Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Cv1Wvw82ESQB2cs2HltX7IFy2fk.roa
File:                     Cv1Wvw82ESQB2cs2HltX7IFy2fk.roa (raw, json)
Hash identifier:          MTCK0lddDtaquohCukyJy9ZytIP6wbi2oHhsiD0VjEw=
Subject key identifier:   0A:FD:56:BF:0F:36:11:24:01:D9:CB:36:1E:5B:57:EC:81:72:D9:F9
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0513
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Cv1Wvw82ESQB2cs2HltX7IFy2fk.roa
Signing time:             Thu 27 Jul 2023 16:52:14 +0000
ROA not before:           Thu 27 Jul 2023 16:52:14 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     9605
IP address blocks:        61.195.216.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1299 (0x513)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jul 27 16:52:14 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=0AFD56BF0F36112401D9CB361E5B57EC8172D9F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:6a:e2:03:02:ac:ac:bf:d1:28:f0:46:7f:c4:
                    87:fc:82:1c:bc:10:c6:9c:ab:95:e9:cd:18:8f:01:
                    a5:24:1f:e0:9c:39:60:f7:c3:e6:5a:90:3e:f9:e4:
                    5c:41:91:4d:8e:db:ea:a5:f2:0b:6b:10:c6:ea:27:
                    3e:92:ea:a3:76:53:e9:74:78:48:cf:ef:46:e8:f2:
                    92:5d:c7:ef:06:83:17:3b:c1:a2:b0:ca:1e:3d:2a:
                    69:93:e0:87:5d:ce:53:84:6c:48:2a:30:3e:07:f7:
                    89:f3:ce:91:9c:ab:ed:2f:9e:48:bd:08:6d:28:d2:
                    bd:9c:f7:c2:fd:ff:0d:4c:c3:ed:b9:a8:bf:e3:0a:
                    17:22:45:d1:61:f9:dd:d5:d2:c7:d8:d7:7a:99:0c:
                    92:52:cb:cc:91:a8:89:57:b1:01:3b:7c:33:f6:12:
                    68:6d:c2:1c:13:2b:59:89:2e:97:4b:78:c7:ec:03:
                    1f:7b:be:7b:7f:aa:99:8c:c3:80:37:df:a3:bb:93:
                    77:c4:0d:cb:66:ae:6e:d7:e6:f0:4f:10:78:a2:02:
                    72:1c:83:9c:ee:41:25:0d:2b:60:29:73:20:c3:bb:
                    3b:cb:83:83:99:8b:59:ef:b5:3c:ca:8e:e4:fa:5f:
                    a7:5d:58:9f:d9:53:a0:14:e1:d9:f2:5b:73:c9:6e:
                    b9:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:FD:56:BF:0F:36:11:24:01:D9:CB:36:1E:5B:57:EC:81:72:D9:F9
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Cv1Wvw82ESQB2cs2HltX7IFy2fk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.195.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         50:67:a7:c6:75:9d:aa:e8:ee:f1:a6:48:8a:0b:ea:70:1e:7f:
         1e:d8:f0:38:b7:ec:eb:76:b2:33:63:d2:0a:31:de:13:89:96:
         6a:bf:26:15:2a:b2:cd:8d:34:b5:10:32:6a:a3:3f:03:71:bf:
         e4:ad:ce:69:4d:11:7e:8f:ed:7f:b1:f1:a5:86:e3:52:a7:77:
         7b:6a:4f:b9:df:77:e9:e6:68:f9:02:2b:d7:39:4f:ce:b3:c7:
         1a:4e:d5:fc:ef:54:1e:d6:54:df:7b:53:ad:c2:1e:80:97:3a:
         be:4e:b0:cc:23:7e:e8:88:8d:cc:c7:5a:63:ea:e8:27:41:f5:
         e1:f0:61:a9:27:42:41:1d:ad:f5:92:a3:23:b8:71:d7:2d:a1:
         7a:5c:68:a2:45:45:d4:96:4d:b2:48:c0:1f:ca:5b:85:af:e8:
         15:3e:af:c8:56:b4:1f:48:10:4e:68:ae:6b:9b:11:2d:7a:27:
         d2:2b:9b:bf:8d:08:ce:4e:e2:5d:78:24:6b:3f:a8:4e:86:55:
         0e:d7:4f:9c:5a:45:ee:01:16:6e:10:93:2b:88:b7:fe:13:23:
         76:a0:8d:8e:39:21:33:7b:83:41:3f:75:cc:2c:53:4a:c5:5c:
         bb:26:78:a8:98:c2:74:b7:6c:6e:62:e6:b0:6b:5e:32:05:46:
         fc:9c:90:71
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICBRMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA3Mjcx
NjUyMTRaFw0yNDA3MTQwMTMwMDNaMDMxMTAvBgNVBAMTKDBBRkQ1NkJGMEYzNjEx
MjQwMUQ5Q0IzNjFFNUI1N0VDODE3MkQ5RjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQD7auIDAqysv9Eo8EZ/xIf8ghy8EMacq5XpzRiPAaUkH+CcOWD3
w+ZakD755FxBkU2O2+ql8gtrEMbqJz6S6qN2U+l0eEjP70bo8pJdx+8Ggxc7waKw
yh49KmmT4IddzlOEbEgqMD4H94nzzpGcq+0vnki9CG0o0r2c98L9/w1Mw+25qL/j
ChciRdFh+d3V0sfY13qZDJJSy8yRqIlXsQE7fDP2EmhtwhwTK1mJLpdLeMfsAx97
vnt/qpmMw4A336O7k3fEDctmrm7X5vBPEHiiAnIcg5zuQSUNK2ApcyDDuzvLg4OZ
i1nvtTzKjuT6X6ddWJ/ZU6AU4dnyW3PJbrm5AgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUCv1Wvw82ESQB2cs2HltX7IFy2fkwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L0N2MVd2dzgyRVNRQjJjczJIbHRYN0lGeTJmay5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAI9w9gwDQYJKoZIhvcNAQELBQADggEBAFBnp8Z1naro7vGmSIoL6nAefx7Y
8Di37Ot2sjNj0gox3hOJlmq/JhUqss2NNLUQMmqjPwNxv+StzmlNEX6P7X+x8aWG
41Knd3tqT7nfd+nmaPkCK9c5T86zxxpO1fzvVB7WVN97U63CHoCXOr5OsMwjfuiI
jczHWmPq6CdB9eHwYaknQkEdrfWSoyO4cdctoXpcaKJFRdSWTbJIwB/KW4Wv6BU+
r8hWtB9IEE5ormubES16J9Irm7+NCM5O4l14JGs/qE6GVQ7XT5xaRe4BFm4QkyuI
t/4TI3agjY45ITN7g0E/dcwsU0rFXLsmeKiYwnS3bG5i5rBrXjIFRvyckHE=
-----END CERTIFICATE-----
Generated at Sat Jun 1 15:54:29 2024 by rpki-client on console-ams.rpki-client.org