Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/uEVWk5ny6YrwD4g8ry7BbwUHreo.roa
File:                     uEVWk5ny6YrwD4g8ry7BbwUHreo.roa (raw, json)
Hash identifier:          oJnul0Bck0CxHfSrf54+wk9cFG12uCNq1CoGtjTghGM=
Subject key identifier:   B8:45:56:93:99:F2:E9:8A:F0:0F:88:3C:AF:2E:C1:6F:05:07:AD:EA
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       05FC
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/uEVWk5ny6YrwD4g8ry7BbwUHreo.roa
Signing time:             Thu 29 Feb 2024 01:35:45 +0000
ROA not before:           Thu 29 Feb 2024 01:35:45 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     9605
IP address blocks:        49.97.94.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 23 Jun 2024 11:53:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1532 (0x5fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Feb 29 01:35:45 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=B845569399F2E98AF00F883CAF2EC16F0507ADEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:10:65:65:d7:f5:cf:6a:a3:af:f2:6d:69:e4:
                    31:da:7a:58:4b:2e:11:d6:f9:1f:93:cb:49:f2:80:
                    d3:ca:8d:02:22:7f:81:1f:54:e2:3c:e6:e9:24:24:
                    77:18:cb:a7:3f:68:70:4d:3c:e3:89:38:b4:d7:2b:
                    8a:67:63:a8:d9:9d:8e:db:b3:82:f7:8e:5e:67:f2:
                    d3:75:f5:3f:d0:59:c2:f0:9b:79:69:51:37:4d:16:
                    02:6e:98:21:c0:4f:69:57:a0:b1:2f:62:6e:1b:fe:
                    3c:88:08:e8:4d:a8:51:39:a6:2b:7a:ac:74:25:81:
                    fb:6f:aa:2f:36:40:16:1f:2d:5d:83:f5:a5:b6:5d:
                    b4:64:49:d5:77:ba:28:fb:97:88:e1:15:16:68:64:
                    ca:3f:1c:52:2f:fa:b8:c2:b1:d4:4a:78:3f:16:85:
                    ad:d3:a0:c0:cf:f3:4e:58:42:5c:1e:3c:f2:d1:53:
                    f5:e2:81:a2:45:73:6a:6b:d9:69:a4:78:34:a8:01:
                    2b:f3:f8:bf:e1:7e:43:70:f8:52:37:70:66:e0:8c:
                    48:e8:0c:2a:95:76:42:a3:60:ae:66:7f:8d:ec:55:
                    69:fb:d1:89:63:98:b4:c8:39:9a:87:50:2a:15:1a:
                    11:2e:3b:b5:f1:6f:b8:02:12:3e:0d:2d:5a:36:ee:
                    f4:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:45:56:93:99:F2:E9:8A:F0:0F:88:3C:AF:2E:C1:6F:05:07:AD:EA
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/uEVWk5ny6YrwD4g8ry7BbwUHreo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.97.94.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a9:d3:a9:07:5f:3e:a9:b7:05:c9:a4:bd:37:23:a4:b4:18:f8:
         43:08:14:2e:26:80:48:57:6a:aa:b0:0b:48:fb:f2:4f:8f:a2:
         02:60:d8:55:47:e6:78:78:d5:7a:84:15:3e:a2:7d:86:65:67:
         64:6f:fd:fd:2f:af:8c:94:5c:53:09:1c:9b:fa:15:bf:01:bf:
         0f:c3:59:37:42:dc:95:ba:32:dc:72:50:41:86:d5:d9:c5:38:
         db:d4:b8:be:4b:47:e1:2b:1c:91:32:16:91:2e:56:8f:9b:6d:
         59:cc:30:30:f7:48:51:db:5e:9f:6a:d0:16:f4:cd:fe:e9:2f:
         8f:e2:32:d6:09:0c:a8:22:c8:84:71:4f:e8:67:fc:65:91:04:
         02:53:de:13:50:d5:d1:4d:90:f0:8f:4a:ea:33:d4:7b:df:6d:
         4b:24:65:61:f4:4c:65:e6:38:c2:3a:5c:b5:57:73:8b:5c:6e:
         b1:df:49:30:55:f5:25:0e:54:cb:bb:da:53:a6:3a:a5:cb:52:
         7c:4f:f2:1b:d2:2d:7d:2c:1b:ea:88:fa:1f:50:6d:49:f4:d1:
         15:e5:75:ae:64:37:86:72:33:90:8b:34:78:cd:4c:c8:46:df:
         d5:b7:4f:59:07:56:7f:7d:be:c2:7d:b4:16:97:d9:64:ed:c8:
         ef:cc:b8:17
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICBfwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDAyMjkw
MTM1NDVaFw0yNTAyMTQwMTMwMDNaMDMxMTAvBgNVBAMTKEI4NDU1NjkzOTlGMkU5
OEFGMDBGODgzQ0FGMkVDMTZGMDUwN0FERUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDCEGVl1/XPaqOv8m1p5DHaelhLLhHW+R+Ty0nygNPKjQIif4Ef
VOI85ukkJHcYy6c/aHBNPOOJOLTXK4pnY6jZnY7bs4L3jl5n8tN19T/QWcLwm3lp
UTdNFgJumCHAT2lXoLEvYm4b/jyICOhNqFE5pit6rHQlgftvqi82QBYfLV2D9aW2
XbRkSdV3uij7l4jhFRZoZMo/HFIv+rjCsdRKeD8Wha3ToMDP805YQlwePPLRU/Xi
gaJFc2pr2WmkeDSoASvz+L/hfkNw+FI3cGbgjEjoDCqVdkKjYK5mf43sVWn70Ylj
mLTIOZqHUCoVGhEuO7Xxb7gCEj4NLVo27vQ1AgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUuEVWk5ny6YrwD4g8ry7BbwUHreowHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L3VFVldrNW55Nllyd0Q0ZzhyeTdCYndVSHJlby5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAExYV4wDQYJKoZIhvcNAQELBQADggEBAKnTqQdfPqm3BcmkvTcjpLQY+EMI
FC4mgEhXaqqwC0j78k+PogJg2FVH5nh41XqEFT6ifYZlZ2Rv/f0vr4yUXFMJHJv6
Fb8Bvw/DWTdC3JW6MtxyUEGG1dnFONvUuL5LR+ErHJEyFpEuVo+bbVnMMDD3SFHb
Xp9q0Bb0zf7pL4/iMtYJDKgiyIRxT+hn/GWRBAJT3hNQ1dFNkPCPSuoz1HvfbUsk
ZWH0TGXmOMI6XLVXc4tcbrHfSTBV9SUOVMu72lOmOqXLUnxP8hvSLX0sG+qI+h9Q
bUn00RXlda5kN4ZyM5CLNHjNTMhG39W3T1kHVn99vsJ9tBaX2WTtyO/MuBc=
-----END CERTIFICATE-----
Generated at Sun Jun 16 14:31:56 2024 by rpki-client on console-ams.rpki-client.org