Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/b62iHiHFkowrP2hbHEBWMrYRWkI.roa
File:                     b62iHiHFkowrP2hbHEBWMrYRWkI.roa (raw, json)
Hash identifier:          3q5rEOFNyIEC3DJLNWJPnnIeNak6J+utgqjEt2LcRA8=
Subject key identifier:   6F:AD:A2:1E:21:C5:92:8C:2B:3F:68:5B:1C:40:56:32:B6:11:5A:42
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       061B
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/b62iHiHFkowrP2hbHEBWMrYRWkI.roa
Signing time:             Thu 29 Feb 2024 01:38:33 +0000
ROA not before:           Thu 29 Feb 2024 01:38:33 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     9605
IP address blocks:        1.75.8.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1563 (0x61b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Feb 29 01:38:33 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=6FADA21E21C5928C2B3F685B1C405632B6115A42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:76:af:4f:8a:f7:ad:74:8a:34:03:c2:aa:d7:
                    e5:70:f1:fc:6b:e8:03:28:c1:21:57:68:4e:7b:10:
                    33:68:cd:d6:5a:42:1b:de:25:d8:be:ac:f2:e9:06:
                    c1:33:cf:d1:a8:04:c1:a0:05:0f:e9:67:8f:78:19:
                    71:f7:a5:96:14:b5:7f:45:cd:f5:83:bb:99:a0:ba:
                    94:e8:4f:b1:a7:bb:f3:14:cf:90:c5:67:17:23:57:
                    42:5a:8e:1a:cd:5c:19:13:f4:20:6b:48:4f:01:08:
                    d7:97:8f:4c:4f:17:d6:fd:27:2a:01:d4:d4:8e:d1:
                    b6:8e:43:e0:d1:b4:d5:21:78:86:44:6b:16:21:e2:
                    df:d5:d8:d3:b0:e1:1b:f8:6e:76:ef:00:de:14:13:
                    74:92:d3:ba:fe:06:73:6c:21:14:e9:f8:31:d9:49:
                    e6:ae:a4:e8:fe:62:bf:94:7a:db:28:23:4a:83:02:
                    31:19:04:9b:ac:b2:73:77:8f:56:2d:d1:68:a8:50:
                    8e:d1:ba:31:d4:f2:c3:9d:74:66:e7:32:97:05:24:
                    1a:38:15:6e:00:e1:9a:ae:17:85:08:55:03:d7:14:
                    b5:b6:1f:49:4a:cb:01:22:4d:42:d9:54:a0:9d:36:
                    b7:f5:13:e5:44:24:10:20:56:fd:2d:57:82:39:ee:
                    85:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:AD:A2:1E:21:C5:92:8C:2B:3F:68:5B:1C:40:56:32:B6:11:5A:42
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/b62iHiHFkowrP2hbHEBWMrYRWkI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.75.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         e6:73:f9:7f:9d:63:0b:41:5d:98:e4:8d:ec:2d:ab:48:5d:62:
         04:22:62:10:dd:dd:f9:8b:9f:5d:88:bc:51:80:b5:35:38:3c:
         bd:35:13:a5:ad:21:fa:f5:b1:bf:f3:a4:5b:0c:a0:c3:2b:22:
         7b:a8:0f:87:7a:8f:32:6f:2a:5f:db:b2:52:72:65:b0:78:0e:
         21:bf:36:b8:4b:5d:56:2b:41:c8:78:73:ee:7f:e0:8f:c6:8e:
         21:00:22:40:ea:09:fa:e9:c0:e4:86:33:76:d0:82:d9:45:02:
         82:cf:30:53:b8:79:70:e3:20:5d:bc:7a:62:5d:ff:83:ff:3c:
         5c:1e:2e:a2:36:cb:35:42:12:3e:99:ff:10:09:c4:f6:52:35:
         c2:7a:c9:11:90:6e:cb:3d:ea:54:a3:85:e7:4d:69:d3:9b:d5:
         37:20:65:01:e8:d3:88:bf:d0:70:9b:6f:b7:ac:86:70:32:0a:
         89:27:68:d6:eb:f6:a3:f4:a7:1a:0a:19:8e:5d:62:5e:62:bd:
         9e:f8:67:e9:50:78:fc:9b:b4:96:d8:c7:e8:f4:45:54:77:e7:
         26:39:af:37:9e:10:6c:2d:ec:9d:a0:93:b8:b4:92:85:2e:e1:
         e5:01:93:1a:7f:95:ee:6a:6f:d7:b6:10:a7:1a:01:19:73:d9:
         a7:67:21:5b
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICBhswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDAyMjkw
MTM4MzNaFw0yNTAyMTQwMTMwMDNaMDMxMTAvBgNVBAMTKDZGQURBMjFFMjFDNTky
OEMyQjNGNjg1QjFDNDA1NjMyQjYxMTVBNDIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCqdq9PivetdIo0A8Kq1+Vw8fxr6AMowSFXaE57EDNozdZaQhve
Jdi+rPLpBsEzz9GoBMGgBQ/pZ494GXH3pZYUtX9FzfWDu5mgupToT7Gnu/MUz5DF
ZxcjV0JajhrNXBkT9CBrSE8BCNeXj0xPF9b9JyoB1NSO0baOQ+DRtNUheIZEaxYh
4t/V2NOw4Rv4bnbvAN4UE3SS07r+BnNsIRTp+DHZSeaupOj+Yr+UetsoI0qDAjEZ
BJussnN3j1Yt0WioUI7RujHU8sOddGbnMpcFJBo4FW4A4ZquF4UIVQPXFLW2H0lK
ywEiTULZVKCdNrf1E+VEJBAgVv0tV4I57oWPAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUb62iHiHFkowrP2hbHEBWMrYRWkIwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L2I2MmlIaUhGa293clAyaGJIRUJXTXJZUldrSS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAABSwgwDQYJKoZIhvcNAQELBQADggEBAOZz+X+dYwtBXZjkjewtq0hdYgQi
YhDd3fmLn12IvFGAtTU4PL01E6WtIfr1sb/zpFsMoMMrInuoD4d6jzJvKl/bslJy
ZbB4DiG/NrhLXVYrQch4c+5/4I/GjiEAIkDqCfrpwOSGM3bQgtlFAoLPMFO4eXDj
IF28emJd/4P/PFweLqI2yzVCEj6Z/xAJxPZSNcJ6yRGQbss96lSjhedNadOb1Tcg
ZQHo04i/0HCbb7eshnAyCoknaNbr9qP0pxoKGY5dYl5ivZ74Z+lQePybtJbYx+j0
RVR35yY5rzeeEGwt7J2gk7i0koUu4eUBkxp/le5qb9e2EKcaARlz2adnIVs=
-----END CERTIFICATE-----
Generated at Mon Nov 25 23:54:42 2024 by rpki-client on console-ams.rpki-client.org