Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/59o5RU2Or0Trui2uUVN60cnCrPE.roa
File:                     59o5RU2Or0Trui2uUVN60cnCrPE.roa (raw, json)
Hash identifier:          qO0veYF/A5NyJl26ZUB1g3SoLuL9OeQjzs5g1mWzpHQ=
Subject key identifier:   E7:DA:39:45:4D:8E:AF:44:EB:BA:2D:AE:51:53:7A:D1:C9:C2:AC:F1
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0974
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/59o5RU2Or0Trui2uUVN60cnCrPE.roa
Signing time:             Sun 30 Jun 2024 01:33:41 +0000
ROA not before:           Sun 30 Jun 2024 01:33:41 +0000
ROA not after:            Tue 24 Jun 2025 10:46:45 +0000
asID:                     9605
IP address blocks:        183.73.29.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:41:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2420 (0x974)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun 30 01:33:41 2024 GMT
            Not After : Jun 24 10:46:45 2025 GMT
        Subject: CN=E7DA39454D8EAF44EBBA2DAE51537AD1C9C2ACF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:5a:b7:08:ce:0f:52:cd:f5:27:2d:55:77:51:
                    7b:27:1a:3b:78:f2:29:ff:59:57:ae:5e:c9:66:40:
                    55:a7:c2:a2:f8:ff:1f:f6:eb:d3:5e:b1:a1:9f:fb:
                    03:fb:23:5f:b2:60:f0:32:dd:86:69:31:6b:e3:fb:
                    1b:d5:e7:1e:5b:2e:83:d5:f2:7e:8b:f2:a1:8d:f2:
                    37:fa:fe:30:47:9e:d5:f5:ce:0b:c7:de:0b:6b:83:
                    7b:fa:15:21:21:fc:ed:5c:07:43:5b:5b:2b:5d:93:
                    42:9b:31:83:25:c4:03:41:84:5e:35:e2:18:b3:07:
                    b0:27:7c:6c:74:ae:58:e0:44:8c:72:c1:09:c1:02:
                    cf:5c:bb:4e:d1:6c:55:4f:c3:68:68:5c:83:40:d5:
                    5e:c6:90:43:ee:9e:e9:8b:1c:eb:a3:52:fc:33:49:
                    ee:c2:fd:23:4b:b8:d4:7a:44:41:88:73:c8:9c:f0:
                    62:eb:8e:2b:f8:6c:39:3f:64:4c:7f:c2:85:d3:37:
                    1a:b2:c9:31:24:b7:50:69:a4:ca:ec:56:ef:52:14:
                    9c:15:d7:36:28:df:c6:73:0e:20:03:70:98:61:8f:
                    0a:fd:e0:a7:9e:10:ff:ff:33:3d:ed:49:1f:4e:22:
                    45:e4:66:24:be:9d:be:de:cc:b3:ba:79:1c:69:ff:
                    10:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:DA:39:45:4D:8E:AF:44:EB:BA:2D:AE:51:53:7A:D1:C9:C2:AC:F1
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/59o5RU2Or0Trui2uUVN60cnCrPE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.73.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:c9:32:c7:ad:f3:c4:d9:b7:8c:11:67:e6:6c:73:7e:14:95:
         84:7c:3b:11:22:a6:8b:62:2c:5f:e1:1a:d5:49:26:e6:43:7f:
         7f:63:18:08:93:67:7d:12:37:1d:68:51:c7:59:82:b9:c4:7c:
         ed:49:ed:6d:fa:9f:06:96:b0:5e:70:01:f9:2c:8f:cf:e0:fe:
         91:92:67:b5:bd:9f:09:db:2a:b1:c2:32:3c:2c:8e:b2:7a:2f:
         55:f3:79:e3:08:76:67:20:bf:bb:f4:7f:39:ee:12:57:06:13:
         53:64:14:1a:f9:da:1c:65:f6:e0:b8:ef:38:95:40:ea:5d:83:
         c4:18:75:a6:9c:df:3e:07:a5:f2:64:07:ce:15:16:52:45:00:
         2c:1c:7b:22:a9:31:60:20:e4:33:d6:1b:c8:25:5f:30:3d:37:
         ed:ed:40:82:d7:80:dd:1a:33:61:f9:cc:0e:41:57:6a:c6:94:
         94:ee:c6:81:91:32:7c:c7:1f:42:12:d7:f4:39:50:89:6a:d6:
         6c:c3:a0:95:2c:ed:e9:24:a9:19:32:97:54:72:52:1c:bf:aa:
         8c:b1:bb:1e:85:e4:8f:3e:a0:be:33:1e:2e:78:e3:db:71:97:
         36:b1:f7:bb:45:49:8d:c0:94:04:e6:4c:64:b9:6f:7d:4d:eb:
         21:78:99:ee
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICCXQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA2MzAw
MTMzNDFaFw0yNTA2MjQxMDQ2NDVaMDMxMTAvBgNVBAMTKEU3REEzOTQ1NEQ4RUFG
NDRFQkJBMkRBRTUxNTM3QUQxQzlDMkFDRjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDgWrcIzg9SzfUnLVV3UXsnGjt48in/WVeuXslmQFWnwqL4/x/2
69NesaGf+wP7I1+yYPAy3YZpMWvj+xvV5x5bLoPV8n6L8qGN8jf6/jBHntX1zgvH
3gtrg3v6FSEh/O1cB0NbWytdk0KbMYMlxANBhF414hizB7AnfGx0rljgRIxywQnB
As9cu07RbFVPw2hoXINA1V7GkEPunumLHOujUvwzSe7C/SNLuNR6REGIc8ic8GLr
jiv4bDk/ZEx/woXTNxqyyTEkt1BppMrsVu9SFJwV1zYo38ZzDiADcJhhjwr94Kee
EP//Mz3tSR9OIkXkZiS+nb7ezLO6eRxp/xBlAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQU59o5RU2Or0Trui2uUVN60cnCrPEwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5LzU5bzVSVTJPcjBUcnVpMnVVVk42MGNuQ3JQRS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAC3SR0wDQYJKoZIhvcNAQELBQADggEBACrJMset88TZt4wRZ+Zsc34UlYR8
OxEipotiLF/hGtVJJuZDf39jGAiTZ30SNx1oUcdZgrnEfO1J7W36nwaWsF5wAfks
j8/g/pGSZ7W9nwnbKrHCMjwsjrJ6L1XzeeMIdmcgv7v0fznuElcGE1NkFBr52hxl
9uC47ziVQOpdg8QYdaac3z4HpfJkB84VFlJFACwceyKpMWAg5DPWG8glXzA9N+3t
QILXgN0aM2H5zA5BV2rGlJTuxoGRMnzHH0IS1/Q5UIlq1mzDoJUs7ekkqRkyl1Ry
Uhy/qoyxux6F5I8+oL4zHi5449txlzax97tFSY3AlATmTGS5b31N6yF4me4=
-----END CERTIFICATE-----
Generated at Fri Nov 22 15:23:58 2024 by rpki-client on console-fra.rpki-client.org