Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Oo0TLOhEBD68HzdzlSurxFNy04c.roa
File:                     Oo0TLOhEBD68HzdzlSurxFNy04c.roa (raw, json)
Hash identifier:          w+SI2yBZgw0AOErbGxOzX4y32DzT/6nVsNVJ/n695Os=
Subject key identifier:   3A:8D:13:2C:E8:44:04:3E:BC:1F:37:73:95:2B:AB:C4:53:72:D3:87
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       048D
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Oo0TLOhEBD68HzdzlSurxFNy04c.roa
Signing time:             Thu 27 Jul 2023 16:46:03 +0000
ROA not before:           Thu 27 Jul 2023 16:46:03 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     9605
IP address blocks:        27.230.90.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1165 (0x48d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jul 27 16:46:03 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=3A8D132CE844043EBC1F3773952BABC45372D387
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:6f:73:b0:cb:b6:47:71:f1:ac:a0:e0:16:75:
                    a0:eb:1a:3a:b4:77:a5:e7:fc:0d:ab:4f:40:d7:ba:
                    79:56:6b:74:fe:14:ed:b6:b4:9f:21:ee:76:73:c2:
                    c7:45:c0:a7:62:58:3a:0c:a6:0c:fd:4c:dd:a5:ca:
                    63:ce:2e:d0:26:ef:b5:17:c7:19:71:72:8f:53:ea:
                    4f:c7:7c:ff:13:eb:a8:9b:bb:fb:43:32:f1:c6:7f:
                    95:6d:98:5e:37:ea:f4:77:52:cb:a4:b1:81:d7:9c:
                    11:59:e4:f6:5d:7a:a4:a8:ac:dd:99:5b:5a:25:7a:
                    ba:67:db:0f:20:8d:b2:5c:5b:27:91:9e:77:4d:c9:
                    9b:a8:ff:d0:66:43:01:99:e8:42:c4:14:3f:cb:94:
                    61:83:f2:c8:71:b3:30:8f:b0:a2:19:b2:1e:54:83:
                    f5:af:b5:7e:97:f2:59:03:65:87:dc:22:f4:4e:74:
                    0e:a3:f5:98:09:df:ac:da:eb:c3:37:8f:60:6b:c2:
                    47:3f:78:31:d1:80:3e:f4:fb:7e:48:20:9d:6e:de:
                    6f:57:10:32:d7:75:83:16:18:07:02:88:35:5d:cb:
                    90:10:91:bf:ac:1b:bd:37:7d:28:73:bf:41:29:66:
                    08:0f:0d:0b:9a:38:3f:c2:62:08:f2:fa:9e:6a:5f:
                    69:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:8D:13:2C:E8:44:04:3E:BC:1F:37:73:95:2B:AB:C4:53:72:D3:87
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Oo0TLOhEBD68HzdzlSurxFNy04c.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.230.90.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ca:c8:f3:7a:cd:1b:2a:8e:0e:2c:20:73:e9:77:b2:05:99:2a:
         28:20:3e:05:80:61:90:21:12:8a:25:7f:0a:01:23:0a:61:62:
         47:68:86:d2:cc:c5:ce:2b:49:26:30:fa:1e:33:84:25:a3:e9:
         7d:8c:96:af:dd:00:a9:86:94:43:f0:36:a8:23:29:fe:b8:ae:
         59:30:dc:f7:be:b2:9a:70:b3:1d:a2:2b:c1:0f:95:a4:4b:ce:
         03:59:ad:86:8c:f1:f7:89:07:70:5f:5b:de:78:11:1b:7e:52:
         6a:e0:66:82:7f:61:1a:d1:73:2c:60:9c:fc:26:1d:b2:2b:23:
         ec:5d:c5:4c:16:42:5d:6f:3b:b1:4a:0a:ad:4e:7e:f8:b8:57:
         5e:56:1f:be:1a:fd:4a:9b:be:b1:73:c0:ed:dd:51:a9:f8:b7:
         fc:33:45:93:7d:8c:c3:08:d4:c8:f3:9f:40:86:bf:c7:b8:57:
         d4:d6:0e:55:9f:72:b3:49:52:24:73:16:30:84:3f:5e:e5:91:
         a2:19:69:1a:bb:52:88:7b:76:d8:56:85:03:f0:d7:d3:6f:f8:
         a2:3f:ce:72:cc:4e:47:e1:87:ab:a3:e8:6f:81:db:88:8c:6b:
         b8:b1:37:98:ce:fc:aa:fc:87:d3:1d:b6:9b:f8:bb:82:6c:18:
         28:c8:20:da
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICBI0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA3Mjcx
NjQ2MDNaFw0yNDA3MTQwMTMwMDNaMDMxMTAvBgNVBAMTKDNBOEQxMzJDRTg0NDA0
M0VCQzFGMzc3Mzk1MkJBQkM0NTM3MkQzODcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDQb3Owy7ZHcfGsoOAWdaDrGjq0d6Xn/A2rT0DXunlWa3T+FO22
tJ8h7nZzwsdFwKdiWDoMpgz9TN2lymPOLtAm77UXxxlxco9T6k/HfP8T66ibu/tD
MvHGf5VtmF436vR3UsuksYHXnBFZ5PZdeqSorN2ZW1olerpn2w8gjbJcWyeRnndN
yZuo/9BmQwGZ6ELEFD/LlGGD8shxszCPsKIZsh5Ug/WvtX6X8lkDZYfcIvROdA6j
9ZgJ36za68M3j2Brwkc/eDHRgD70+35IIJ1u3m9XEDLXdYMWGAcCiDVdy5AQkb+s
G703fShzv0EpZggPDQuaOD/CYgjy+p5qX2llAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUOo0TLOhEBD68HzdzlSurxFNy04cwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L09vMFRMT2hFQkQ2OEh6ZHpsU3VyeEZOeTA0Yy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAEb5lowDQYJKoZIhvcNAQELBQADggEBAMrI83rNGyqODiwgc+l3sgWZKigg
PgWAYZAhEoolfwoBIwphYkdohtLMxc4rSSYw+h4zhCWj6X2Mlq/dAKmGlEPwNqgj
Kf64rlkw3Pe+sppwsx2iK8EPlaRLzgNZrYaM8feJB3BfW954ERt+UmrgZoJ/YRrR
cyxgnPwmHbIrI+xdxUwWQl1vO7FKCq1Ofvi4V15WH74a/UqbvrFzwO3dUan4t/wz
RZN9jMMI1Mjzn0CGv8e4V9TWDlWfcrNJUiRzFjCEP17lkaIZaRq7Uoh7dthWhQPw
19Nv+KI/znLMTkfhh6uj6G+B24iMa7ixN5jO/Kr8h9Mdtpv4u4JsGCjIINo=
-----END CERTIFICATE-----
Generated at Sat Jun 1 13:38:47 2024 by rpki-client on console-fra.rpki-client.org