Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/m5-D6I03FdkHV4qXRrqY4Wwumrw.roa
File:                     m5-D6I03FdkHV4qXRrqY4Wwumrw.roa (raw, json)
Hash identifier:          JpQFN53p/zorCOx++OGIsEH0UkFiVXCX0y8762vlr/c=
Subject key identifier:   9B:9F:83:E8:8D:37:15:D9:07:57:8A:97:46:BA:98:E1:6C:2E:9A:BC
Certificate issuer:       /CN=F89E0F15C1E20E191AAF17288F6E30FF01869A6E
Certificate serial:       54
Authority key identifier: F8:9E:0F:15:C1:E2:0E:19:1A:AF:17:28:8F:6E:30:FF:01:86:9A:6E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/m5-D6I03FdkHV4qXRrqY4Wwumrw.roa
Signing time:             Sun 30 Jun 2024 01:54:25 +0000
ROA not before:           Sun 30 Jun 2024 01:54:25 +0000
ROA not after:            Tue 24 Jun 2025 10:46:45 +0000
asID:                     9605
IP address blocks:        146.160.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 84 (0x54)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F89E0F15C1E20E191AAF17288F6E30FF01869A6E
        Validity
            Not Before: Jun 30 01:54:25 2024 GMT
            Not After : Jun 24 10:46:45 2025 GMT
        Subject: CN=9B9F83E88D3715D907578A9746BA98E16C2E9ABC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:26:ef:fc:90:2c:48:6c:04:91:62:f7:ce:a4:
                    6f:65:0b:9f:fb:5b:20:ba:ef:1d:ad:07:d1:78:9a:
                    d3:0a:80:e3:e0:fc:5a:57:3e:d2:58:87:cc:be:8a:
                    92:06:05:87:04:a7:94:e4:f2:69:e1:17:7a:20:a6:
                    14:ce:c7:ec:1e:e5:6b:3f:de:ec:8b:6c:3b:67:fd:
                    59:f6:5c:cb:15:4d:d3:2f:c9:1f:8d:4e:05:8b:ee:
                    7f:cd:8f:bf:62:24:ab:b5:36:65:7b:16:4e:06:41:
                    1c:77:d1:64:7f:a2:3c:82:ea:ea:54:fd:02:6e:d5:
                    db:86:55:67:58:3a:f6:57:3a:54:68:e6:bf:61:a0:
                    ef:c8:02:03:9d:d6:d6:e1:5d:d4:f9:7b:19:93:1b:
                    2d:b4:0b:95:6a:7d:ec:c7:55:d3:ed:cd:3b:a3:c4:
                    5c:82:a5:79:5c:66:86:19:c1:49:67:f6:8b:31:db:
                    49:38:ea:4e:8e:c9:9b:69:e2:e5:f8:34:af:a2:c9:
                    56:13:ca:60:6e:89:b0:7b:3f:d5:96:bb:33:56:70:
                    4e:bb:85:2f:e8:d7:55:54:b6:fb:73:15:e7:e2:3d:
                    a2:a1:bd:e6:10:57:d4:66:8e:dd:41:a3:ea:ea:b7:
                    a5:2c:00:88:1f:88:47:ee:7c:e0:e7:a5:09:d8:ca:
                    9f:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:9F:83:E8:8D:37:15:D9:07:57:8A:97:46:BA:98:E1:6C:2E:9A:BC
            X509v3 Authority Key Identifier:
