Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Vjd560gyLiEau_S49efrMIwJaI0.roa
File:                     Vjd560gyLiEau_S49efrMIwJaI0.roa (raw, json)
Hash identifier:          aCmQYjwXVah55DfVs5IkfAEkcxbkuJKRsho4pBjfIyw=
Subject key identifier:   56:37:79:EB:48:32:2E:21:1A:BB:F4:B8:F5:E7:EB:30:8C:09:68:8D
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0686
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Vjd560gyLiEau_S49efrMIwJaI0.roa
Signing time:             Tue 30 Apr 2024 01:38:04 +0000
ROA not before:           Tue 30 Apr 2024 01:38:04 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        183.74.200.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1670 (0x686)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr 30 01:38:04 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=563779EB48322E211ABBF4B8F5E7EB308C09688D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b8:de:8c:f3:4d:01:9e:f1:aa:86:9a:9c:82:
                    2e:cb:4b:1d:79:ad:d7:51:13:56:0e:9d:dc:26:fa:
                    f3:7d:4a:5e:0c:c6:13:fd:14:7c:e1:6f:01:57:b8:
                    35:26:6f:82:48:a5:be:2a:b8:64:77:c6:7b:5d:3d:
                    eb:b7:de:b1:ea:a4:c2:ec:11:d4:3c:bd:17:80:d4:
                    5b:12:5d:a4:e1:f9:70:12:c8:ec:12:42:51:79:ac:
                    69:b0:42:57:66:30:d9:01:1a:2c:40:8c:80:27:46:
                    17:3a:a0:3b:c0:d7:c7:5e:12:c2:63:e8:af:94:4d:
                    dd:c9:db:cc:e2:15:56:d0:10:77:99:21:ae:f0:fd:
                    83:61:e4:4a:db:67:a0:d1:ae:ae:41:75:0a:ca:e2:
                    ae:7e:3e:a9:72:a3:3f:26:65:e6:1f:2d:82:57:fa:
                    86:7a:ed:37:a8:29:f7:db:82:49:f1:49:de:52:b2:
                    f2:51:b9:43:d1:0f:49:99:16:00:e0:1f:4e:31:ea:
                    d7:8e:ea:cd:4a:08:9d:7c:36:42:cd:f2:65:48:4e:
                    1e:30:1b:84:e6:2d:56:f5:fd:2d:a3:0d:be:4e:e8:
                    66:d9:37:f7:39:b7:97:13:97:d7:c7:0c:5c:13:7a:
                    24:88:fb:f0:4e:26:cd:8e:d6:cf:d1:3a:bf:0e:9b:
                    3f:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:37:79:EB:48:32:2E:21:1A:BB:F4:B8:F5:E7:EB:30:8C:09:68:8D
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Vjd560gyLiEau_S49efrMIwJaI0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.74.200.0/23

    Signature Algorithm: sha256WithRSAEncryption
         96:0d:46:a5:a7:4e:79:45:3f:55:14:c2:6f:9b:42:53:83:9e:
         dc:a9:4b:16:f6:41:87:65:8b:88:3e:07:bf:81:29:eb:9b:55:
         27:72:cd:02:ae:4b:76:7d:12:f2:4f:01:e1:da:19:e5:71:fb:
         2e:c2:5f:f3:3b:ba:00:5e:1c:52:de:0e:56:ab:b4:65:b4:fe:
         7f:64:89:93:bf:a1:bc:f5:82:1d:5f:43:2d:8d:46:86:b5:c1:
         c0:38:ee:1a:77:03:b0:68:bb:f6:a0:36:f3:c9:f6:a9:10:2d:
         82:57:23:8d:11:ca:03:fc:b9:b8:05:51:07:52:8c:e1:eb:fc:
         b3:61:ab:b5:d4:0f:2f:e5:89:97:a5:2c:fa:78:1a:dc:91:df:
         ae:61:33:bb:d4:70:80:ba:3f:e0:3c:14:0a:3d:1d:58:53:bc:
         b6:74:ed:67:31:5d:ce:54:53:03:e2:c8:ea:77:9d:35:ff:20:
         c5:f7:98:b0:40:fe:69:cd:6e:54:0b:3e:5d:a2:5f:9d:12:7b:
         fd:c2:c6:76:c8:c2:4a:2e:d6:c5:23:7e:34:5b:8c:00:bf:0a:
         7a:30:78:f8:ea:a0:4f:23:72:df:e3:55:d8:c0:df:de:e1:4c:
         19:30:ea:57:f1:73:65:80:0b:99:11:c2:4d:00:b3:e6:4c:e4:
         57:76:01:ec
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICBoYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw
MTM4MDRaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDU2Mzc3OUVCNDgzMjJF
MjExQUJCRjRCOEY1RTdFQjMwOEMwOTY4OEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDBuN6M800BnvGqhpqcgi7LSx15rddRE1YOndwm+vN9Sl4MxhP9
FHzhbwFXuDUmb4JIpb4quGR3xntdPeu33rHqpMLsEdQ8vReA1FsSXaTh+XASyOwS
QlF5rGmwQldmMNkBGixAjIAnRhc6oDvA18deEsJj6K+UTd3J28ziFVbQEHeZIa7w
/YNh5ErbZ6DRrq5BdQrK4q5+Pqlyoz8mZeYfLYJX+oZ67TeoKffbgknxSd5SsvJR
uUPRD0mZFgDgH04x6teO6s1KCJ18NkLN8mVITh4wG4TmLVb1/S2jDb5O6GbZN/c5
t5cTl9fHDFwTeiSI+/BOJs2O1s/ROr8Omz97AgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUVjd560gyLiEau/S49efrMIwJaI0wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L1ZqZDU2MGd5TGlFYXVfUzQ5ZWZyTUl3SmFJMC5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAG3SsgwDQYJKoZIhvcNAQELBQADggEBAJYNRqWnTnlFP1UUwm+bQlODntyp
Sxb2QYdli4g+B7+BKeubVSdyzQKuS3Z9EvJPAeHaGeVx+y7CX/M7ugBeHFLeDlar
tGW0/n9kiZO/obz1gh1fQy2NRoa1wcA47hp3A7Bou/agNvPJ9qkQLYJXI40RygP8
ubgFUQdSjOHr/LNhq7XUDy/liZelLPp4GtyR365hM7vUcIC6P+A8FAo9HVhTvLZ0
7WcxXc5UUwPiyOp3nTX/IMX3mLBA/mnNblQLPl2iX50Se/3CxnbIwkou1sUjfjRb
jAC/CnowePjqoE8jct/jVdjA397hTBkw6lfxc2WAC5kRwk0As+ZM5Fd2Aew=
-----END CERTIFICATE-----
Generated at Sat Jun 1 13:38:47 2024 by rpki-client on console-fra.rpki-client.org