Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/H-0szMPHeIWZX86vzMqaCTkgaDE.roa
File:                     H-0szMPHeIWZX86vzMqaCTkgaDE.roa (raw, json)
Hash identifier:          QlNMi/FaojFdDvyW8Lf+FC7yOY+KYXrYgrnjspozlc4=
Subject key identifier:   1F:ED:2C:CC:C3:C7:78:85:99:5F:CE:AF:CC:CA:9A:09:39:20:68:31
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0827
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/H-0szMPHeIWZX86vzMqaCTkgaDE.roa
Signing time:             Tue 30 Apr 2024 02:14:22 +0000
ROA not before:           Tue 30 Apr 2024 02:14:22 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        220.210.80.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2087 (0x827)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr 30 02:14:22 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=1FED2CCCC3C77885995FCEAFCCCA9A0939206831
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a4:9c:0b:95:b4:19:a9:34:c6:7c:ea:ac:66:
                    13:b7:7e:24:89:a6:d3:37:83:59:36:22:ce:e1:bc:
                    a3:fc:01:7b:3a:e9:2d:cf:02:aa:14:f3:f3:09:df:
                    d1:4e:47:25:6e:9e:e6:3e:0b:cc:52:74:30:f9:ed:
                    1d:bc:1a:b7:b5:29:02:d2:24:51:5b:c4:66:86:b0:
                    bb:c0:22:c5:29:62:e6:a0:ca:0a:16:ee:a6:d0:fb:
                    67:cd:82:c0:b0:13:95:f3:47:45:b3:b3:19:08:de:
                    b0:bd:99:6c:cc:49:fe:d6:05:90:41:0e:61:a4:66:
                    27:5b:7b:c0:5f:eb:e4:cf:c3:0b:be:ed:12:02:0b:
                    07:df:2e:bd:09:16:95:22:02:68:74:a1:06:cc:16:
                    01:7e:57:19:3c:80:8e:84:44:d2:29:41:65:4a:49:
                    9d:91:07:c8:55:de:db:c3:bf:91:0d:4d:12:77:db:
                    27:01:72:1e:ee:88:9a:e7:dc:11:a7:1b:b4:ed:ee:
                    a1:19:05:1c:3c:bc:92:41:3c:0e:16:a4:30:9d:6a:
                    05:f9:5e:f5:38:e1:7e:8f:ed:de:98:7a:63:1b:44:
                    11:44:cb:d1:9d:47:04:21:86:a0:20:b0:ce:55:08:
                    dd:d0:67:06:1f:33:1e:af:7a:69:2a:81:51:15:a3:
                    85:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:ED:2C:CC:C3:C7:78:85:99:5F:CE:AF:CC:CA:9A:09:39:20:68:31
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/H-0szMPHeIWZX86vzMqaCTkgaDE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.210.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         56:e5:e2:e3:a2:4a:88:14:c9:99:35:ab:f6:71:0a:51:a2:3c:
         1d:4d:b3:17:69:c8:af:df:3c:7d:4c:55:48:c7:12:2d:06:3f:
         5a:1b:a9:ae:f2:1c:24:db:44:1d:5b:33:6b:5d:64:41:cb:31:
         25:27:93:60:72:a5:5b:63:66:1e:c2:13:8e:5e:71:61:b7:f6:
         59:ce:e6:b6:f5:02:24:11:8b:c8:67:2b:22:59:c7:b1:33:f9:
         91:dd:15:76:5d:89:df:d3:7b:08:c4:4c:6a:f4:df:05:42:b6:
         ea:45:cc:eb:45:0f:7f:7e:d0:c1:ba:b1:7b:8b:8f:3c:f4:09:
         20:54:f0:f2:91:32:e9:ae:77:88:2b:7a:fb:1e:1b:f5:62:91:
         94:17:54:4d:10:eb:46:12:b9:40:6d:da:ab:14:8a:ec:ff:50:
         04:87:db:e2:d6:51:e1:4c:67:e1:bc:36:c0:0b:2a:ba:ad:33:
         0f:e7:cc:bd:7d:43:71:d8:ed:61:a3:57:83:4a:81:f3:9b:69:
         a0:eb:32:0c:f6:45:df:99:80:c5:0b:2f:82:6a:ae:43:b3:d1:
         13:2c:e8:61:f0:e2:51:62:24:78:2c:fd:ca:f3:23:36:65:05:
         5b:b5:0b:15:17:e1:92:ab:56:ed:98:89:30:2f:8d:96:40:97:
         98:78:7f:3d
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICCCcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw
MjE0MjJaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDFGRUQyQ0NDQzNDNzc4
ODU5OTVGQ0VBRkNDQ0E5QTA5MzkyMDY4MzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC7pJwLlbQZqTTGfOqsZhO3fiSJptM3g1k2Is7hvKP8AXs66S3P
AqoU8/MJ39FORyVunuY+C8xSdDD57R28Gre1KQLSJFFbxGaGsLvAIsUpYuagygoW
7qbQ+2fNgsCwE5XzR0WzsxkI3rC9mWzMSf7WBZBBDmGkZidbe8Bf6+TPwwu+7RIC
CwffLr0JFpUiAmh0oQbMFgF+Vxk8gI6ERNIpQWVKSZ2RB8hV3tvDv5ENTRJ32ycB
ch7uiJrn3BGnG7Tt7qEZBRw8vJJBPA4WpDCdagX5XvU44X6P7d6YemMbRBFEy9Gd
RwQhhqAgsM5VCN3QZwYfMx6vemkqgVEVo4V9AgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUH+0szMPHeIWZX86vzMqaCTkgaDEwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L0gtMHN6TVBIZUlXWlg4NnZ6TXFhQ1RrZ2FERS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBALc0lAwDQYJKoZIhvcNAQELBQADggEBAFbl4uOiSogUyZk1q/ZxClGiPB1N
sxdpyK/fPH1MVUjHEi0GP1obqa7yHCTbRB1bM2tdZEHLMSUnk2BypVtjZh7CE45e
cWG39lnO5rb1AiQRi8hnKyJZx7Ez+ZHdFXZdid/TewjETGr03wVCtupFzOtFD39+
0MG6sXuLjzz0CSBU8PKRMumud4grevseG/VikZQXVE0Q60YSuUBt2qsUiuz/UASH
2+LWUeFMZ+G8NsALKrqtMw/nzL19Q3HY7WGjV4NKgfObaaDrMgz2Rd+ZgMULL4Jq
rkOz0RMs6GHw4lFiJHgs/crzIzZlBVu1CxUX4ZKrVu2YiTAvjZZAl5h4fz0=
-----END CERTIFICATE-----
Generated at Sat Jun 1 13:38:47 2024 by rpki-client on console-fra.rpki-client.org