Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/7B92BQs5ob3LCFjICfZxZGO321s.roa
File:                     7B92BQs5ob3LCFjICfZxZGO321s.roa (raw, json)
Hash identifier:          UDV80RBAUnpSZ3m9gOcVEl0f3cWW/vi0ywvbhHm1VsM=
Subject key identifier:   EC:1F:76:05:0B:39:A1:BD:CB:08:58:C8:09:F6:71:64:63:B7:DB:5B
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0573
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/7B92BQs5ob3LCFjICfZxZGO321s.roa
Signing time:             Thu 27 Jul 2023 16:58:05 +0000
ROA not before:           Thu 27 Jul 2023 16:58:05 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     9605
IP address blocks:        219.114.128.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 23 Jun 2024 11:53:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1395 (0x573)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jul 27 16:58:05 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=EC1F76050B39A1BDCB0858C809F6716463B7DB5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:14:b3:18:af:2b:c2:ac:1b:22:6d:82:cb:13:
                    25:57:18:e9:8c:f2:87:a1:66:41:ef:35:0b:a0:b4:
                    a1:26:60:55:c4:cc:4c:94:ba:9b:a7:6e:dc:d4:8d:
                    64:61:23:af:f9:a1:14:34:99:96:7c:ea:d3:89:00:
                    8b:1c:d1:b3:e1:f0:d2:e6:c1:84:63:60:f6:19:31:
                    dd:ac:96:14:0f:87:6e:5b:33:ea:ed:88:36:6c:bc:
                    3b:ac:02:1f:05:0d:43:33:95:36:e7:51:f1:14:a2:
                    52:f9:3c:b7:3f:fb:ed:e7:87:9f:84:65:5b:b0:0a:
                    0a:47:46:73:0d:d4:41:1c:6b:1c:3f:12:ff:c9:67:
                    e9:21:82:86:71:ca:e7:12:e1:28:f3:b6:e5:04:4f:
                    96:ae:00:79:6a:5c:3e:15:92:0d:cc:dd:21:40:33:
                    3d:c6:00:5b:03:28:05:21:2d:52:84:e9:48:e6:c1:
                    fb:cd:1a:64:53:df:c7:ac:f5:7c:f8:f6:08:1d:b8:
                    da:44:c6:ab:fc:b4:40:72:59:d1:2a:53:5a:9a:87:
                    08:4a:ed:3d:46:26:58:92:3a:5a:54:b6:6a:a4:79:
                    cf:ed:f7:09:81:aa:38:8c:54:bb:75:74:eb:0c:55:
                    26:17:1b:ad:31:8b:0e:a2:d0:d1:69:2d:b8:e4:d5:
                    14:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:1F:76:05:0B:39:A1:BD:CB:08:58:C8:09:F6:71:64:63:B7:DB:5B
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/7B92BQs5ob3LCFjICfZxZGO321s.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.114.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         b4:64:ea:bf:62:70:28:85:bd:c5:a9:97:3a:c1:53:5b:6e:63:
         0a:5c:15:cd:d5:41:d1:e8:ef:a1:67:e3:cf:bf:95:0c:92:91:
         ae:31:e1:7c:92:dd:f5:25:e1:4a:8b:80:58:5d:aa:cf:f6:3b:
         02:41:61:8c:19:81:5d:f6:8f:0f:96:2d:cf:11:55:aa:77:0c:
         eb:06:06:5f:34:88:d0:f4:58:95:27:1d:c5:be:b5:0f:9c:0f:
         69:18:a0:8b:d8:7e:a7:da:e9:5f:16:dd:61:c1:4e:03:2a:15:
         32:ec:e4:aa:68:53:f6:02:d1:c9:ba:b0:82:5f:80:12:cb:6f:
         5c:6d:20:63:7a:17:5c:17:13:45:4d:5b:ad:ba:9d:ee:d2:34:
         d8:e8:7c:b3:39:36:3f:bf:ce:f0:0a:e4:42:3c:c7:f5:4e:c3:
         55:7e:d8:c9:ea:b2:ea:f1:6f:f0:ff:2c:4d:69:42:29:54:66:
         32:a2:1b:05:ef:93:de:36:2c:8e:50:5d:52:aa:d7:5f:7c:19:
         66:dd:91:c5:f5:98:a8:75:25:b7:c7:a2:8d:58:68:99:d1:75:
         e7:49:51:c9:ad:c3:38:40:ff:ab:57:3e:32:53:95:03:f2:55:
         f3:82:54:a2:7e:f7:44:5f:3a:4a:93:81:01:00:77:37:b1:e5:
         bf:5d:91:c6
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICBXMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA3Mjcx
NjU4MDVaFw0yNDA3MTQwMTMwMDNaMDMxMTAvBgNVBAMTKEVDMUY3NjA1MEIzOUEx
QkRDQjA4NThDODA5RjY3MTY0NjNCN0RCNUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDmFLMYryvCrBsibYLLEyVXGOmM8oehZkHvNQugtKEmYFXEzEyU
upunbtzUjWRhI6/5oRQ0mZZ86tOJAIsc0bPh8NLmwYRjYPYZMd2slhQPh25bM+rt
iDZsvDusAh8FDUMzlTbnUfEUolL5PLc/++3nh5+EZVuwCgpHRnMN1EEcaxw/Ev/J
Z+khgoZxyucS4SjztuUET5auAHlqXD4Vkg3M3SFAMz3GAFsDKAUhLVKE6UjmwfvN
GmRT38es9Xz49ggduNpExqv8tEByWdEqU1qahwhK7T1GJliSOlpUtmqkec/t9wmB
qjiMVLt1dOsMVSYXG60xiw6i0NFpLbjk1RQlAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQU7B92BQs5ob3LCFjICfZxZGO321swHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5LzdCOTJCUXM1b2IzTENGaklDZlp4WkdPMzIxcy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBATbcoAwDQYJKoZIhvcNAQELBQADggEBALRk6r9icCiFvcWplzrBU1tuYwpc
Fc3VQdHo76Fn48+/lQySka4x4XyS3fUl4UqLgFhdqs/2OwJBYYwZgV32jw+WLc8R
Vap3DOsGBl80iND0WJUnHcW+tQ+cD2kYoIvYfqfa6V8W3WHBTgMqFTLs5KpoU/YC
0cm6sIJfgBLLb1xtIGN6F1wXE0VNW626ne7SNNjofLM5Nj+/zvAK5EI8x/VOw1V+
2Mnqsurxb/D/LE1pQilUZjKiGwXvk942LI5QXVKq1198GWbdkcX1mKh1JbfHoo1Y
aJnRdedJUcmtwzhA/6tXPjJTlQPyVfOCVKJ+90RfOkqTgQEAdzex5b9dkcY=
-----END CERTIFICATE-----
Generated at Sun Jun 16 14:31:52 2024 by rpki-client on console-ams.rpki-client.org