Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/PtVYsY6bhgln_-7HKRDda2Bcjks.roa
File:                     PtVYsY6bhgln_-7HKRDda2Bcjks.roa (raw, json)
Hash identifier:          spMofFFE7qdndACABxbmii7s7Dg0vtyMgbNAHWT1twQ=
Subject key identifier:   3E:D5:58:B1:8E:9B:86:09:67:FF:EE:C7:29:10:DD:6B:60:5C:8E:4B
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       080A
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/PtVYsY6bhgln_-7HKRDda2Bcjks.roa
Signing time:             Tue 30 Apr 2024 02:12:24 +0000
ROA not before:           Tue 30 Apr 2024 02:12:24 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        183.75.196.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2058 (0x80a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr 30 02:12:24 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=3ED558B18E9B860967FFEEC72910DD6B605C8E4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:28:31:0a:e6:30:34:4b:7f:bf:b0:f1:30:c7:
                    37:53:7e:61:f9:4b:09:21:15:1d:63:06:e2:55:eb:
                    29:96:ef:89:ad:1b:3e:c0:44:b6:cc:35:73:02:44:
                    b5:ab:92:ed:f7:58:2f:6e:1f:fb:5a:23:eb:06:e9:
                    45:89:79:c6:80:3d:6c:66:5b:8f:88:52:81:04:5d:
                    74:3f:49:8a:73:30:95:8f:1a:e4:6a:83:e3:6a:ab:
                    85:1b:9c:25:8e:9b:6f:3b:c3:41:09:ec:fe:57:a2:
                    28:3c:c0:81:56:ad:a5:9d:73:1e:a7:c4:fa:a1:71:
                    f7:98:0a:b4:b2:79:fb:9a:f0:ac:78:84:de:63:55:
                    93:72:2d:81:9b:bd:fa:93:e2:46:8d:d7:c0:e2:49:
                    dd:ac:83:0f:c1:32:42:c0:1d:9b:6f:50:88:21:09:
                    68:76:13:58:09:b9:9a:42:56:c6:4f:99:82:76:13:
                    3e:87:32:6a:b3:67:c0:eb:59:15:7f:62:9f:0e:2b:
                    3b:12:75:e5:1c:8a:4c:4a:72:57:2a:64:91:06:7c:
                    75:37:a3:c5:4f:16:67:91:76:c7:5e:40:5c:00:51:
                    82:dc:26:6d:58:2a:9a:b8:16:25:5c:84:53:9f:af:
                    00:79:c3:17:ba:a3:92:db:29:7b:ff:54:85:30:7d:
                    9a:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:D5:58:B1:8E:9B:86:09:67:FF:EE:C7:29:10:DD:6B:60:5C:8E:4B
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/PtVYsY6bhgln_-7HKRDda2Bcjks.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.75.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:93:51:f3:9b:91:69:78:0e:e2:43:13:f9:1d:98:3d:b6:b0:
         1f:72:75:2d:c2:ca:ca:91:11:cf:26:13:30:be:ce:fc:cb:73:
         ca:e4:49:37:29:61:25:67:67:8d:0f:5f:f2:5b:1b:74:9f:4b:
         2c:c4:55:8c:1b:ab:72:0a:3e:c2:6b:8d:3e:e9:bd:1c:4d:9d:
         4b:11:eb:d1:43:5a:8e:30:3a:d4:cd:ac:b7:f7:ad:40:f2:23:
         f8:10:a1:05:8a:0e:9b:7b:25:6d:d8:56:af:7e:5c:d1:a3:79:
         83:86:30:41:2c:47:5c:26:04:d6:3f:77:0e:19:df:d6:59:df:
         ec:76:7f:6d:c0:d3:dc:09:f9:65:d0:fd:9c:cf:bb:dc:1a:f4:
         68:5f:3d:18:2b:24:d7:f7:96:dd:5e:9d:9e:5d:19:af:23:94:
         6b:08:62:9f:a4:40:59:49:eb:0c:38:0e:d0:eb:3a:ad:44:fd:
         ae:36:16:6a:01:60:d9:cd:ac:46:43:31:0e:d8:ac:63:15:de:
         64:65:2f:c3:53:3b:50:c0:1d:b3:3a:51:05:d6:92:4d:29:d2:
         16:f1:37:2b:f8:9e:1e:78:dc:a8:4a:61:87:e9:e4:59:25:c9:
         32:a2:ad:4d:d6:d8:44:4a:5c:5a:8f:6a:dc:93:ce:bf:a7:7a:
         6b:85:89:6e
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICCAowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw
MjEyMjRaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDNFRDU1OEIxOEU5Qjg2
MDk2N0ZGRUVDNzI5MTBERDZCNjA1QzhFNEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDoKDEK5jA0S3+/sPEwxzdTfmH5SwkhFR1jBuJV6ymW74mtGz7A
RLbMNXMCRLWrku33WC9uH/taI+sG6UWJecaAPWxmW4+IUoEEXXQ/SYpzMJWPGuRq
g+Nqq4UbnCWOm287w0EJ7P5Xoig8wIFWraWdcx6nxPqhcfeYCrSyefua8Kx4hN5j
VZNyLYGbvfqT4kaN18DiSd2sgw/BMkLAHZtvUIghCWh2E1gJuZpCVsZPmYJ2Ez6H
MmqzZ8DrWRV/Yp8OKzsSdeUcikxKclcqZJEGfHU3o8VPFmeRdsdeQFwAUYLcJm1Y
Kpq4FiVchFOfrwB5wxe6o5LbKXv/VIUwfZp5AgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUPtVYsY6bhgln/+7HKRDda2BcjkswHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L1B0VllzWTZiaGdsbl8tN0hLUkRkYTJCY2prcy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAC3S8QwDQYJKoZIhvcNAQELBQADggEBADqTUfObkWl4DuJDE/kdmD22sB9y
dS3CysqREc8mEzC+zvzLc8rkSTcpYSVnZ40PX/JbG3SfSyzEVYwbq3IKPsJrjT7p
vRxNnUsR69FDWo4wOtTNrLf3rUDyI/gQoQWKDpt7JW3YVq9+XNGjeYOGMEEsR1wm
BNY/dw4Z39ZZ3+x2f23A09wJ+WXQ/ZzPu9wa9GhfPRgrJNf3lt1enZ5dGa8jlGsI
Yp+kQFlJ6ww4DtDrOq1E/a42FmoBYNnNrEZDMQ7YrGMV3mRlL8NTO1DAHbM6UQXW
kk0p0hbxNyv4nh543KhKYYfp5FklyTKirU3W2ERKXFqPatyTzr+nemuFiW4=
-----END CERTIFICATE-----
Generated at Fri Nov 22 16:45:40 2024 by rpki-client on console-ams.rpki-client.org