Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/MA68rKNuiN0tX4toMC79WgqMc8g.roa
File:                     MA68rKNuiN0tX4toMC79WgqMc8g.roa (raw, json)
Hash identifier:          2dGbk0LqtxUxd/wqY1gdOcmG3NApdGk2WjcejmjyNFk=
Subject key identifier:   30:0E:BC:AC:A3:6E:88:DD:2D:5F:8B:68:30:2E:FD:5A:0A:8C:73:C8
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       073A
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/MA68rKNuiN0tX4toMC79WgqMc8g.roa
Signing time:             Tue 30 Apr 2024 01:58:44 +0000
ROA not before:           Tue 30 Apr 2024 01:58:44 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        110.161.192.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1850 (0x73a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr 30 01:58:44 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=300EBCACA36E88DD2D5F8B68302EFD5A0A8C73C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f4:f3:99:02:67:97:ec:d0:82:fa:d2:18:91:
                    58:5e:c8:8b:90:5d:a1:34:45:2e:59:4e:f1:45:d8:
                    35:56:bf:79:31:3f:f7:dd:63:f6:59:1b:ec:44:f7:
                    74:fc:94:85:13:d9:0b:07:cf:fd:44:cb:13:cb:6b:
                    a5:cb:92:d5:f4:f7:7a:ce:2f:b7:62:eb:09:d7:52:
                    64:39:61:84:4f:5c:23:19:f4:8d:d7:17:cf:08:49:
                    8d:09:04:31:b6:46:02:d6:34:c3:1d:04:4e:99:8f:
                    8d:99:cc:07:86:74:af:ab:5f:d9:0a:8c:53:4a:25:
                    62:72:af:cb:1c:a0:64:3e:71:38:14:80:bc:95:e5:
                    e1:70:4d:7d:09:fb:8a:74:cd:8f:e4:f2:bb:9c:76:
                    3b:bc:47:8d:99:b1:14:00:67:54:a8:9d:10:ca:a9:
                    f1:79:e2:9d:b8:82:06:af:41:8d:ae:4f:31:5a:1a:
                    18:fe:dd:29:bf:4b:89:36:01:3b:c5:0d:21:df:08:
                    fd:56:63:41:33:58:ab:1f:99:1b:48:80:85:40:f6:
                    5b:64:62:c8:f1:a7:ca:c1:1f:00:cb:a9:a2:a4:fe:
                    0c:cd:34:18:11:24:cf:53:60:32:fd:3f:c7:d7:b0:
                    3c:25:3f:ba:b0:53:e5:7f:1b:7d:0c:75:bc:57:ee:
                    a3:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:0E:BC:AC:A3:6E:88:DD:2D:5F:8B:68:30:2E:FD:5A:0A:8C:73:C8
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/MA68rKNuiN0tX4toMC79WgqMc8g.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.161.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bf:6a:4c:40:8e:a0:b8:6a:16:82:90:95:bc:20:3c:1f:d1:9d:
         6c:0b:5a:9e:e1:e3:22:e5:e9:2e:8d:fe:e4:52:41:93:9f:5a:
         56:47:f1:15:33:5c:91:b1:2f:05:09:7b:e1:87:e1:2d:e5:7c:
         c6:8d:be:42:cb:9d:e6:b7:e7:b2:f8:fa:d9:b7:49:b0:6e:e2:
         ff:ea:0a:65:99:57:e1:e2:3c:d4:e2:6d:aa:15:0f:7f:2a:44:
         d0:24:14:21:30:6b:1b:50:9b:fc:84:62:4e:b9:3d:be:bf:cf:
         93:21:38:41:77:ed:4d:ab:b2:86:d1:89:49:17:84:b6:25:0d:
         37:bf:a8:0b:bf:16:e0:2a:34:10:cd:9e:aa:a1:4e:c9:f5:d5:
         21:ad:0c:2f:62:da:45:fe:e1:5d:01:b5:49:db:7d:b0:3c:14:
         db:9c:ce:ed:c6:31:41:66:11:30:3f:18:a3:73:da:46:96:2e:
         eb:5a:54:4c:36:75:f3:d3:0a:9c:fe:8d:e0:18:61:33:c9:35:
         1c:d9:fb:a7:f3:36:80:4c:82:6b:3f:38:94:8c:e9:d7:7e:39:
         94:b0:30:b1:a4:f1:99:78:09:db:5a:ad:c0:5d:36:66:f9:36:
         ad:8b:ef:63:9b:88:73:81:93:ad:72:26:ef:79:64:ce:05:ae:
         01:c6:e3:3a
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICBzowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw
MTU4NDRaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDMwMEVCQ0FDQTM2RTg4
REQyRDVGOEI2ODMwMkVGRDVBMEE4QzczQzgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDG9POZAmeX7NCC+tIYkVheyIuQXaE0RS5ZTvFF2DVWv3kxP/fd
Y/ZZG+xE93T8lIUT2QsHz/1EyxPLa6XLktX093rOL7di6wnXUmQ5YYRPXCMZ9I3X
F88ISY0JBDG2RgLWNMMdBE6Zj42ZzAeGdK+rX9kKjFNKJWJyr8scoGQ+cTgUgLyV
5eFwTX0J+4p0zY/k8rucdju8R42ZsRQAZ1SonRDKqfF54p24ggavQY2uTzFaGhj+
3Sm/S4k2ATvFDSHfCP1WY0EzWKsfmRtIgIVA9ltkYsjxp8rBHwDLqaKk/gzNNBgR
JM9TYDL9P8fXsDwlP7qwU+V/G30MdbxX7qODAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUMA68rKNuiN0tX4toMC79WgqMc8gwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L01BNjhyS051aU4wdFg0dG9NQzc5V2dxTWM4Zy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAJuocAwDQYJKoZIhvcNAQELBQADggEBAL9qTECOoLhqFoKQlbwgPB/RnWwL
Wp7h4yLl6S6N/uRSQZOfWlZH8RUzXJGxLwUJe+GH4S3lfMaNvkLLnea357L4+tm3
SbBu4v/qCmWZV+HiPNTibaoVD38qRNAkFCEwaxtQm/yEYk65Pb6/z5MhOEF37U2r
sobRiUkXhLYlDTe/qAu/FuAqNBDNnqqhTsn11SGtDC9i2kX+4V0BtUnbfbA8FNuc
zu3GMUFmETA/GKNz2kaWLutaVEw2dfPTCpz+jeAYYTPJNRzZ+6fzNoBMgms/OJSM
6dd+OZSwMLGk8Zl4CdtarcBdNmb5Nq2L72ObiHOBk61yJu95ZM4FrgHG4zo=
-----END CERTIFICATE-----
Generated at Sat Jun 1 13:38:47 2024 by rpki-client on console-fra.rpki-client.org