Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/_q_Npbm2_5cH9gZr12mbESA7hmU.roa
File:                     _q_Npbm2_5cH9gZr12mbESA7hmU.roa (raw, json)
Hash identifier:          COsAU2Oqxamaq7W/Gdl87gyz7QK3SuQjij73ppPnBHg=
Subject key identifier:   FE:AF:CD:A5:B9:B6:FF:97:07:F6:06:6B:D7:69:9B:11:20:3B:86:65
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       01BD
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/_q_Npbm2_5cH9gZr12mbESA7hmU.roa
Signing time:             Wed 24 May 2023 16:40:27 +0000
ROA not before:           Wed 24 May 2023 16:40:27 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        1.78.36.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 May 2024 13:36:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 445 (0x1bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: May 24 16:40:27 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=FEAFCDA5B9B6FF9707F6066BD7699B11203B8665
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:fc:42:29:db:83:bb:99:25:02:ca:2e:f6:51:
                    b2:7c:04:8d:27:56:a3:ec:f5:22:da:f3:4c:34:65:
                    9d:a7:50:ee:53:b9:dd:0b:ba:5d:69:b6:6e:fc:ea:
                    12:f9:9b:ec:f1:fa:78:e8:33:b3:b0:ed:d2:c1:53:
                    86:81:50:10:39:af:f5:60:0a:8f:2e:90:bb:8a:2f:
                    7f:9a:be:f7:ac:b3:3b:15:7e:42:81:8c:7a:25:b1:
                    f1:37:1b:ed:2d:f0:14:ba:ac:82:e9:f9:cc:6e:58:
                    02:3a:c3:9c:64:d4:b4:a3:33:27:03:2c:c7:0d:1b:
                    1a:25:ba:71:9b:a2:bb:96:d6:d6:7f:0d:94:f1:59:
                    75:5f:1d:3a:81:f9:e4:3d:1f:14:78:c3:bb:58:13:
                    63:fb:5f:44:42:6e:2c:33:95:ab:85:e0:e4:78:b2:
                    4f:21:ce:01:c6:77:00:bc:41:26:37:40:3a:74:b1:
                    0c:d4:d7:a5:8e:3d:50:ed:7e:b8:b7:eb:5e:82:54:
                    26:d2:85:c1:65:74:9d:96:71:18:03:2c:7b:46:52:
                    1d:19:be:0d:ab:71:d3:7c:24:be:db:2b:38:ef:34:
                    a6:f2:c6:c0:31:1c:4f:ec:46:4d:d8:c1:00:a3:80:
                    c7:d9:6f:99:d8:6c:69:47:a9:d7:9d:b6:86:3f:5e:
                    44:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:AF:CD:A5:B9:B6:FF:97:07:F6:06:6B:D7:69:9B:11:20:3B:86:65
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/_q_Npbm2_5cH9gZr12mbESA7hmU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.78.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         87:c9:a7:c4:bf:4c:87:e2:70:8d:40:7c:30:dc:19:c7:e9:5b:
         3e:41:19:d0:f3:e6:a6:a2:2a:c3:55:6f:93:af:5f:90:ea:50:
         14:d6:20:c9:f0:f7:66:15:03:5c:b8:cc:aa:02:a2:2c:07:dc:
         3b:bc:d8:83:0c:6e:57:35:92:05:e4:c7:29:ac:a1:8d:68:6e:
         d8:d9:3d:e1:ab:36:96:c4:5c:0a:f6:5d:4f:4b:57:87:ae:6b:
         b2:f0:17:a4:b2:fb:1a:cb:fd:3d:43:86:36:0b:4e:97:76:15:
         ad:f1:40:4d:63:8d:69:de:4a:0e:bb:23:90:c5:05:6e:d2:b8:
         28:c1:00:aa:0d:5f:5e:98:ad:f3:1c:17:cb:b6:a5:24:f2:9f:
         b8:5b:91:01:40:75:cc:88:4c:3b:72:7a:d1:46:38:f7:86:c2:
         ed:7d:55:66:72:66:84:37:32:e0:7a:f4:83:7d:48:ac:0d:70:
         47:b8:5a:93:b6:23:ce:38:fc:a3:d6:c9:29:69:e5:11:44:69:
         a8:31:34:99:fa:79:18:26:58:10:c4:d9:12:cf:0d:30:29:7a:
         bd:86:c2:f1:34:f3:8a:49:e1:72:3e:82:dd:63:d1:8e:35:0d:
         2e:69:02:d9:57:08:16:e5:14:8a:2a:17:d7:79:49:8c:2c:ec:
         54:9f:1e:eb
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAb0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA1MjQx
NjQwMjdaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKEZFQUZDREE1QjlCNkZG
OTcwN0Y2MDY2QkQ3Njk5QjExMjAzQjg2NjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDE/EIp24O7mSUCyi72UbJ8BI0nVqPs9SLa80w0ZZ2nUO5Tud0L
ul1ptm786hL5m+zx+njoM7Ow7dLBU4aBUBA5r/VgCo8ukLuKL3+avvesszsVfkKB
jHolsfE3G+0t8BS6rILp+cxuWAI6w5xk1LSjMycDLMcNGxolunGboruW1tZ/DZTx
WXVfHTqB+eQ9HxR4w7tYE2P7X0RCbiwzlauF4OR4sk8hzgHGdwC8QSY3QDp0sQzU
16WOPVDtfri3616CVCbShcFldJ2WcRgDLHtGUh0Zvg2rcdN8JL7bKzjvNKbyxsAx
HE/sRk3YwQCjgMfZb5nYbGlHqdedtoY/XkQ7AgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQU/q/Npbm2/5cH9gZr12mbESA7hmUwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L19xX05wYm0yXzVjSDlnWnIxMm1iRVNBN2htVS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAIBTiQwDQYJKoZIhvcNAQELBQADggEBAIfJp8S/TIficI1AfDDcGcfpWz5B
GdDz5qaiKsNVb5OvX5DqUBTWIMnw92YVA1y4zKoCoiwH3Du82IMMblc1kgXkxyms
oY1obtjZPeGrNpbEXAr2XU9LV4eua7LwF6Sy+xrL/T1DhjYLTpd2Fa3xQE1jjWne
Sg67I5DFBW7SuCjBAKoNX16YrfMcF8u2pSTyn7hbkQFAdcyITDtyetFGOPeGwu19
VWZyZoQ3MuB69IN9SKwNcEe4WpO2I844/KPWySlp5RFEaagxNJn6eRgmWBDE2RLP
DTAper2GwvE084pJ4XI+gt1j0Y41DS5pAtlXCBblFIoqF9d5SYws7FSfHus=
-----END CERTIFICATE-----
Generated at Sat Apr 27 10:15:57 2024 by rpki-client on console-ams.rpki-client.org