Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/72wtNIS8UR_3NwfRGLRGQCJNw7I.roa
File:                     72wtNIS8UR_3NwfRGLRGQCJNw7I.roa (raw, json)
Hash identifier:          aNqv2hCO9nt8paNpB6RLt1GwJG0+Ny6JCI3g9lmglnk=
Subject key identifier:   EF:6C:2D:34:84:BC:51:1F:F7:37:07:D1:18:B4:46:40:22:4D:C3:B2
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0A01
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/72wtNIS8UR_3NwfRGLRGQCJNw7I.roa
Signing time:             Sun 30 Jun 2024 01:42:31 +0000
ROA not before:           Sun 30 Jun 2024 01:42:31 +0000
ROA not after:            Tue 24 Jun 2025 10:46:45 +0000
asID:                     9605
IP address blocks:        110.158.190.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2561 (0xa01)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun 30 01:42:31 2024 GMT
            Not After : Jun 24 10:46:45 2025 GMT
        Subject: CN=EF6C2D3484BC511FF73707D118B44640224DC3B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:db:7a:e8:dd:8c:84:7f:d3:fe:38:7e:39:b8:
                    b8:c6:66:11:8d:65:e5:9d:8b:f7:09:d6:bc:d1:2e:
                    5b:75:02:fe:05:6b:8e:55:fb:7c:88:ce:38:8f:8b:
                    f7:b8:cf:4b:63:a0:9f:ec:18:93:90:25:76:bb:4d:
                    15:8f:72:35:6c:b7:50:a2:39:be:d8:2b:31:a4:07:
                    29:6a:1d:f0:a5:7c:f8:a0:f5:84:6f:c2:4c:be:d2:
                    34:df:a9:ce:c4:23:f5:3e:8a:18:cb:3c:8c:9a:de:
                    bc:3b:64:22:eb:b8:12:c8:88:6b:cd:a4:5a:b4:ed:
                    77:ae:73:f5:dc:11:22:26:a6:3f:d2:a2:51:75:73:
                    8e:ae:cf:fb:82:0b:3c:22:04:d7:d9:38:54:b2:0b:
                    85:16:6d:3e:12:fa:3a:e0:24:f1:fe:3c:7d:0a:fb:
                    c5:61:21:f9:ae:aa:e3:bd:df:53:3a:d0:f7:26:6d:
                    a3:2e:fb:40:4a:4c:54:62:b2:c2:4f:a6:11:4d:40:
                    31:68:54:c4:03:2f:a5:69:16:c5:b9:a2:25:66:1b:
                    03:57:65:1a:cf:66:82:dd:b2:c6:c0:99:7d:c9:f5:
                    23:dd:72:57:a7:ec:e2:25:ca:a0:f5:52:d5:d8:e8:
                    20:93:07:e0:27:8e:4e:8c:1f:1b:be:51:6e:9e:91:
                    cd:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:6C:2D:34:84:BC:51:1F:F7:37:07:D1:18:B4:46:40:22:4D:C3:B2
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/72wtNIS8UR_3NwfRGLRGQCJNw7I.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.158.190.0/23

    Signature Algorithm: sha256WithRSAEncryption
         de:9c:42:6f:3b:65:bd:54:20:59:6e:60:17:52:ee:94:f8:b4:
         0c:d1:e3:15:1e:18:7a:f4:7d:0a:a3:27:47:ee:eb:32:7f:ae:
         9f:ba:0d:72:2c:12:7e:54:d6:89:46:7a:f6:06:ea:b0:04:51:
         e6:d8:0e:65:6a:82:91:04:d0:8f:7a:06:40:b7:00:23:ad:a3:
         25:88:07:0e:a4:26:f2:93:95:03:1f:18:08:1c:96:a8:e6:a0:
         f0:6d:46:d4:8e:fd:29:47:b2:f1:68:31:84:00:de:00:8c:4e:
         73:40:e9:98:50:15:56:55:ac:f3:32:34:e7:e5:53:d7:94:e7:
         55:9d:46:ac:09:ae:c8:dc:49:da:9b:1a:b8:2e:bd:93:6a:7a:
         b6:8a:ee:8e:40:a2:96:38:26:42:ed:f8:c2:97:1b:a7:2e:f0:
         5a:fd:13:7b:89:ac:e8:3e:07:df:b9:a1:af:23:20:ee:c6:3b:
         98:95:49:41:04:95:a7:ff:59:7e:d3:3a:ee:c5:87:9c:2a:b9:
         29:de:b0:ec:16:7e:f3:13:b1:86:bd:ea:34:f6:fb:30:a9:b3:
         cb:70:36:a1:0e:f5:ff:69:29:67:fb:bf:96:8c:ce:45:03:62:
         64:e2:6c:cf:3d:df:fb:e2:b4:84:df:ef:ba:df:a0:4e:08:d1:
         1c:e7:73:04
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICCgEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA2MzAw
MTQyMzFaFw0yNTA2MjQxMDQ2NDVaMDMxMTAvBgNVBAMTKEVGNkMyRDM0ODRCQzUx
MUZGNzM3MDdEMTE4QjQ0NjQwMjI0REMzQjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQD723ro3YyEf9P+OH45uLjGZhGNZeWdi/cJ1rzRLlt1Av4Fa45V
+3yIzjiPi/e4z0tjoJ/sGJOQJXa7TRWPcjVst1CiOb7YKzGkBylqHfClfPig9YRv
wky+0jTfqc7EI/U+ihjLPIya3rw7ZCLruBLIiGvNpFq07Xeuc/XcESImpj/SolF1
c46uz/uCCzwiBNfZOFSyC4UWbT4S+jrgJPH+PH0K+8VhIfmuquO931M60PcmbaMu
+0BKTFRissJPphFNQDFoVMQDL6VpFsW5oiVmGwNXZRrPZoLdssbAmX3J9SPdclen
7OIlyqD1UtXY6CCTB+Anjk6MHxu+UW6ekc0ZAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQU72wtNIS8UR/3NwfRGLRGQCJNw7IwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5Lzcyd3ROSVM4VVJfM053ZlJHTFJHUUNKTnc3SS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAFunr4wDQYJKoZIhvcNAQELBQADggEBAN6cQm87Zb1UIFluYBdS7pT4tAzR
4xUeGHr0fQqjJ0fu6zJ/rp+6DXIsEn5U1olGevYG6rAEUebYDmVqgpEE0I96BkC3
ACOtoyWIBw6kJvKTlQMfGAgclqjmoPBtRtSO/SlHsvFoMYQA3gCMTnNA6ZhQFVZV
rPMyNOflU9eU51WdRqwJrsjcSdqbGrguvZNqeraK7o5AopY4JkLt+MKXG6cu8Fr9
E3uJrOg+B9+5oa8jIO7GO5iVSUEElaf/WX7TOu7Fh5wquSnesOwWfvMTsYa96jT2
+zCps8twNqEO9f9pKWf7v5aMzkUDYmTibM893/vitITf77rfoE4I0RzncwQ=
-----END CERTIFICATE-----
Generated at Mon Nov 25 23:59:09 2024 by rpki-client on console-fra.rpki-client.org