Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/b_c7fvBqZTM7sAD7iYDPbVKXSZU.roa
File:                     b_c7fvBqZTM7sAD7iYDPbVKXSZU.roa (raw, json)
Hash identifier:          QzgXCOANyGhxt93GHtHUCY/sg9t1BdPu8FWCNqwOlwk=
Subject key identifier:   6F:F7:3B:7E:F0:6A:65:33:3B:B0:00:FB:89:80:CF:6D:52:97:49:95
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       012C
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/b_c7fvBqZTM7sAD7iYDPbVKXSZU.roa
Signing time:             Wed 24 May 2023 16:30:21 +0000
ROA not before:           Wed 24 May 2023 16:30:21 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        27.230.96.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 May 2024 13:36:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 300 (0x12c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: May 24 16:30:21 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=6FF73B7EF06A65333BB000FB8980CF6D52974995
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:8b:b3:40:c9:e7:94:2c:a2:41:19:ae:aa:9c:
                    5c:41:ea:e4:d0:de:b7:3f:07:77:fd:4c:25:91:dd:
                    a9:9f:69:2a:81:1a:cb:c3:02:b8:ec:94:4a:10:bf:
                    21:a4:ca:7f:a8:b5:dc:96:ca:20:eb:b1:14:45:46:
                    5d:94:e4:3b:48:2b:c9:05:ee:09:fd:94:92:47:39:
                    57:77:73:d1:c9:a6:3b:07:1e:1f:51:e2:06:3f:e2:
                    fb:2e:42:6c:99:b0:8e:8c:33:bb:23:38:c0:2b:1d:
                    02:32:e5:1b:e9:76:74:ca:88:7d:d1:e7:68:75:fa:
                    88:c5:14:92:3d:a0:49:57:6e:90:a2:6a:ad:8e:27:
                    1c:44:e6:90:5c:4e:c5:79:cc:df:15:9e:c3:cc:b3:
                    43:51:7f:98:d1:2c:db:de:7d:9b:09:f1:6d:7d:38:
                    31:3c:0c:bf:4c:e1:6d:66:ab:d8:39:83:36:d8:2f:
                    2f:90:8a:00:e2:84:31:03:00:a9:f6:c8:4d:0a:f4:
                    3a:cc:a1:33:08:40:b9:41:25:ca:80:ef:26:76:93:
                    a8:f3:32:32:5c:18:44:ba:4e:11:a7:d6:51:fc:f1:
                    40:f9:3f:05:fe:43:8d:ba:27:fd:f1:bc:14:9a:46:
                    fd:b3:40:30:1f:8d:1a:b3:bb:17:19:8d:eb:ae:ab:
                    72:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:F7:3B:7E:F0:6A:65:33:3B:B0:00:FB:89:80:CF:6D:52:97:49:95
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/b_c7fvBqZTM7sAD7iYDPbVKXSZU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.230.96.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0b:72:8b:f5:76:5d:b1:04:b2:d6:fc:bb:ea:26:40:ae:c9:a7:
         89:76:0d:30:6b:47:af:01:08:3c:7e:b6:43:a3:af:85:43:50:
         6e:a9:5f:3b:28:3a:7a:77:7a:74:bb:25:a1:71:6d:2a:a1:67:
         15:c7:cf:bc:76:37:58:a9:99:ff:ee:82:18:94:97:a4:d9:cf:
         97:5b:9f:e9:1d:4b:72:38:5d:4a:0b:ce:8b:6b:53:02:07:95:
         75:4f:9d:94:f6:d5:20:4c:6b:16:37:09:19:30:f7:20:43:d2:
         ba:69:08:44:78:de:42:36:67:de:76:c2:9a:5f:42:0e:f9:b8:
         3a:67:39:bb:51:90:41:00:49:bd:36:d6:bf:9c:d7:e4:12:52:
         0d:d1:fc:64:82:97:d2:d0:23:2b:81:cf:44:ba:fa:e3:4f:bd:
         c5:a1:3d:7c:d5:bb:05:d5:d8:ce:a5:46:a8:20:3c:57:e9:57:
         d9:d7:cf:23:60:35:d9:69:bb:f9:fb:6a:bd:cf:dd:a0:eb:1a:
         1c:b7:ec:a6:15:1f:fc:5e:c3:21:6c:0f:d6:96:c2:38:c6:5a:
         1b:28:ac:89:cf:a2:b1:30:88:08:70:a4:0a:df:23:3e:9f:94:
         4f:35:94:cc:e9:e0:af:ab:b8:47:4f:bf:91:6f:f6:f6:39:fb:
         37:fb:58:84
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICASwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA1MjQx
NjMwMjFaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDZGRjczQjdFRjA2QTY1
MzMzQkIwMDBGQjg5ODBDRjZENTI5NzQ5OTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCri7NAyeeULKJBGa6qnFxB6uTQ3rc/B3f9TCWR3amfaSqBGsvD
ArjslEoQvyGkyn+otdyWyiDrsRRFRl2U5DtIK8kF7gn9lJJHOVd3c9HJpjsHHh9R
4gY/4vsuQmyZsI6MM7sjOMArHQIy5RvpdnTKiH3R52h1+ojFFJI9oElXbpCiaq2O
JxxE5pBcTsV5zN8VnsPMs0NRf5jRLNvefZsJ8W19ODE8DL9M4W1mq9g5gzbYLy+Q
igDihDEDAKn2yE0K9DrMoTMIQLlBJcqA7yZ2k6jzMjJcGES6ThGn1lH88UD5PwX+
Q426J/3xvBSaRv2zQDAfjRqzuxcZjeuuq3JZAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUb/c7fvBqZTM7sAD7iYDPbVKXSZUwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L2JfYzdmdkJxWlRNN3NBRDdpWURQYlZLWFNaVS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAEb5mAwDQYJKoZIhvcNAQELBQADggEBAAtyi/V2XbEEstb8u+omQK7Jp4l2
DTBrR68BCDx+tkOjr4VDUG6pXzsoOnp3enS7JaFxbSqhZxXHz7x2N1ipmf/ughiU
l6TZz5dbn+kdS3I4XUoLzotrUwIHlXVPnZT21SBMaxY3CRkw9yBD0rppCER43kI2
Z952wppfQg75uDpnObtRkEEASb021r+c1+QSUg3R/GSCl9LQIyuBz0S6+uNPvcWh
PXzVuwXV2M6lRqggPFfpV9nXzyNgNdlpu/n7ar3P3aDrGhy37KYVH/xewyFsD9aW
wjjGWhsorInPorEwiAhwpArfIz6flE81lMzp4K+ruEdPv5Fv9vY5+zf7WIQ=
-----END CERTIFICATE-----
Generated at Sat Apr 27 10:15:57 2024 by rpki-client on console-ams.rpki-client.org