Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Mg1jrbkBm-ojDQH-rNF5U5-Xo2o.roa
File:                     Mg1jrbkBm-ojDQH-rNF5U5-Xo2o.roa (raw, json)
Hash identifier:          BRdb4RY0Vx14tVhvP0sizHsYybhrtwAk9cmftZYv1WU=
Subject key identifier:   32:0D:63:AD:B9:01:9B:EA:23:0D:01:FE:AC:D1:79:53:9F:97:A3:6A
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0747
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Mg1jrbkBm-ojDQH-rNF5U5-Xo2o.roa
Signing time:             Tue 30 Apr 2024 01:58:51 +0000
ROA not before:           Tue 30 Apr 2024 01:58:51 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        183.75.231.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 17 Nov 2024 17:06:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1863 (0x747)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr 30 01:58:51 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=320D63ADB9019BEA230D01FEACD179539F97A36A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:fe:1b:a9:23:ca:88:bb:6e:76:3d:a2:a3:c2:
                    df:c7:3a:f9:90:7a:d8:bb:80:b7:e5:96:82:82:41:
                    16:36:4d:d8:78:06:71:dc:19:5c:e2:8c:64:51:7b:
                    87:16:2c:b2:f1:2b:a4:34:eb:79:e9:c2:78:c6:92:
                    0b:f9:cf:e8:c3:ee:d6:0f:17:e3:01:d8:60:02:cd:
                    35:d9:d4:b4:7c:2d:42:83:36:cd:4e:fa:af:03:a1:
                    1a:50:c8:64:ba:78:d6:89:ff:c3:d8:3a:a7:25:22:
                    12:63:f7:8d:77:53:79:6f:48:fe:1b:75:e7:6c:35:
                    04:a8:ea:a2:28:f2:3a:d7:c9:fa:44:90:5b:ae:f5:
                    79:28:df:8f:f3:b5:9a:fb:13:b6:5c:3d:12:19:43:
                    9a:17:0d:d2:28:b9:2e:7f:e0:a5:74:55:ab:30:75:
                    18:fa:de:0c:49:22:ba:5e:fe:fb:99:e2:01:a7:3e:
                    a9:b1:b9:d5:e4:a2:dc:da:9b:2f:04:66:e5:57:35:
                    bc:3d:d3:77:cc:30:5e:e4:01:ce:27:c6:cc:58:72:
                    39:db:93:0d:eb:67:0a:73:04:22:88:e1:0d:d8:ae:
                    6f:12:3f:4b:57:f1:b6:ed:3d:21:b5:04:43:63:1d:
                    4d:21:1e:2c:bd:98:94:9e:c6:ab:5b:77:6a:ea:46:
                    c5:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:0D:63:AD:B9:01:9B:EA:23:0D:01:FE:AC:D1:79:53:9F:97:A3:6A
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Mg1jrbkBm-ojDQH-rNF5U5-Xo2o.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.75.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:b6:a7:cf:e7:9e:8c:d5:9a:bf:4a:e6:46:ed:8e:20:85:ad:
         6b:ac:f6:9c:03:6d:99:6d:50:1f:50:94:b0:77:cd:3d:b4:b2:
         3d:e9:69:62:2c:d0:8a:d0:23:a7:73:2c:3f:37:c6:dc:75:19:
         72:e8:0f:42:51:c3:9d:cd:5c:0f:38:a0:3a:92:77:d2:f9:1d:
         48:c6:b7:5c:4f:f7:16:e0:20:43:a4:74:89:d0:4c:31:60:ee:
         c0:bf:68:a8:0e:92:82:c3:32:58:d7:35:b8:d9:de:9c:27:4c:
         2b:02:a3:13:63:54:9c:7e:e6:44:2d:36:8b:f8:e8:0e:6d:99:
         a8:aa:52:e8:63:e0:f8:0f:6b:97:c9:c1:6c:11:1c:d0:99:9e:
         bb:11:5b:0f:23:78:25:7d:1b:90:d7:87:8e:9d:08:39:19:24:
         6c:c8:5e:8b:4a:05:41:22:1b:36:be:a8:30:68:60:d7:dc:8f:
         4b:88:ae:39:41:e6:b6:8c:0a:e7:5f:4a:23:93:63:b3:2a:1e:
         2c:68:be:31:43:5c:79:1b:1b:75:de:b0:86:8a:12:c4:e3:5a:
         25:a3:57:7b:d5:33:84:be:2d:58:df:db:b7:76:5b:38:ad:8b:
         ed:cc:9a:a4:5a:3f:07:62:82:83:60:3c:94:8f:f3:64:8f:47:
         3c:f5:7e:10
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICB0cwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw
MTU4NTFaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDMyMEQ2M0FEQjkwMTlC
RUEyMzBEMDFGRUFDRDE3OTUzOUY5N0EzNkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCp/hupI8qIu252PaKjwt/HOvmQeti7gLflloKCQRY2Tdh4BnHc
GVzijGRRe4cWLLLxK6Q063npwnjGkgv5z+jD7tYPF+MB2GACzTXZ1LR8LUKDNs1O
+q8DoRpQyGS6eNaJ/8PYOqclIhJj9413U3lvSP4bdedsNQSo6qIo8jrXyfpEkFuu
9Xko34/ztZr7E7ZcPRIZQ5oXDdIouS5/4KV0VaswdRj63gxJIrpe/vuZ4gGnPqmx
udXkotzamy8EZuVXNbw903fMMF7kAc4nxsxYcjnbkw3rZwpzBCKI4Q3Yrm8SP0tX
8bbtPSG1BENjHU0hHiy9mJSexqtbd2rqRsXjAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUMg1jrbkBm+ojDQH+rNF5U5+Xo2owHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L01nMWpyYmtCbS1vakRRSC1yTkY1VTUtWG8yby5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAC3S+cwDQYJKoZIhvcNAQELBQADggEBACi2p8/nnozVmr9K5kbtjiCFrWus
9pwDbZltUB9QlLB3zT20sj3paWIs0IrQI6dzLD83xtx1GXLoD0JRw53NXA84oDqS
d9L5HUjGt1xP9xbgIEOkdInQTDFg7sC/aKgOkoLDMljXNbjZ3pwnTCsCoxNjVJx+
5kQtNov46A5tmaiqUuhj4PgPa5fJwWwRHNCZnrsRWw8jeCV9G5DXh46dCDkZJGzI
XotKBUEiGza+qDBoYNfcj0uIrjlB5raMCudfSiOTY7MqHixovjFDXHkbG3XesIaK
EsTjWiWjV3vVM4S+LVjf27d2Wziti+3MmqRaPwdigoNgPJSP82SPRzz1fhA=
-----END CERTIFICATE-----
Generated at Sun Nov 10 19:15:40 2024 by rpki-client on console-ams.rpki-client.org