Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/vJlPpZShiYmB3OGhL3qfmWmkLpg.roa
File:                     vJlPpZShiYmB3OGhL3qfmWmkLpg.roa (raw, json)
Hash identifier:          hI2KNQWIoyqildmyiPHSBjbniJpl5Gu+JdU67r9PnMY=
Subject key identifier:   BC:99:4F:A5:94:A1:89:89:81:DC:E1:A1:2F:7A:9F:99:69:A4:2E:98
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       04BE
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/vJlPpZShiYmB3OGhL3qfmWmkLpg.roa
Signing time:             Thu 27 Jul 2023 16:48:13 +0000
ROA not before:           Thu 27 Jul 2023 16:48:13 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     9605
IP address blocks:        49.107.160.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1214 (0x4be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jul 27 16:48:13 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=BC994FA594A1898981DCE1A12F7A9F9969A42E98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:5d:c1:44:ea:6c:1a:8f:0e:be:78:c5:e9:6c:
                    53:da:ec:89:1a:93:c6:cf:46:c1:57:78:c5:f4:c2:
                    1c:47:be:2b:a0:04:ee:fd:5b:ba:73:64:b3:ec:00:
                    94:70:a1:51:78:1c:45:22:bc:4e:5c:9c:f4:f1:98:
                    60:21:26:21:9f:d2:98:e6:a7:35:fe:ea:87:80:83:
                    74:33:e1:47:57:73:87:a5:7f:b1:90:66:e3:4a:0c:
                    0c:0b:7d:76:d8:de:69:4f:43:48:ec:25:ca:6a:53:
                    c6:64:64:01:01:75:b9:50:cf:28:72:f4:ba:52:1e:
                    94:e2:b5:53:03:64:6a:9c:70:94:ad:1b:c6:cf:08:
                    4a:f7:af:96:3a:f5:d6:8e:68:f7:3b:18:2d:0e:9d:
                    18:9a:d8:34:44:9a:1c:39:bf:2f:16:a4:76:10:c7:
                    89:28:57:6e:60:14:e0:1b:48:28:4d:0c:b5:0a:3c:
                    ad:8d:3c:07:9a:fc:cd:c5:89:83:63:a8:97:ad:99:
                    25:de:c9:ff:06:01:35:d4:d9:7f:8b:0d:07:f9:04:
                    36:31:d4:27:b1:a8:72:64:1c:71:63:7c:77:c2:bb:
                    25:d3:e5:3f:54:b4:3f:af:49:3e:1e:ca:fc:d5:8b:
                    97:a0:2f:83:a2:21:92:15:9d:f8:b1:fe:99:e3:82:
                    fd:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:99:4F:A5:94:A1:89:89:81:DC:E1:A1:2F:7A:9F:99:69:A4:2E:98
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/vJlPpZShiYmB3OGhL3qfmWmkLpg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.107.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         9f:32:56:3f:50:01:b6:cb:00:bf:cc:c3:57:d6:13:83:fc:48:
         e1:89:91:c4:8d:be:3c:6d:4d:36:02:5b:54:aa:3f:38:30:66:
         10:f7:06:98:c4:50:67:b6:21:73:03:d1:e1:56:71:18:42:0c:
         4e:5d:5a:97:75:d9:c9:e2:30:a4:35:43:0d:4c:11:61:60:c4:
         ce:29:dd:e0:14:9f:bd:de:a9:f0:27:e7:43:4b:23:39:37:28:
         6e:5d:e0:ea:7c:4a:28:50:92:ca:32:96:94:26:44:52:c1:ac:
         1a:f8:e0:b8:18:74:9b:ce:12:1c:f4:6c:43:42:c8:3c:17:49:
         2c:b6:a1:28:1a:fb:28:75:e7:5e:ac:4d:88:90:7c:64:75:94:
         8e:b2:30:b6:89:f0:16:ab:40:01:6e:1a:4e:5b:59:87:b2:c6:
         1e:f9:73:a2:d3:00:bc:28:e5:94:eb:1b:3c:ac:00:44:7c:98:
         70:6a:f3:0d:ac:cd:98:75:56:ea:f8:1c:f8:da:bb:83:b6:27:
         28:a5:29:4b:a4:17:fc:44:f1:e7:55:fb:87:30:f5:67:a5:e6:
         d5:31:37:f8:41:c6:3c:39:3e:3b:08:e7:06:10:f9:16:40:b1:
         a7:c3:c2:eb:63:cd:f8:16:93:8b:96:91:95:9b:bd:cd:31:ee:
         c5:da:b4:b3
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICBL4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA3Mjcx
NjQ4MTNaFw0yNDA3MTQwMTMwMDNaMDMxMTAvBgNVBAMTKEJDOTk0RkE1OTRBMTg5
ODk4MURDRTFBMTJGN0E5Rjk5NjlBNDJFOTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDVXcFE6mwajw6+eMXpbFPa7Ikak8bPRsFXeMX0whxHviugBO79
W7pzZLPsAJRwoVF4HEUivE5cnPTxmGAhJiGf0pjmpzX+6oeAg3Qz4UdXc4elf7GQ
ZuNKDAwLfXbY3mlPQ0jsJcpqU8ZkZAEBdblQzyhy9LpSHpTitVMDZGqccJStG8bP
CEr3r5Y69daOaPc7GC0OnRia2DREmhw5vy8WpHYQx4koV25gFOAbSChNDLUKPK2N
PAea/M3FiYNjqJetmSXeyf8GATXU2X+LDQf5BDYx1CexqHJkHHFjfHfCuyXT5T9U
tD+vST4eyvzVi5egL4OiIZIVnfix/pnjgv0NAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUvJlPpZShiYmB3OGhL3qfmWmkLpgwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L3ZKbFBwWlNoaVltQjNPR2hMM3FmbVdta0xwZy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAUxa6AwDQYJKoZIhvcNAQELBQADggEBAJ8yVj9QAbbLAL/Mw1fWE4P8SOGJ
kcSNvjxtTTYCW1SqPzgwZhD3BpjEUGe2IXMD0eFWcRhCDE5dWpd12cniMKQ1Qw1M
EWFgxM4p3eAUn73eqfAn50NLIzk3KG5d4Op8SihQksoylpQmRFLBrBr44LgYdJvO
Ehz0bENCyDwXSSy2oSga+yh1516sTYiQfGR1lI6yMLaJ8BarQAFuGk5bWYeyxh75
c6LTALwo5ZTrGzysAER8mHBq8w2szZh1Vur4HPjau4O2JyilKUukF/xE8edV+4cw
9Wel5tUxN/hBxjw5PjsI5wYQ+RZAsafDwutjzfgWk4uWkZWbvc0x7sXatLM=
-----END CERTIFICATE-----
Generated at Sat Jun 1 13:38:48 2024 by rpki-client on console-fra.rpki-client.org