Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/dbfqN5AzmFu4F3HNA33lGQWFAic.roa
File:                     dbfqN5AzmFu4F3HNA33lGQWFAic.roa (raw, json)
Hash identifier:          E6bDLnLCIvxiJweaAyqDQZQYSqTUmpBMTPWc1VSYNqQ=
Subject key identifier:   75:B7:EA:37:90:33:98:5B:B8:17:71:CD:03:7D:E5:19:05:85:02:27
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       049F
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/dbfqN5AzmFu4F3HNA33lGQWFAic.roa
Signing time:             Thu 27 Jul 2023 16:46:11 +0000
ROA not before:           Thu 27 Jul 2023 16:46:11 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     9605
IP address blocks:        183.73.192.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1183 (0x49f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jul 27 16:46:11 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=75B7EA379033985BB81771CD037DE51905850227
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:42:c1:0e:00:5e:8f:73:c7:99:b0:6f:a6:55:
                    e2:b2:df:97:76:c6:c7:52:1c:d0:77:a1:be:51:34:
                    7f:f3:7d:8c:ac:4c:48:8d:ca:7a:9a:f8:cf:ca:8f:
                    06:6a:46:7a:64:35:e6:e3:02:53:f6:b3:99:1a:b8:
                    76:71:56:1c:8e:d1:47:c9:f9:51:80:af:00:1d:f4:
                    62:26:e2:0b:92:2b:97:45:95:43:88:aa:8c:04:b0:
                    27:c8:07:00:5f:76:42:d5:c3:8f:66:ab:3a:db:cc:
                    c8:fc:e8:da:21:2f:eb:ae:39:53:fa:f6:e8:1b:a7:
                    ab:f6:8b:90:8b:b3:d1:b2:e2:d6:0c:28:bd:a2:89:
                    30:94:6f:21:40:2e:9c:4a:db:fd:01:9d:81:e1:15:
                    71:e6:2b:21:75:55:c8:ad:a3:32:19:90:98:88:6f:
                    25:fa:cb:86:4f:8d:d0:ce:fd:1a:2d:e0:59:7c:ff:
                    24:4c:5f:ed:a5:58:ed:f8:a2:9f:97:d2:bc:3c:4f:
                    3d:20:6f:12:90:7e:ad:7d:32:43:40:af:62:80:05:
                    4a:65:2b:7a:ab:37:2d:72:2a:df:09:b0:ea:f0:28:
                    1e:6e:47:83:b5:30:ee:27:de:0e:c6:df:a5:e5:3f:
                    2c:bb:f3:b6:c0:d2:c6:48:e2:21:0d:cb:17:7e:92:
                    12:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:B7:EA:37:90:33:98:5B:B8:17:71:CD:03:7D:E5:19:05:85:02:27
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/dbfqN5AzmFu4F3HNA33lGQWFAic.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.73.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         1c:45:39:0f:18:c4:4f:55:30:44:8d:a0:bc:60:0b:01:90:4a:
         cf:6e:9f:c6:10:23:5a:5b:8e:46:44:7e:48:26:17:64:be:cc:
         b1:64:4c:fe:74:d3:ae:42:7d:b2:fd:3e:67:2d:55:29:74:2b:
         00:94:ea:38:a4:a3:7d:b3:af:5b:1a:42:0a:3b:85:95:50:81:
         40:fd:6e:82:22:1d:f6:03:9b:ab:a0:49:15:43:ce:2f:bc:e1:
         2b:fa:cd:21:4c:54:e0:26:d5:66:2e:0a:17:33:4e:b8:b9:31:
         10:e3:cd:b1:45:c2:56:b9:83:d2:e7:d0:c7:f2:e3:10:b3:89:
         93:86:8c:ae:97:8a:66:42:1f:8a:d3:7c:2c:71:82:53:be:e0:
         26:4b:22:d8:e1:ae:43:ce:89:02:b9:ff:b3:e7:03:f9:6c:38:
         15:d3:a3:26:39:54:44:9e:d7:43:a7:a3:57:0d:9a:1b:82:1e:
         ff:5a:81:78:88:8d:1d:fd:3a:c5:33:ba:42:a2:a6:88:6d:49:
         39:4b:07:a2:ad:fb:f2:65:33:d3:8d:2f:e7:fa:f2:d2:46:f1:
         5c:56:1c:6f:a8:7b:22:f1:46:bc:ae:c7:65:96:0e:86:21:e3:
         6d:be:62:8d:2b:98:4a:db:f0:d9:30:e5:96:87:37:56:eb:a9:
         f6:dc:99:2e
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICBJ8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA3Mjcx
NjQ2MTFaFw0yNDA3MTQwMTMwMDNaMDMxMTAvBgNVBAMTKDc1QjdFQTM3OTAzMzk4
NUJCODE3NzFDRDAzN0RFNTE5MDU4NTAyMjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC5QsEOAF6Pc8eZsG+mVeKy35d2xsdSHNB3ob5RNH/zfYysTEiN
ynqa+M/KjwZqRnpkNebjAlP2s5kauHZxVhyO0UfJ+VGArwAd9GIm4guSK5dFlUOI
qowEsCfIBwBfdkLVw49mqzrbzMj86NohL+uuOVP69ugbp6v2i5CLs9Gy4tYMKL2i
iTCUbyFALpxK2/0BnYHhFXHmKyF1VcitozIZkJiIbyX6y4ZPjdDO/Rot4Fl8/yRM
X+2lWO34op+X0rw8Tz0gbxKQfq19MkNAr2KABUplK3qrNy1yKt8JsOrwKB5uR4O1
MO4n3g7G36XlPyy787bA0sZI4iENyxd+khI5AgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUdbfqN5AzmFu4F3HNA33lGQWFAicwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L2RiZnFONUF6bUZ1NEYzSE5BMzNsR1FXRkFpYy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAa3ScAwDQYJKoZIhvcNAQELBQADggEBABxFOQ8YxE9VMESNoLxgCwGQSs9u
n8YQI1pbjkZEfkgmF2S+zLFkTP50065CfbL9PmctVSl0KwCU6jiko32zr1saQgo7
hZVQgUD9boIiHfYDm6ugSRVDzi+84Sv6zSFMVOAm1WYuChczTri5MRDjzbFFwla5
g9Ln0Mfy4xCziZOGjK6XimZCH4rTfCxxglO+4CZLItjhrkPOiQK5/7PnA/lsOBXT
oyY5VESe10Ono1cNmhuCHv9agXiIjR39OsUzukKipohtSTlLB6Kt+/JlM9ONL+f6
8tJG8VxWHG+oeyLxRryux2WWDoYh422+Yo0rmErb8Nkw5ZaHN1brqfbcmS4=
-----END CERTIFICATE-----
Generated at Sat Jun 1 13:38:48 2024 by rpki-client on console-fra.rpki-client.org