Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/N2QGQAK91HEaPB1tICEC6p7yK9I.roa
File:                     N2QGQAK91HEaPB1tICEC6p7yK9I.roa (raw, json)
Hash identifier:          pKlwnSm3X1p8J94eyJnskvPCIHehpfG0zPPZhWExnuo=
Subject key identifier:   37:64:06:40:02:BD:D4:71:1A:3C:1D:6D:20:21:02:EA:9E:F2:2B:D2
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       02D7
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/N2QGQAK91HEaPB1tICEC6p7yK9I.roa
Signing time:             Tue 30 May 2023 17:18:25 +0000
ROA not before:           Tue 30 May 2023 17:18:25 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        61.195.208.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 May 2024 13:36:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 727 (0x2d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: May 30 17:18:25 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=3764064002BDD4711A3C1D6D202102EA9EF22BD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:8e:7a:81:42:63:74:75:80:62:21:ee:d0:d8:
                    05:fd:a2:95:5b:00:83:15:5b:69:4c:c0:57:51:ff:
                    ae:05:34:51:31:f7:71:f1:ad:9b:5c:ef:c4:06:0b:
                    5a:03:3c:c7:19:48:db:33:a7:36:3f:75:fc:c1:e2:
                    82:f0:53:db:6c:b6:52:aa:00:49:dc:8d:17:c1:dc:
                    17:8f:90:57:5c:e1:b2:9d:8a:1d:af:7b:88:63:b8:
                    09:e0:43:ba:a0:b8:9d:ac:a1:86:12:f9:56:b5:36:
                    04:44:a4:e1:c1:ec:12:25:cb:85:b2:a3:8b:3a:02:
                    49:e9:9a:9b:f6:b8:59:76:93:32:67:e1:c9:ed:f7:
                    21:44:20:71:d8:b1:ed:fc:60:64:d0:b6:b7:e4:2e:
                    72:bd:47:16:3e:d8:e7:db:d3:c6:90:8f:a6:9b:5e:
                    01:e0:a2:e0:f6:1b:ec:e1:6d:6e:e8:c4:09:76:76:
                    f4:17:48:55:5d:a6:54:e9:5b:29:f7:71:93:a4:b6:
                    7c:22:48:b2:36:17:0b:34:8e:c3:29:b1:5b:73:7e:
                    a4:f0:fc:99:05:30:20:73:e6:f7:39:00:7a:00:65:
                    d9:49:b8:2a:4a:be:52:68:4a:73:e2:a1:82:82:96:
                    69:41:ca:5c:16:09:27:6b:d2:63:33:bc:4a:a0:a8:
                    8f:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:64:06:40:02:BD:D4:71:1A:3C:1D:6D:20:21:02:EA:9E:F2:2B:D2
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/N2QGQAK91HEaPB1tICEC6p7yK9I.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.195.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         09:90:1f:b0:44:2c:4f:e8:20:63:95:1c:b4:0c:38:14:13:a0:
         3f:c4:ba:54:36:de:88:5a:35:27:fc:79:48:57:e6:7b:37:1d:
         16:7d:07:af:f0:88:fb:9e:e2:cd:e8:a2:a6:db:e8:eb:23:1d:
         d7:33:aa:de:84:e0:fe:d4:38:84:ab:e7:05:54:32:ce:6a:d5:
         c4:d0:8f:5f:30:e6:ab:93:dd:30:bb:86:05:00:54:ce:85:73:
         36:09:d3:ec:43:af:4d:7b:6f:2d:c0:f2:07:1c:87:73:e6:49:
         f3:a2:9e:0e:56:23:c6:e5:c1:3e:3e:ec:3f:06:08:af:91:8f:
         04:6c:a3:f0:76:ba:eb:5e:75:0b:a8:4f:6f:fd:0b:7d:a3:57:
         fc:14:f0:09:fd:77:57:af:2a:d8:01:b6:ac:65:f8:59:8b:1a:
         ab:46:3a:bd:cd:78:3d:f7:62:9a:66:ea:07:87:1d:df:bb:e9:
         84:6f:fe:09:99:46:c7:ac:7f:26:75:0c:b5:02:07:ba:8b:39:
         e6:68:9f:b9:63:cb:98:f3:81:8f:bf:f4:4d:b5:08:af:8b:38:
         59:22:88:68:d6:36:77:e2:6c:e1:ee:15:af:ae:49:d2:72:db:
         51:f1:a8:ab:60:c5:67:90:ca:6b:d7:33:a7:a5:f4:23:01:5e:
         14:7c:f2:b7
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAtcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA1MzAx
NzE4MjVaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDM3NjQwNjQwMDJCREQ0
NzExQTNDMUQ2RDIwMjEwMkVBOUVGMjJCRDIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDKjnqBQmN0dYBiIe7Q2AX9opVbAIMVW2lMwFdR/64FNFEx93Hx
rZtc78QGC1oDPMcZSNszpzY/dfzB4oLwU9tstlKqAEncjRfB3BePkFdc4bKdih2v
e4hjuAngQ7qguJ2soYYS+Va1NgREpOHB7BIly4Wyo4s6Aknpmpv2uFl2kzJn4cnt
9yFEIHHYse38YGTQtrfkLnK9RxY+2Ofb08aQj6abXgHgouD2G+zhbW7oxAl2dvQX
SFVdplTpWyn3cZOktnwiSLI2Fws0jsMpsVtzfqTw/JkFMCBz5vc5AHoAZdlJuCpK
vlJoSnPioYKClmlBylwWCSdr0mMzvEqgqI+VAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUN2QGQAK91HEaPB1tICEC6p7yK9IwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L04yUUdRQUs5MUhFYVBCMXRJQ0VDNnA3eUs5SS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAM9w9AwDQYJKoZIhvcNAQELBQADggEBAAmQH7BELE/oIGOVHLQMOBQToD/E
ulQ23ohaNSf8eUhX5ns3HRZ9B6/wiPue4s3ooqbb6OsjHdczqt6E4P7UOISr5wVU
Ms5q1cTQj18w5quT3TC7hgUAVM6FczYJ0+xDr017by3A8gcch3PmSfOing5WI8bl
wT4+7D8GCK+RjwRso/B2uutedQuoT2/9C32jV/wU8An9d1evKtgBtqxl+FmLGqtG
Or3NeD33Yppm6geHHd+76YRv/gmZRsesfyZ1DLUCB7qLOeZon7ljy5jzgY+/9E21
CK+LOFkiiGjWNnfibOHuFa+uSdJy21HxqKtgxWeQymvXM6el9CMBXhR88rc=
-----END CERTIFICATE-----
Generated at Sat Apr 27 10:15:56 2024 by rpki-client on console-ams.rpki-client.org