Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/WVb1ZBWzk19BxqT1wioVWRg1MlI.roa
File:                     WVb1ZBWzk19BxqT1wioVWRg1MlI.roa (raw, json)
Hash identifier:          tx6K1X8CV3dlNWXBa9Ld4raIMwSnPsFtcKpEuX6pXfc=
Subject key identifier:   59:56:F5:64:15:B3:93:5F:41:C6:A4:F5:C2:2A:15:59:18:35:32:52
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       061D
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/WVb1ZBWzk19BxqT1wioVWRg1MlI.roa
Signing time:             Thu 29 Feb 2024 01:38:34 +0000
ROA not before:           Thu 29 Feb 2024 01:38:34 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     9605
IP address blocks:        1.75.1.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 23 Jun 2024 11:53:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1565 (0x61d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Feb 29 01:38:34 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=5956F56415B3935F41C6A4F5C22A155918353252
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f4:75:59:4a:e1:2c:50:02:74:db:77:52:28:
                    22:ba:c9:e9:99:85:4b:6a:40:7a:38:aa:cb:98:f5:
                    6c:f9:fa:15:ec:3d:f9:c6:d1:60:a4:af:0d:79:b9:
                    c7:45:69:1b:a3:70:1f:77:e3:79:60:fa:e1:5f:f4:
                    69:f0:82:98:b8:2f:dd:22:ff:ce:f4:dd:5f:24:25:
                    d9:9e:ca:30:49:7a:95:c5:a5:d2:3a:b5:64:de:48:
                    01:4b:23:d1:66:e7:41:4e:8a:72:a2:b2:db:f7:6d:
                    ab:1f:2b:48:2d:eb:95:b3:79:cf:74:dc:34:ec:f6:
                    72:09:2a:80:18:a1:e6:3d:d7:12:2e:8c:eb:05:22:
                    f4:81:52:31:f4:ce:0c:bb:72:22:69:09:26:e5:2c:
                    79:f5:47:8e:a9:7b:61:c6:ae:76:0b:f0:02:47:11:
                    1a:39:2e:f7:3b:59:2b:47:7f:32:ef:cf:54:2b:4d:
                    9f:0c:c0:84:e5:2d:bd:dd:a5:b5:cb:a5:4e:95:9f:
                    1b:3d:3e:f8:94:a4:66:e3:a4:47:6d:59:00:54:2f:
                    6b:f2:21:e5:fc:f5:a8:00:2b:e5:81:5a:f1:7e:bd:
                    f0:ce:ab:4a:28:2e:7a:83:43:83:ee:4d:d8:d4:bd:
                    c5:4b:f4:a9:88:6a:0d:fe:4a:91:a7:9b:1a:d4:70:
                    1b:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:56:F5:64:15:B3:93:5F:41:C6:A4:F5:C2:2A:15:59:18:35:32:52
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/WVb1ZBWzk19BxqT1wioVWRg1MlI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.75.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:9f:9f:63:78:44:c4:ec:32:61:e9:09:a2:80:6f:b6:62:43:
         35:a0:67:46:00:61:55:09:f2:db:92:aa:03:ed:e4:da:7f:51:
         3b:dc:d8:ab:ab:e9:a9:00:72:2f:b9:84:28:c4:39:fa:87:60:
         5f:50:da:6f:10:e4:04:c4:f8:08:e6:6d:11:ce:35:b0:9a:80:
         98:51:a6:9b:de:e5:a4:19:7b:bd:91:78:86:59:2c:d3:39:2d:
         7f:b0:bf:17:8d:f5:39:a3:e9:22:50:59:71:97:fd:68:a1:bb:
         e1:bd:3a:39:78:9b:b7:13:2d:3f:02:2e:2a:1e:66:bc:d8:54:
         b9:6e:29:ab:68:3d:40:5a:4a:06:a2:5e:6c:3b:0d:ea:c9:80:
         8d:4c:93:ef:18:f9:17:23:d8:38:63:7a:2d:b9:04:24:a0:71:
         25:f5:06:ea:d5:ec:8f:41:27:ff:ac:d2:29:0c:ba:29:db:4d:
         f9:40:aa:d6:90:c7:e0:38:d3:14:79:06:5c:45:e4:ae:c9:dc:
         68:8d:4d:1e:41:d5:d1:f2:c5:34:24:83:ee:d2:4b:82:6e:67:
         19:33:bc:29:70:66:51:9e:f9:a6:f2:c2:3c:ef:c3:31:e5:22:
         64:ef:26:2f:68:e3:f8:27:1c:89:a9:2c:e2:ae:40:e6:b1:96:
         93:ee:38:35
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICBh0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDAyMjkw
MTM4MzRaFw0yNTAyMTQwMTMwMDNaMDMxMTAvBgNVBAMTKDU5NTZGNTY0MTVCMzkz
NUY0MUM2QTRGNUMyMkExNTU5MTgzNTMyNTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCy9HVZSuEsUAJ023dSKCK6yemZhUtqQHo4qsuY9Wz5+hXsPfnG
0WCkrw15ucdFaRujcB9343lg+uFf9Gnwgpi4L90i/8703V8kJdmeyjBJepXFpdI6
tWTeSAFLI9Fm50FOinKistv3basfK0gt65Wzec903DTs9nIJKoAYoeY91xIujOsF
IvSBUjH0zgy7ciJpCSblLHn1R46pe2HGrnYL8AJHERo5Lvc7WStHfzLvz1QrTZ8M
wITlLb3dpbXLpU6Vnxs9PviUpGbjpEdtWQBUL2vyIeX89agAK+WBWvF+vfDOq0oo
LnqDQ4PuTdjUvcVL9KmIag3+SpGnmxrUcBvrAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUWVb1ZBWzk19BxqT1wioVWRg1MlIwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L1dWYjFaQld6azE5QnhxVDF3aW9WV1JnMU1sSS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAABSwEwDQYJKoZIhvcNAQELBQADggEBAKifn2N4RMTsMmHpCaKAb7ZiQzWg
Z0YAYVUJ8tuSqgPt5Np/UTvc2Kur6akAci+5hCjEOfqHYF9Q2m8Q5ATE+AjmbRHO
NbCagJhRppve5aQZe72ReIZZLNM5LX+wvxeN9Tmj6SJQWXGX/Wihu+G9Ojl4m7cT
LT8CLioeZrzYVLluKatoPUBaSgaiXmw7DerJgI1Mk+8Y+Rcj2Dhjei25BCSgcSX1
BurV7I9BJ/+s0ikMuinbTflAqtaQx+A40xR5BlxF5K7J3GiNTR5B1dHyxTQkg+7S
S4JuZxkzvClwZlGe+abywjzvwzHlImTvJi9o4/gnHImpLOKuQOaxlpPuODU=
-----END CERTIFICATE-----
Generated at Sun Jun 16 14:31:53 2024 by rpki-client on console-ams.rpki-client.org