Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/i4gf7JQ8_Ox9rQoUXHcLjMOgkcA.roa
File:                     i4gf7JQ8_Ox9rQoUXHcLjMOgkcA.roa (raw, json)
Hash identifier:          Q12+284hD0NTXW6BXIYJMNtzm8n9XK31b5RMiC8gMFQ=
Subject key identifier:   8B:88:1F:EC:94:3C:FC:EC:7D:AD:0A:14:5C:77:0B:8C:C3:A0:91:C0
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       06F2
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/i4gf7JQ8_Ox9rQoUXHcLjMOgkcA.roa
Signing time:             Tue 30 Apr 2024 01:49:45 +0000
ROA not before:           Tue 30 Apr 2024 01:49:45 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        1.73.244.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1778 (0x6f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr 30 01:49:45 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=8B881FEC943CFCEC7DAD0A145C770B8CC3A091C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:7e:19:02:d7:7e:4d:4b:e4:23:4e:2c:f9:e1:
                    4b:24:85:61:bd:d2:27:60:e5:93:e5:da:63:d2:7c:
                    1e:cf:bf:ef:73:07:45:dd:0c:b2:63:15:d5:a2:f5:
                    67:52:03:94:fe:bf:18:43:f9:6d:88:bd:40:21:e5:
                    23:85:0b:a8:2b:6c:55:18:8a:65:0c:1b:80:64:91:
                    11:82:5a:de:ad:55:ab:28:c7:a6:f2:ae:f6:00:9c:
                    04:c9:c6:7c:bf:a6:c4:36:38:08:81:94:07:bc:08:
                    e0:59:f7:1a:6b:1d:f4:90:4b:4b:91:1d:0f:99:aa:
                    cd:d0:a8:f6:bf:81:fb:35:f1:13:46:33:d8:a9:a1:
                    86:16:16:a9:02:0f:ec:62:12:c7:f7:ca:b8:4c:eb:
                    56:0a:e4:8c:38:c3:fa:75:03:b7:3f:64:1b:b2:1e:
                    59:f5:73:a1:06:62:9f:b6:23:7e:30:3c:cc:f5:31:
                    90:a9:3e:cf:e0:35:34:d2:61:eb:ff:f5:f7:33:3c:
                    85:46:e5:39:20:96:9a:e0:93:f7:95:e1:f8:d6:c4:
                    cf:6f:54:2d:b6:73:07:8f:fb:fa:fc:44:35:7f:b6:
                    7d:43:b5:15:64:08:4c:77:5e:fd:57:63:d0:52:2f:
                    b1:f6:5a:4f:2d:be:f3:3c:fa:2e:6f:3e:e5:4e:ae:
                    cf:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:88:1F:EC:94:3C:FC:EC:7D:AD:0A:14:5C:77:0B:8C:C3:A0:91:C0
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/i4gf7JQ8_Ox9rQoUXHcLjMOgkcA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.73.244.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d8:2e:0e:59:45:58:ff:80:23:ea:7e:13:83:df:d9:95:7c:b9:
         80:73:1c:68:b1:58:8b:40:c1:31:06:5f:05:3d:57:83:d8:23:
         bd:f4:18:15:73:7c:9f:3a:50:86:c0:fd:66:a7:ca:63:50:98:
         69:68:53:e9:16:1d:9f:b8:50:cd:b8:79:f9:ba:9b:27:79:7a:
         25:22:90:5a:37:9e:ab:02:f1:08:af:93:1f:b4:77:d2:30:d7:
         49:e8:27:d4:2c:f9:73:f8:be:08:5f:4b:3c:ba:96:55:2f:7c:
         bc:66:5c:79:c6:6f:cb:5c:bf:84:be:4f:e4:f6:63:32:b1:25:
         32:94:5b:d6:e8:75:e4:f0:ca:d4:30:94:7a:29:3d:32:2c:07:
         85:0c:03:88:2c:fa:bb:7a:65:8b:d9:fb:d6:1c:71:f2:f4:b9:
         c6:07:69:e7:9b:f1:3f:80:4d:4a:da:6f:25:34:ce:b5:6c:8c:
         0d:ef:36:3a:4b:b7:0b:96:15:bf:42:3d:b9:e9:ea:0f:b6:de:
         9c:1b:f3:2e:e3:a5:e8:d3:8b:6a:22:f6:c3:a4:1b:5c:81:71:
         46:2b:62:34:2c:3d:c6:92:5f:ed:93:1b:0c:25:6a:c2:38:d6:
         bb:35:eb:ea:a4:09:66:40:5e:eb:3d:a6:72:32:8a:48:fc:3d:
         71:c1:70:36
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICBvIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw
MTQ5NDVaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDhCODgxRkVDOTQzQ0ZD
RUM3REFEMEExNDVDNzcwQjhDQzNBMDkxQzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCvfhkC135NS+QjTiz54UskhWG90idg5ZPl2mPSfB7Pv+9zB0Xd
DLJjFdWi9WdSA5T+vxhD+W2IvUAh5SOFC6grbFUYimUMG4BkkRGCWt6tVasox6by
rvYAnATJxny/psQ2OAiBlAe8COBZ9xprHfSQS0uRHQ+Zqs3QqPa/gfs18RNGM9ip
oYYWFqkCD+xiEsf3yrhM61YK5Iw4w/p1A7c/ZBuyHln1c6EGYp+2I34wPMz1MZCp
Ps/gNTTSYev/9fczPIVG5Tkglprgk/eV4fjWxM9vVC22cweP+/r8RDV/tn1DtRVk
CEx3Xv1XY9BSL7H2Wk8tvvM8+i5vPuVOrs/tAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUi4gf7JQ8/Ox9rQoUXHcLjMOgkcAwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L2k0Z2Y3SlE4X094OXJRb1VYSGNMak1PZ2tjQS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAEBSfQwDQYJKoZIhvcNAQELBQADggEBANguDllFWP+AI+p+E4Pf2ZV8uYBz
HGixWItAwTEGXwU9V4PYI730GBVzfJ86UIbA/WanymNQmGloU+kWHZ+4UM24efm6
myd5eiUikFo3nqsC8Qivkx+0d9Iw10noJ9Qs+XP4vghfSzy6llUvfLxmXHnGb8tc
v4S+T+T2YzKxJTKUW9bodeTwytQwlHopPTIsB4UMA4gs+rt6ZYvZ+9YccfL0ucYH
aeeb8T+ATUrabyU0zrVsjA3vNjpLtwuWFb9CPbnp6g+23pwb8y7jpejTi2oi9sOk
G1yBcUYrYjQsPcaSX+2TGwwlasI41rs16+qkCWZAXus9pnIyikj8PXHBcDY=
-----END CERTIFICATE-----
Generated at Sat Jun 1 15:54:32 2024 by rpki-client on console-ams.rpki-client.org