Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/RwpnFdLQi5eul6XeJlBzmbQJbR0.roa
File:                     RwpnFdLQi5eul6XeJlBzmbQJbR0.roa (raw, json)
Hash identifier:          Bn86xjV+/yVNYrFirk583RDIWT1+ZJYBoHblXsxavl4=
Subject key identifier:   47:0A:67:15:D2:D0:8B:97:AE:97:A5:DE:26:50:73:99:B4:09:6D:1D
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       04FA
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/RwpnFdLQi5eul6XeJlBzmbQJbR0.roa
Signing time:             Thu 27 Jul 2023 16:52:03 +0000
ROA not before:           Thu 27 Jul 2023 16:52:03 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     9605
IP address blocks:        110.162.112.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1274 (0x4fa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jul 27 16:52:03 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=470A6715D2D08B97AE97A5DE26507399B4096D1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:94:dd:ef:1a:dd:eb:9f:d0:b7:8e:64:22:1e:
                    0d:f5:16:72:80:0b:2d:3c:62:e9:b3:be:7f:3e:63:
                    07:84:5d:88:d5:22:0d:13:2c:51:81:fe:f0:fb:13:
                    a8:e8:47:8c:0f:30:9b:92:dc:ce:16:f5:44:1f:b3:
                    57:d6:b6:e7:9d:46:4f:61:16:b5:44:19:22:c1:e3:
                    b3:c5:88:88:5b:c8:b9:a1:c7:a2:94:2d:25:1d:66:
                    1f:d9:a7:4c:89:66:75:2e:dc:a8:1f:58:ef:70:94:
                    73:2a:81:38:6e:8c:2d:a2:69:37:70:24:c3:74:8f:
                    8f:46:0f:b8:38:32:b0:c0:ac:94:03:74:3d:fd:55:
                    0d:9b:62:6c:0e:14:41:b5:f1:c8:c0:db:40:04:c0:
                    b3:39:0c:63:a4:78:f4:56:95:fb:24:90:bd:cb:ad:
                    b8:d0:1d:a6:1b:17:3f:24:7a:40:2f:ca:6c:1c:71:
                    0c:30:ff:b7:23:ed:2c:9c:7a:96:97:19:37:81:83:
                    e3:39:ef:4a:1d:bc:1a:1b:03:13:db:7f:f1:47:7c:
                    2d:31:55:58:9a:76:59:de:14:9c:e2:6c:89:6b:fa:
                    a5:c6:81:ab:d5:b1:61:80:00:73:80:89:11:10:49:
                    61:cf:f7:6b:61:b7:be:b6:d6:78:a3:95:8e:d6:80:
                    d6:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:0A:67:15:D2:D0:8B:97:AE:97:A5:DE:26:50:73:99:B4:09:6D:1D
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/RwpnFdLQi5eul6XeJlBzmbQJbR0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.162.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         7c:19:f7:b9:5e:99:c7:1f:2c:d2:ed:57:20:25:a9:67:4a:64:
         03:34:26:a6:eb:fc:e1:17:da:c7:ee:0b:e3:36:0e:bc:d8:f9:
         32:d2:13:58:83:46:58:09:82:f8:5f:49:9a:d7:85:97:8a:bb:
         0a:72:75:9e:56:16:52:2e:59:84:ea:c3:86:92:78:a1:24:da:
         c1:07:48:f8:65:47:79:6f:49:04:9a:1b:96:1c:33:8d:8e:fd:
         8f:49:e8:42:f1:c4:5b:02:db:91:24:78:0c:1b:5e:44:5b:56:
         44:c7:2a:b0:11:b4:e5:6c:ba:13:d2:22:38:0c:85:5a:13:27:
         f7:08:a1:f1:aa:04:d3:b4:9e:80:6b:02:62:3f:f5:4f:cc:f4:
         68:12:c0:a0:4f:21:b2:fd:50:f3:56:41:04:ba:c7:1d:ab:6c:
         c1:68:45:55:7c:08:b3:70:0e:ec:af:a3:e6:1b:6d:a3:aa:35:
         14:30:61:08:6f:ed:9a:bd:50:f5:b2:63:64:e6:87:97:28:97:
         d9:7e:b2:0b:28:55:57:21:78:1a:83:73:c3:7d:0a:f1:87:db:
         4b:b1:9c:12:0d:3f:c6:9a:6c:5f:32:b4:dc:6c:dd:3b:fd:b3:
         bb:7b:1b:ad:64:93:e2:fc:02:8a:ad:1e:ed:6a:45:40:38:16:
         d5:e9:59:7e
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICBPowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA3Mjcx
NjUyMDNaFw0yNDA3MTQwMTMwMDNaMDMxMTAvBgNVBAMTKDQ3MEE2NzE1RDJEMDhC
OTdBRTk3QTVERTI2NTA3Mzk5QjQwOTZEMUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCVlN3vGt3rn9C3jmQiHg31FnKACy08Yumzvn8+YweEXYjVIg0T
LFGB/vD7E6joR4wPMJuS3M4W9UQfs1fWtuedRk9hFrVEGSLB47PFiIhbyLmhx6KU
LSUdZh/Zp0yJZnUu3KgfWO9wlHMqgThujC2iaTdwJMN0j49GD7g4MrDArJQDdD39
VQ2bYmwOFEG18cjA20AEwLM5DGOkePRWlfskkL3LrbjQHaYbFz8kekAvymwccQww
/7cj7SycepaXGTeBg+M570odvBobAxPbf/FHfC0xVViadlneFJzibIlr+qXGgavV
sWGAAHOAiREQSWHP92tht7621nijlY7WgNatAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQURwpnFdLQi5eul6XeJlBzmbQJbR0wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L1J3cG5GZExRaTVldWw2WGVKbEJ6bWJRSmJSMC5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBARuonAwDQYJKoZIhvcNAQELBQADggEBAHwZ97lemccfLNLtVyAlqWdKZAM0
Jqbr/OEX2sfuC+M2DrzY+TLSE1iDRlgJgvhfSZrXhZeKuwpydZ5WFlIuWYTqw4aS
eKEk2sEHSPhlR3lvSQSaG5YcM42O/Y9J6ELxxFsC25EkeAwbXkRbVkTHKrARtOVs
uhPSIjgMhVoTJ/cIofGqBNO0noBrAmI/9U/M9GgSwKBPIbL9UPNWQQS6xx2rbMFo
RVV8CLNwDuyvo+YbbaOqNRQwYQhv7Zq9UPWyY2Tmh5col9l+sgsoVVcheBqDc8N9
CvGH20uxnBINP8aabF8ytNxs3Tv9s7t7G61kk+L8AoqtHu1qRUA4FtXpWX4=
-----END CERTIFICATE-----
Generated at Sat Jun 1 13:38:47 2024 by rpki-client on console-fra.rpki-client.org