1:
                    09:d6:17:c7:0b:fb:e2:ce:b5:17:d7:c6:33:3e:c5:
                    44:cb:3e:58:98:ba:ca:71:81:d7:f7:e4:01:01:6d:
                    5e:f2:08:53:45:a3:bd:c3:28:1f:f4:c6:26:f6:6f:
                    8c:16:cd:7d:a8:29:e5:e0:c7:98:a6:fb:6e:eb:16:
                    bf:1f:0e:37:13:ea:d7:7c:49:9c:1c:a8:2e:d8:96:
                    cc:2f:09:72:52:de:5b:48:31:9f:d6:68:1f:f2:df:
                    fd:63:80:d9:74:69:69:5c:e3:f0:6b:cf:02:e5:ca:
                    10:e1:a8:cb:3d:a2:56:37:14:c6:74:37:c8:3b:4f:
                    da:14:f5:d6:4c:fd:fe:6e:1c:45:8c:c0:70:31:da:
                    7c:90:da:db:ce:4c:10:85:2a:66:ca:b1:99:e7:35:
                    e3:35:1a:dc:86:2f:84:42:eb:4a:79:8a:11:99:c4:
                    28:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:BE:8A:F2:33:7A:44:71:52:A2:0D:7B:D2:63:26:1C:14:7D:DB:23
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/kb6K8jN6RHFSog170mMmHBR92yM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.105.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:d4:34:6e:d9:df:3d:ef:68:94:d1:cd:55:db:e4:76:01:66:
         0f:b9:91:e2:cb:53:fa:0e:34:f0:da:aa:d4:ef:d7:90:bf:7e:
         87:9e:c8:93:81:8a:c9:27:13:8d:60:e6:9c:4d:78:ca:96:40:
         ed:7c:7c:03:f2:a0:9a:a3:ed:ff:04:4a:2d:32:d2:b2:b4:39:
         fc:48:07:3d:04:3f:ec:63:bf:b6:ed:f5:ad:26:35:43:0d:71:
         80:2f:bc:2b:c3:ac:34:ad:45:de:5c:12:d9:28:3e:34:f4:b5:
         cd:1a:d2:37:21:01:5d:9f:4c:c0:24:70:57:ef:d5:a5:8c:da:
         89:5e:66:a1:a5:f3:ff:a2:2a:99:dd:55:5e:af:91:e7:70:48:
         fb:05:3a:84:53:c7:8a:2c:a0:ff:5d:0a:97:cb:5c:36:07:18:
         b4:92:c3:cc:be:62:43:89:50:e4:0e:ea:82:4d:23:fe:8f:a3:
         df:56:44:30:1d:76:f6:c0:3b:0e:fb:2d:88:0b:6b:fd:e0:91:
         b7:af:e5:81:4b:5b:8c:3e:e1:c7:64:b6:59:06:b0:dc:68:ee:
         7f:15:9b:9b:9b:cc:ac:a5:ba:4c:66:f8:f3:32:99:33:3b:ed:
         7d:c3:34:07:ad:51:e7:64:40:1a:ce:a0:09:26:73:53:08:7a:
         05:43:0a:ba
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICBN0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA3Mjcx
NjUwMDlaFw0yNDA3MTQwMTMwMDNaMDMxMTAvBgNVBAMTKDkxQkU4QUYyMzM3QTQ0
NzE1MkEyMEQ3QkQyNjMyNjFDMTQ3RERCMjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDcyv1rhsewmzdyzOB9QL6mP3DKrb7Zh7yrm+vqe05QFqWemd8J
Abtc7CMtav46UpP3RYC8mgMAspNBJkv6T9DujSCezVCbSPEEj14GDjtraxxLO22w
iJ+F4QnWF8cL++LOtRfXxjM+xUTLPliYuspxgdf35AEBbV7yCFNFo73DKB/0xib2
b4wWzX2oKeXgx5im+27rFr8fDjcT6td8SZwcqC7YlswvCXJS3ltIMZ/WaB/y3/1j
gNl0aWlc4/BrzwLlyhDhqMs9olY3FMZ0N8g7T9oU9dZM/f5uHEWMwHAx2nyQ2tvO
TBCFKmbKsZnnNeM1GtyGL4RC60p5ihGZxCi/AgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUkb6K8jN6RHFSog170mMmHBR92yMwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L2tiNks4ak42UkhGU29nMTcwbU1tSEJSOTJ5TS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAAxaU8wDQYJKoZIhvcNAQELBQADggEBAB/UNG7Z3z3vaJTRzVXb5HYBZg+5
keLLU/oONPDaqtTv15C/foeeyJOBisknE41g5pxNeMqWQO18fAPyoJqj7f8ESi0y
0rK0OfxIBz0EP+xjv7bt9a0mNUMNcYAvvCvDrDStRd5cEtkoPjT0tc0a0jchAV2f
TMAkcFfv1aWM2oleZqGl8/+iKpndVV6vkedwSPsFOoRTx4osoP9dCpfLXDYHGLSS
w8y+YkOJUOQO6oJNI/6Po99WRDAddvbAOw77LYgLa/3gkbev5YFLW4w+4cdktlkG
sNxo7n8Vm5ubzKylukxm+PMymTM77X3DNAetUedkQBrOoAkmc1MIegVDCro=
-----END CERTIFICATE-----
Generated at Sat Jun 1 15:54:32 2024 by rpki-client on console-ams.rpki-client.org