Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/6QyWEFzMmEfTfEdeaUeLIPJh8qo.roa
File:                     6QyWEFzMmEfTfEdeaUeLIPJh8qo.roa (raw, json)
Hash identifier:          orXW1P2NONZYgNhDUcxGvmCUxBvgkRGEbRtW30TRbH0=
Subject key identifier:   E9:0C:96:10:5C:CC:98:47:D3:7C:47:5E:69:47:8B:20:F2:61:F2:AA
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       04AE
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/6QyWEFzMmEfTfEdeaUeLIPJh8qo.roa
Signing time:             Thu 27 Jul 2023 16:46:17 +0000
ROA not before:           Thu 27 Jul 2023 16:46:17 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     9605
IP address blocks:        219.122.76.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 23 Jun 2024 11:53:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1198 (0x4ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jul 27 16:46:17 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=E90C96105CCC9847D37C475E69478B20F261F2AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:87:eb:b0:b1:ef:32:af:5e:18:68:cd:7f:16:
                    c5:44:8e:c5:65:12:46:58:bd:c9:98:7a:6a:83:5c:
                    a3:97:f4:ca:2e:5b:a4:dc:53:27:c4:1a:b2:cb:fb:
                    d4:b4:ec:83:90:24:31:d7:da:b0:d5:c2:cc:7f:cc:
                    c8:18:9a:f0:52:01:52:e4:d5:99:2a:36:f9:20:ee:
                    75:24:78:95:3d:08:ae:dd:5f:ce:71:7f:11:a1:3a:
                    55:00:92:a2:36:47:f2:ba:d3:0d:53:be:d1:65:23:
                    7e:0d:71:ed:9c:d0:5f:61:d9:da:7a:9e:57:92:42:
                    4f:f1:3e:4d:9a:cc:0e:79:aa:c4:3b:17:4a:9d:70:
                    d9:85:f0:0f:97:51:f7:8a:20:fc:83:f1:e0:c4:d8:
                    32:5e:42:1d:af:d8:ee:71:a1:8d:aa:92:82:97:7a:
                    b4:b1:1b:1b:69:3e:ad:8e:ab:ee:c5:72:0b:29:55:
                    4a:2e:88:6f:d4:40:c6:a4:86:c0:86:0e:ad:94:c0:
                    97:fc:03:8e:c1:43:a3:e2:e7:31:1b:db:8c:14:8e:
                    cf:7b:56:25:5d:c3:e5:69:01:92:99:25:22:a5:ef:
                    1f:73:06:a9:25:e1:3a:25:42:97:2f:1e:ba:cd:7a:
                    1b:7e:ef:46:f8:92:51:91:37:b9:09:a6:3c:bc:fe:
                    cb:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:0C:96:10:5C:CC:98:47:D3:7C:47:5E:69:47:8B:20:F2:61:F2:AA
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/6QyWEFzMmEfTfEdeaUeLIPJh8qo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.122.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0f:c7:39:e3:bb:88:47:9f:8d:6e:e5:dc:33:97:37:7e:47:9c:
         47:b6:32:7d:c7:95:55:3f:7a:2d:2e:45:4d:19:46:9f:33:a5:
         ba:5a:fd:c1:4f:14:0d:2f:08:7d:3c:09:0a:62:ae:4a:7b:f4:
         ce:80:85:92:35:89:53:4b:d1:6f:f0:d5:58:b8:1a:cf:ee:ed:
         59:95:6e:a7:f9:aa:bc:ea:35:b0:f5:01:9d:3b:6d:f3:7e:40:
         dd:6c:e5:a1:04:b0:59:1b:49:c7:6e:02:b6:f3:b6:b6:81:24:
         08:05:52:f9:ce:b9:34:e2:00:6d:d8:96:28:e0:61:7e:9e:b9:
         0a:f3:15:a5:4a:47:89:c1:3a:af:c0:5d:8e:2f:93:8f:ae:cd:
         27:40:ab:47:d8:43:7c:87:64:83:ef:b9:a7:b3:34:9e:ce:a6:
         30:85:b1:9c:81:fd:d4:27:5d:03:0a:15:bc:34:73:9e:5f:ff:
         bd:fc:6a:81:46:08:28:b6:01:d5:91:c5:b5:bb:12:f4:b7:7c:
         a4:dc:78:d6:57:dd:74:26:65:06:aa:c5:ad:5f:d7:bf:6b:d8:
         f4:c0:71:c4:15:f3:38:43:47:86:c6:bc:da:81:91:74:d7:ea:
         82:54:9c:fb:a1:ed:09:8a:08:df:c4:fa:2f:4c:aa:d8:69:1b:
         1d:50:66:a5
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICBK4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA3Mjcx
NjQ2MTdaFw0yNDA3MTQwMTMwMDNaMDMxMTAvBgNVBAMTKEU5MEM5NjEwNUNDQzk4
NDdEMzdDNDc1RTY5NDc4QjIwRjI2MUYyQUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCsh+uwse8yr14YaM1/FsVEjsVlEkZYvcmYemqDXKOX9MouW6Tc
UyfEGrLL+9S07IOQJDHX2rDVwsx/zMgYmvBSAVLk1ZkqNvkg7nUkeJU9CK7dX85x
fxGhOlUAkqI2R/K60w1TvtFlI34Nce2c0F9h2dp6nleSQk/xPk2azA55qsQ7F0qd
cNmF8A+XUfeKIPyD8eDE2DJeQh2v2O5xoY2qkoKXerSxGxtpPq2Oq+7FcgspVUou
iG/UQMakhsCGDq2UwJf8A47BQ6Pi5zEb24wUjs97ViVdw+VpAZKZJSKl7x9zBqkl
4TolQpcvHrrNeht+70b4klGRN7kJpjy8/suTAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQU6QyWEFzMmEfTfEdeaUeLIPJh8qowHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5LzZReVdFRnpNbUVmVGZFZGVhVWVMSVBKaDhxby5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBALbekwwDQYJKoZIhvcNAQELBQADggEBAA/HOeO7iEefjW7l3DOXN35HnEe2
Mn3HlVU/ei0uRU0ZRp8zpbpa/cFPFA0vCH08CQpirkp79M6AhZI1iVNL0W/w1Vi4
Gs/u7VmVbqf5qrzqNbD1AZ07bfN+QN1s5aEEsFkbScduArbztraBJAgFUvnOuTTi
AG3YlijgYX6euQrzFaVKR4nBOq/AXY4vk4+uzSdAq0fYQ3yHZIPvuaezNJ7OpjCF
sZyB/dQnXQMKFbw0c55f/738aoFGCCi2AdWRxbW7EvS3fKTceNZX3XQmZQaqxa1f
179r2PTAccQV8zhDR4bGvNqBkXTX6oJUnPuh7QmKCN/E+i9MqthpGx1QZqU=
-----END CERTIFICATE-----
Generated at Sun Jun 16 12:57:20 2024 by rpki-client on console-fra.rpki-client.org