Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/MLMfgWSQlv6Hwo5mxPtALVgoE2c.roa
File:                     MLMfgWSQlv6Hwo5mxPtALVgoE2c.roa (raw, json)
Hash identifier:          M/DXYK1Px9MTe8TNGZodhPD0aLXCySxE03BndhLlAGo=
Subject key identifier:   30:B3:1F:81:64:90:96:FE:87:C2:8E:66:C4:FB:40:2D:58:28:13:67
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       05AE
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/MLMfgWSQlv6Hwo5mxPtALVgoE2c.roa
Signing time:             Thu 27 Jul 2023 17:00:22 +0000
ROA not before:           Thu 27 Jul 2023 17:00:22 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     9605
IP address blocks:        183.73.20.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1454 (0x5ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jul 27 17:00:22 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=30B31F81649096FE87C28E66C4FB402D58281367
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:d5:41:e3:ee:54:de:da:7e:b1:5d:9d:f5:2c:
                    92:f8:51:5f:e5:6b:ad:26:e8:ce:57:0e:95:e0:4a:
                    de:7e:94:d2:2c:54:fb:2b:93:57:0a:35:94:6d:4a:
                    b3:08:31:bf:7d:21:d0:f7:a9:a9:15:99:97:9c:88:
                    9b:69:5d:86:cc:d0:f1:33:e0:31:b1:ae:93:86:d4:
                    55:72:44:90:ad:3a:b1:c5:14:54:83:2c:bc:98:6c:
                    2d:d2:f6:50:3d:7a:e4:f6:25:d1:51:6c:ec:aa:a3:
                    ff:bd:c7:d5:a3:9e:09:0a:4d:2c:19:27:58:2a:2d:
                    a2:2f:0f:2f:d8:bf:98:b6:f6:b6:16:a3:c1:48:f3:
                    47:e1:19:56:30:07:29:62:6e:41:26:85:be:d3:1f:
                    9e:6f:a8:2c:ec:5d:18:20:86:d8:10:66:aa:fc:a6:
                    53:f5:06:33:b7:7c:13:f3:63:0f:64:3f:e4:d5:64:
                    73:57:6b:13:6b:78:c0:ea:3c:04:54:9a:37:96:ff:
                    ff:f9:66:16:d8:b5:1b:13:6a:6f:7e:51:75:74:65:
                    a3:36:b4:69:72:3b:39:10:58:45:9c:cb:7d:58:84:
                    e5:c0:dd:02:06:e4:aa:a2:86:80:33:97:44:9a:72:
                    20:e8:27:ed:cc:4e:c5:1e:7a:b1:d1:77:44:77:57:
                    21:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:B3:1F:81:64:90:96:FE:87:C2:8E:66:C4:FB:40:2D:58:28:13:67
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/MLMfgWSQlv6Hwo5mxPtALVgoE2c.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.73.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         35:01:3a:61:2e:31:78:0f:95:73:78:9e:58:ee:13:3f:a6:a7:
         d2:30:13:71:eb:15:b5:a5:95:fd:da:a7:fd:b0:2f:af:95:11:
         04:b5:3d:6a:cb:ec:f5:aa:67:2c:7d:13:a8:1a:ca:73:a2:b4:
         d2:fd:5d:02:2d:de:b8:9c:24:fb:f6:e3:41:6d:60:d9:5e:40:
         ae:92:8d:d1:23:cc:6e:e9:df:d9:58:ef:77:9f:0c:da:d0:b8:
         84:0c:fb:dc:f6:ea:3c:f9:bc:2e:d0:37:f4:f3:cd:8a:b5:17:
         47:58:d8:43:af:a8:f6:9d:c1:8d:8d:1e:3c:bc:92:6a:2f:0d:
         21:b2:58:86:ed:44:ca:7e:cb:34:bd:31:19:10:c6:91:93:df:
         fe:8a:47:de:d2:76:ec:a0:94:6e:d5:72:d8:32:3f:29:fb:24:
         a8:8f:03:ff:f6:d4:57:69:27:82:ff:2f:d1:e1:43:b8:73:19:
         70:66:b4:f4:52:be:da:28:58:ea:f7:85:ea:dc:bd:f5:f2:62:
         f7:2a:d8:5e:c9:61:59:6a:3d:2a:aa:25:2f:a3:a2:cf:e2:6b:
         cb:05:34:e1:39:49:28:07:64:69:df:f3:18:f3:48:56:20:59:
         56:fd:d4:0a:84:0d:f6:35:00:e1:04:93:d1:0e:63:1f:40:e5:
         e4:09:50:a4
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICBa4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA3Mjcx
NzAwMjJaFw0yNDA3MTQwMTMwMDNaMDMxMTAvBgNVBAMTKDMwQjMxRjgxNjQ5MDk2
RkU4N0MyOEU2NkM0RkI0MDJENTgyODEzNjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDS1UHj7lTe2n6xXZ31LJL4UV/la60m6M5XDpXgSt5+lNIsVPsr
k1cKNZRtSrMIMb99IdD3qakVmZeciJtpXYbM0PEz4DGxrpOG1FVyRJCtOrHFFFSD
LLyYbC3S9lA9euT2JdFRbOyqo/+9x9WjngkKTSwZJ1gqLaIvDy/Yv5i29rYWo8FI
80fhGVYwBylibkEmhb7TH55vqCzsXRgghtgQZqr8plP1BjO3fBPzYw9kP+TVZHNX
axNreMDqPARUmjeW///5ZhbYtRsTam9+UXV0ZaM2tGlyOzkQWEWcy31YhOXA3QIG
5KqihoAzl0SaciDoJ+3MTsUeerHRd0R3VyEdAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUMLMfgWSQlv6Hwo5mxPtALVgoE2cwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L01MTWZnV1NRbHY2SHdvNW14UHRBTFZnb0UyYy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAK3SRQwDQYJKoZIhvcNAQELBQADggEBADUBOmEuMXgPlXN4nljuEz+mp9Iw
E3HrFbWllf3ap/2wL6+VEQS1PWrL7PWqZyx9E6gaynOitNL9XQIt3ricJPv240Ft
YNleQK6SjdEjzG7p39lY73efDNrQuIQM+9z26jz5vC7QN/TzzYq1F0dY2EOvqPad
wY2NHjy8kmovDSGyWIbtRMp+yzS9MRkQxpGT3/6KR97SduyglG7VctgyPyn7JKiP
A//21FdpJ4L/L9HhQ7hzGXBmtPRSvtooWOr3hercvfXyYvcq2F7JYVlqPSqqJS+j
os/ia8sFNOE5SSgHZGnf8xjzSFYgWVb91AqEDfY1AOEEk9EOYx9A5eQJUKQ=
-----END CERTIFICATE-----
Generated at Sat Jun 1 15:54:30 2024 by rpki-client on console-ams.rpki-client.org