Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/ha4L5wzrOoedpgmvtPWZMJCVqvk.roa
File:                     ha4L5wzrOoedpgmvtPWZMJCVqvk.roa (raw, json)
Hash identifier:          9f7HVXoaV3S4i6WrYAuvk0SOZhODw1PNfUSENwM5wd0=
Subject key identifier:   85:AE:0B:E7:0C:EB:3A:87:9D:A6:09:AF:B4:F5:99:30:90:95:AA:F9
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0A14
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ha4L5wzrOoedpgmvtPWZMJCVqvk.roa
Signing time:             Sun 30 Jun 2024 01:44:22 +0000
ROA not before:           Sun 30 Jun 2024 01:44:22 +0000
ROA not after:            Tue 24 Jun 2025 10:46:45 +0000
asID:                     9605
IP address blocks:        220.210.56.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2580 (0xa14)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun 30 01:44:22 2024 GMT
            Not After : Jun 24 10:46:45 2025 GMT
        Subject: CN=85AE0BE70CEB3A879DA609AFB4F599309095AAF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:0a:f5:75:c8:79:8c:8a:3d:6c:7f:5c:5f:a6:
                    b6:a6:25:9b:73:6d:7c:0e:4d:f6:76:c2:67:be:cc:
                    c6:5c:da:97:7f:7b:38:80:a5:e6:8c:0d:2e:d1:fb:
                    96:d5:a2:bd:0a:30:d3:ef:86:20:f5:eb:ce:f8:17:
                    f2:3c:ee:12:99:75:e2:1f:a8:a7:4a:66:2f:2a:7b:
                    68:66:5f:a8:c5:50:81:79:f7:cb:5e:09:57:ca:8b:
                    60:da:fb:73:f3:01:d3:d2:ba:8b:25:2f:9c:14:df:
                    91:e8:76:4a:d1:a4:60:b5:8e:52:06:79:d7:db:c1:
                    38:1b:e0:53:d6:28:1a:f8:51:4d:6e:68:81:30:1d:
                    cb:39:14:32:3d:40:2f:e4:0d:30:91:c5:a6:9b:36:
                    41:d2:73:73:ae:39:58:a3:54:49:97:03:ce:bc:08:
                    ed:7a:c4:9f:f8:31:81:ed:8e:8f:f8:a3:6c:22:2d:
                    a6:e3:82:cd:f6:c7:2c:80:49:83:ec:a0:43:6d:f1:
                    c5:26:cd:28:c8:62:24:05:14:b9:35:db:dd:86:ba:
                    0e:c6:53:7c:f7:76:80:54:75:63:63:b4:69:23:26:
                    38:0d:29:be:33:f7:e4:65:36:29:e7:b7:6c:33:26:
                    c1:3b:0c:d1:fe:c9:16:b4:1b:d3:dc:a5:35:94:fc:
                    f5:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:AE:0B:E7:0C:EB:3A:87:9D:A6:09:AF:B4:F5:99:30:90:95:AA:F9
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ha4L5wzrOoedpgmvtPWZMJCVqvk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.210.56.0/23

    Signature Algorithm: sha256WithRSAEncryption
         60:8d:e3:e9:81:e0:0f:9a:28:20:4b:32:13:a9:bb:09:30:c1:
         e7:14:ce:0b:5a:f8:d3:df:17:0a:04:b8:a6:cd:b5:31:bc:95:
         ca:50:27:2d:12:60:95:ad:4c:d7:58:5f:85:6d:15:70:87:28:
         95:4c:71:aa:b9:87:de:b9:b2:7b:63:59:29:67:69:bb:42:18:
         48:dd:84:b3:37:34:5c:ff:82:31:3b:93:b9:12:91:26:5d:df:
         b6:a5:6c:9c:fb:75:33:3c:b5:09:85:fb:4b:a3:44:ae:b7:7f:
         6a:fa:77:e5:ab:26:cc:e5:5c:64:5b:61:2c:2f:aa:03:8c:70:
         67:2a:32:e1:5d:7c:12:19:8e:94:65:a0:86:97:eb:69:29:bb:
         c5:d4:f9:ad:7f:62:96:a2:51:57:05:18:8a:2f:94:ae:0e:48:
         39:71:35:0d:46:88:56:e9:3d:4c:04:ee:d9:d5:ad:cd:11:91:
         59:db:8e:db:2f:05:c4:b3:6d:71:f3:31:76:ae:0b:00:19:07:
         43:eb:a8:66:66:11:2e:a6:cf:fe:a3:e0:b5:14:1c:9a:f9:6c:
         ba:32:87:ea:46:4c:48:0c:31:07:2b:a4:2b:32:2e:e9:22:68:
         8d:1a:4d:c0:66:e2:21:bb:b7:16:67:5b:66:8e:a2:6a:be:3f:
         dd:91:9a:b4
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICChQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA2MzAw
MTQ0MjJaFw0yNTA2MjQxMDQ2NDVaMDMxMTAvBgNVBAMTKDg1QUUwQkU3MENFQjNB
ODc5REE2MDlBRkI0RjU5OTMwOTA5NUFBRjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDJCvV1yHmMij1sf1xfpramJZtzbXwOTfZ2wme+zMZc2pd/eziA
peaMDS7R+5bVor0KMNPvhiD16874F/I87hKZdeIfqKdKZi8qe2hmX6jFUIF598te
CVfKi2Da+3PzAdPSuoslL5wU35HodkrRpGC1jlIGedfbwTgb4FPWKBr4UU1uaIEw
Hcs5FDI9QC/kDTCRxaabNkHSc3OuOVijVEmXA868CO16xJ/4MYHtjo/4o2wiLabj
gs32xyyASYPsoENt8cUmzSjIYiQFFLk1292Gug7GU3z3doBUdWNjtGkjJjgNKb4z
9+RlNinnt2wzJsE7DNH+yRa0G9PcpTWU/PVBAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUha4L5wzrOoedpgmvtPWZMJCVqvkwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L2hhNEw1d3pyT29lZHBnbXZ0UFdaTUpDVnF2ay5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAHc0jgwDQYJKoZIhvcNAQELBQADggEBAGCN4+mB4A+aKCBLMhOpuwkwwecU
zgta+NPfFwoEuKbNtTG8lcpQJy0SYJWtTNdYX4VtFXCHKJVMcaq5h965sntjWSln
abtCGEjdhLM3NFz/gjE7k7kSkSZd37albJz7dTM8tQmF+0ujRK63f2r6d+WrJszl
XGRbYSwvqgOMcGcqMuFdfBIZjpRloIaX62kpu8XU+a1/YpaiUVcFGIovlK4OSDlx
NQ1GiFbpPUwE7tnVrc0RkVnbjtsvBcSzbXHzMXauCwAZB0PrqGZmES6mz/6j4LUU
HJr5bLoyh+pGTEgMMQcrpCsyLukiaI0aTcBm4iG7txZnW2aOomq+P92RmrQ=
-----END CERTIFICATE-----
Generated at Fri Nov 22 16:45:41 2024 by rpki-client on console-ams.rpki-client.org