                keyid:F8:9E:0F:15:C1:E2:0E:19:1A:AF:17:28:8F:6E:30:FF:01:86:9A:6E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/m5-D6I03FdkHV4qXRrqY4Wwumrw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.160.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         0e:82:6c:ae:9b:04:6f:55:d1:35:ef:5e:42:d5:22:3d:9a:60:
         01:c6:0f:cf:18:22:59:a2:5e:37:09:b0:d6:35:3c:98:12:4c:
         de:d0:c5:cc:ef:91:4e:54:72:21:0c:46:9f:33:b8:4e:13:59:
         ae:24:d7:6c:20:02:b6:0f:d7:0e:9a:97:d1:2a:67:15:84:f2:
         27:4a:f2:7f:ee:68:d5:80:6e:b6:ae:c9:15:af:b1:05:de:a4:
         bc:b1:a6:99:05:03:08:7c:8d:6e:65:ab:bd:7c:4f:cc:93:be:
         c9:cd:25:2f:54:2e:c2:42:cf:b5:f8:8e:df:36:d1:cb:50:f9:
         cf:19:70:1e:2a:03:61:db:44:f4:3d:d0:5e:69:76:c6:b6:93:
         82:ab:18:69:98:c0:ba:d4:9e:79:e7:0e:de:05:5e:78:1f:98:
         80:27:d1:ab:da:c5:a0:08:1b:ab:3a:a4:0b:8c:a2:65:be:00:
         d9:28:ed:30:7b:fc:77:ef:8c:2d:16:5f:c7:9a:9f:9c:6a:c2:
         0e:0d:b2:be:6c:b0:cb:9c:dd:5c:41:9b:d1:cd:76:ea:61:f3:
         5d:fe:83:56:f4:4d:db:ab:46:79:6f:a8:3f:ca:16:34:e4:c9:
         44:58:72:43:95:fe:bf:b9:67:7a:8d:66:31:ad:05:64:e5:7a:
         6a:62:91:f6
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBVDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhGODlF
MEYxNUMxRTIwRTE5MUFBRjE3Mjg4RjZFMzBGRjAxODY5QTZFMB4XDTI0MDYzMDAx
NTQyNVoXDTI1MDYyNDEwNDY0NVowMzExMC8GA1UEAxMoOUI5RjgzRTg4RDM3MTVE
OTA3NTc4QTk3NDZCQTk4RTE2QzJFOUFCQzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAO8m7/yQLEhsBJFi986kb2ULn/tbILrvHa0H0Xia0wqA4+D8Wlc+
0liHzL6KkgYFhwSnlOTyaeEXeiCmFM7H7B7laz/e7ItsO2f9WfZcyxVN0y/JH41O
BYvuf82Pv2Ikq7U2ZXsWTgZBHHfRZH+iPILq6lT9Am7V24ZVZ1g69lc6VGjmv2Gg
78gCA53W1uFd1Pl7GZMbLbQLlWp97MdV0+3NO6PEXIKleVxmhhnBSWf2izHbSTjq
To7Jm2ni5fg0r6LJVhPKYG6JsHs/1Za7M1ZwTruFL+jXVVS2+3MV5+I9oqG95hBX
1GaO3UGj6uq3pSwAiB+IR+584OelCdjKn8ECAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBSbn4PojTcV2QdXipdGupjhbC6avDAfBgNVHSMEGDAWgBT4ng8VweIOGRqvFyiP
bjD/AYaabjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzA5Ly1KNFBGY0hpRGhrYXJ4Y29qMjR3X3dHR21tNC5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLy1KNFBGY0hpRGhrYXJ4Y29qMjR3X3dH
R21tNC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8zMDkvbTUtRDZJMDNGZGtIVjRxWFJycVk0V3d1bXJ3LnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEB5KgADANBgkqhkiG9w0BAQsFAAOCAQEADoJsrpsEb1XRNe9eQtUiPZpgAcYP
zxgiWaJeNwmw1jU8mBJM3tDFzO+RTlRyIQxGnzO4ThNZriTXbCACtg/XDpqX0Spn
FYTyJ0ryf+5o1YButq7JFa+xBd6kvLGmmQUDCHyNbmWrvXxPzJO+yc0lL1QuwkLP
tfiO3zbRy1D5zxlwHioDYdtE9D3QXml2xraTgqsYaZjAutSeeecO3gVeeB+YgCfR
q9rFoAgbqzqkC4yiZb4A2SjtMHv8d++MLRZfx5qfnGrCDg2yvmywy5zdXEGb0c12
6mHzXf6DVvRN26tGeW+oP8oWNOTJRFhyQ5X+v7lneo1mMa0FZOV6amKR9g==
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:48:27 2025 by rpki-client