Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/yJFclX9JMtd7BoQvniLe4sVTtG8.roa
File:                     yJFclX9JMtd7BoQvniLe4sVTtG8.roa (raw, json)
Hash identifier:          gcP04tyV80WVIq+MWQdiW55fcKzfg6w0SoDazmjlb34=
Subject key identifier:   C8:91:5C:95:7F:49:32:D7:7B:06:84:2F:9E:22:DE:E2:C5:53:B4:6F
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0A8F
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/yJFclX9JMtd7BoQvniLe4sVTtG8.roa
Signing time:             Sun 30 Jun 2024 01:52:39 +0000
ROA not before:           Sun 30 Jun 2024 01:52:39 +0000
ROA not after:            Tue 24 Jun 2025 10:46:45 +0000
asID:                     9605
IP address blocks:        49.101.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2703 (0xa8f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun 30 01:52:39 2024 GMT
            Not After : Jun 24 10:46:45 2025 GMT
        Subject: CN=C8915C957F4932D77B06842F9E22DEE2C553B46F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:89:01:0f:10:e7:1c:f3:5f:63:76:62:34:dd:
                    94:00:f9:34:0d:9d:ea:9f:e9:4f:59:b9:7a:ed:64:
                    33:35:26:8f:d2:62:12:14:a7:f4:d6:57:73:07:66:
                    0d:aa:38:8e:27:fd:73:ab:f5:78:46:cd:d7:5a:9f:
                    0d:d3:04:e7:b0:d6:5a:1d:e9:2b:49:9f:73:9f:44:
                    5b:75:8a:f2:8e:b6:4b:15:1e:bc:f0:5d:9c:96:ab:
                    96:08:3b:6b:40:1d:8d:b2:d9:e3:1f:be:3f:6b:58:
                    e9:37:08:a5:35:3b:ed:80:44:2d:b6:b2:d3:2a:49:
                    12:2e:6a:4c:57:c0:58:46:94:42:81:f3:48:5d:05:
                    0c:74:14:d1:b7:50:66:a2:1b:e5:79:cb:8c:c7:47:
                    68:d3:ef:46:e3:e9:50:df:69:4e:ee:39:99:fc:48:
                    3a:23:1e:8a:29:6a:46:9d:cb:cd:e0:8d:32:81:22:
                    e4:fa:c4:0c:59:40:8c:d2:a7:50:db:00:2d:c5:3b:
                    b7:ff:53:07:d8:f9:99:e0:96:92:9f:0d:a2:77:5f:
                    0d:8e:90:83:9d:4a:9e:12:6d:fb:48:be:43:c3:c3:
                    24:3e:82:34:9a:27:53:6b:f2:c1:0f:4c:81:7a:92:
                    af:b2:64:e4:f3:5a:e0:1c:3a:52:68:65:22:b1:19:
                    25:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:91:5C:95:7F:49:32:D7:7B:06:84:2F:9E:22:DE:E2:C5:53:B4:6F
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/yJFclX9JMtd7BoQvniLe4sVTtG8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.101.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         b1:b0:33:44:88:9a:76:67:df:7f:7e:a5:23:2d:32:46:03:14:
         9c:e3:31:97:57:ec:fd:75:6d:c3:02:98:19:c5:a2:51:89:71:
         0b:43:aa:2f:a2:97:bb:d5:e9:3f:40:ea:ed:cb:b5:7d:23:0c:
         f4:4c:e8:16:9a:e1:34:18:94:2b:91:3c:ca:c1:48:d4:8a:e3:
         cc:5c:6b:1d:07:6a:cc:ec:ac:85:0c:64:e4:06:f8:24:f7:de:
         67:b6:e6:93:85:43:3f:93:7d:d5:82:4c:f3:66:69:a8:f7:bb:
         b9:ab:77:31:87:b5:93:fe:6d:c0:26:ee:45:41:8b:ad:72:32:
         48:c5:34:c3:21:34:d3:ad:2d:3a:ad:21:d7:99:02:b5:e9:b7:
         e9:4f:4b:1e:2e:26:be:9d:d7:59:2c:8d:41:94:0a:6d:7c:3f:
         ff:98:4d:b8:0c:84:78:5d:3f:b8:b7:2d:a4:57:ef:63:70:e6:
         fa:ad:23:43:f1:24:34:5c:da:91:22:30:52:42:92:ff:92:04:
         2a:ab:80:9b:17:1a:1b:57:69:34:93:15:03:ad:af:61:77:f9:
         66:82:3c:4d:82:f7:1e:36:0d:72:ea:79:65:e0:b8:f1:75:86:
         d6:ce:01:59:63:37:b7:99:f9:f6:0f:51:9d:83:43:6b:e6:dd:
         dc:e6:39:c0
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICCo8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA2MzAw
MTUyMzlaFw0yNTA2MjQxMDQ2NDVaMDMxMTAvBgNVBAMTKEM4OTE1Qzk1N0Y0OTMy
RDc3QjA2ODQyRjlFMjJERUUyQzU1M0I0NkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDfiQEPEOcc819jdmI03ZQA+TQNneqf6U9ZuXrtZDM1Jo/SYhIU
p/TWV3MHZg2qOI4n/XOr9XhGzddanw3TBOew1lod6StJn3OfRFt1ivKOtksVHrzw
XZyWq5YIO2tAHY2y2eMfvj9rWOk3CKU1O+2ARC22stMqSRIuakxXwFhGlEKB80hd
BQx0FNG3UGaiG+V5y4zHR2jT70bj6VDfaU7uOZn8SDojHoopakady83gjTKBIuT6
xAxZQIzSp1DbAC3FO7f/UwfY+ZnglpKfDaJ3Xw2OkIOdSp4SbftIvkPDwyQ+gjSa
J1Nr8sEPTIF6kq+yZOTzWuAcOlJoZSKxGSUFAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUyJFclX9JMtd7BoQvniLe4sVTtG8wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L3lKRmNsWDlKTXRkN0JvUXZuaUxlNHNWVHRHOC5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAYxZYAwDQYJKoZIhvcNAQELBQADggEBALGwM0SImnZn339+pSMtMkYDFJzj
MZdX7P11bcMCmBnFolGJcQtDqi+il7vV6T9A6u3LtX0jDPRM6Baa4TQYlCuRPMrB
SNSK48xcax0HaszsrIUMZOQG+CT33me25pOFQz+TfdWCTPNmaaj3u7mrdzGHtZP+
bcAm7kVBi61yMkjFNMMhNNOtLTqtIdeZArXpt+lPSx4uJr6d11ksjUGUCm18P/+Y
TbgMhHhdP7i3LaRX72Nw5vqtI0PxJDRc2pEiMFJCkv+SBCqrgJsXGhtXaTSTFQOt
r2F3+WaCPE2C9x42DXLqeWXguPF1htbOAVljN7eZ+fYPUZ2DQ2vm3dzmOcA=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:24:46 2025 by rpki-client