Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/2SgdrBN56GJ80uQhRZeerh3AXEw.roa
File:                     2SgdrBN56GJ80uQhRZeerh3AXEw.roa (raw, json)
Hash identifier:          FjwPcRQSj/pP8544/zenY4cUGavj2xst+w1CCqZWnzs=
Subject key identifier:   D9:28:1D:AC:13:79:E8:62:7C:D2:E4:21:45:97:9E:AE:1D:C0:5C:4C
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       056A
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/2SgdrBN56GJ80uQhRZeerh3AXEw.roa
Signing time:             Thu 27 Jul 2023 16:56:21 +0000
ROA not before:           Thu 27 Jul 2023 16:56:21 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     9605
IP address blocks:        183.73.16.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1386 (0x56a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jul 27 16:56:21 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=D9281DAC1379E8627CD2E42145979EAE1DC05C4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:aa:cb:1b:fa:1c:eb:d4:03:c1:52:5f:9b:72:
                    fb:ac:c8:19:8b:d3:35:bd:a0:c9:c1:22:73:e7:f5:
                    3e:d3:31:ba:6c:56:8e:4a:09:75:7d:50:88:7a:8a:
                    25:11:e4:e6:fa:fb:fd:93:7b:5e:56:db:b9:32:22:
                    fa:eb:e9:89:d7:a6:61:6c:4b:34:71:6e:9e:ff:d6:
                    5c:cc:73:8a:e5:52:7f:6c:ed:e7:8d:1e:44:60:a8:
                    05:0f:cd:ec:51:b3:22:0c:de:58:d6:f3:dc:df:b8:
                    29:f2:8b:78:4f:70:f4:b0:33:d0:b7:ff:99:ef:c4:
                    aa:48:7a:6f:bd:f4:9d:3b:a6:08:b5:33:f2:5e:36:
                    8e:ba:a0:be:6d:60:f9:03:ef:e4:8d:a1:f7:8b:a5:
                    40:f0:a3:95:ff:bf:1d:f5:28:bb:6f:e0:90:33:7c:
                    2a:08:78:0d:50:f7:ba:64:65:4f:48:cc:2d:00:11:
                    a3:32:84:ec:f0:ae:47:14:1e:6f:eb:46:57:70:eb:
                    2b:66:4f:ef:34:c4:2b:fa:50:88:8a:66:a3:a7:a6:
                    8e:c2:1b:95:7a:2e:c9:49:46:8e:64:ac:d6:cf:dc:
                    54:aa:cd:f6:e6:45:71:c9:04:06:6b:ce:75:45:a5:
                    2b:ef:ab:59:55:bd:d3:7a:49:da:a1:4a:62:b7:64:
                    e6:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:28:1D:AC:13:79:E8:62:7C:D2:E4:21:45:97:9E:AE:1D:C0:5C:4C
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/2SgdrBN56GJ80uQhRZeerh3AXEw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.73.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         33:3d:a3:91:a1:d5:81:c5:32:8f:1d:db:e7:21:ab:57:9d:09:
         5e:81:fd:17:73:81:e5:20:46:83:54:6b:f2:8f:5f:04:12:14:
         d9:50:a6:b1:69:38:9d:bf:b5:e5:31:fc:54:32:ba:88:f4:de:
         1b:7b:1e:2a:f2:d9:f1:0e:8e:79:4c:f3:c1:9b:0e:51:6b:8a:
         a6:6b:16:37:61:b6:eb:aa:2c:33:9e:22:05:39:0a:c4:0c:07:
         59:59:1f:a2:8b:c2:bc:c3:3f:4f:22:9c:81:88:11:dc:a1:3f:
         78:b5:10:9d:9f:6c:ae:81:d7:f7:94:b5:0d:6e:03:1a:63:bb:
         65:d4:1a:ad:36:08:b5:39:43:52:24:60:4d:0a:b0:61:7a:3e:
         e4:a2:49:78:12:09:45:8a:bc:c2:58:77:dc:9a:3c:25:44:b9:
         4f:08:c9:45:4e:ba:f7:ec:dd:57:c3:ff:5c:68:05:c8:c0:54:
         fb:f7:bc:32:fc:77:f0:3f:f2:c1:7c:e4:9a:4a:1d:2d:bc:03:
         3a:66:d4:86:40:4e:9e:a4:8d:02:ce:92:de:80:8a:7b:e7:78:
         89:eb:ff:e6:c6:ad:61:eb:5a:7c:6c:f5:d0:63:84:65:35:3c:
         cb:f4:79:98:a9:6a:82:cb:37:11:0e:b4:7c:06:ef:d5:79:db:
         ab:0e:59:d9
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICBWowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA3Mjcx
NjU2MjFaFw0yNDA3MTQwMTMwMDNaMDMxMTAvBgNVBAMTKEQ5MjgxREFDMTM3OUU4
NjI3Q0QyRTQyMTQ1OTc5RUFFMURDMDVDNEMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDYqssb+hzr1APBUl+bcvusyBmL0zW9oMnBInPn9T7TMbpsVo5K
CXV9UIh6iiUR5Ob6+/2Te15W27kyIvrr6YnXpmFsSzRxbp7/1lzMc4rlUn9s7eeN
HkRgqAUPzexRsyIM3ljW89zfuCnyi3hPcPSwM9C3/5nvxKpIem+99J07pgi1M/Je
No66oL5tYPkD7+SNofeLpUDwo5X/vx31KLtv4JAzfCoIeA1Q97pkZU9IzC0AEaMy
hOzwrkcUHm/rRldw6ytmT+80xCv6UIiKZqOnpo7CG5V6LslJRo5krNbP3FSqzfbm
RXHJBAZrznVFpSvvq1lVvdN6SdqhSmK3ZObLAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQU2SgdrBN56GJ80uQhRZeerh3AXEwwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5LzJTZ2RyQk41NkdKODB1UWhSWmVlcmgzQVhFdy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAK3SRAwDQYJKoZIhvcNAQELBQADggEBADM9o5Gh1YHFMo8d2+chq1edCV6B
/RdzgeUgRoNUa/KPXwQSFNlQprFpOJ2/teUx/FQyuoj03ht7Hiry2fEOjnlM88Gb
DlFriqZrFjdhtuuqLDOeIgU5CsQMB1lZH6KLwrzDP08inIGIEdyhP3i1EJ2fbK6B
1/eUtQ1uAxpju2XUGq02CLU5Q1IkYE0KsGF6PuSiSXgSCUWKvMJYd9yaPCVEuU8I
yUVOuvfs3VfD/1xoBcjAVPv3vDL8d/A/8sF85JpKHS28Azpm1IZATp6kjQLOkt6A
invneInr/+bGrWHrWnxs9dBjhGU1PMv0eZipaoLLNxEOtHwG79V526sOWdk=
-----END CERTIFICATE-----
Generated at Sat Jun 1 13:38:46 2024 by rpki-client on console-fra.rpki-client.org