Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/iGbBeTxtZMFJCpTm9-_zuA99VtI.roa
File:                     iGbBeTxtZMFJCpTm9-_zuA99VtI.roa (raw, json)
Hash identifier:          /3TjeIlod5EazZkdRwUx9FI4AJh0QNZ2/6qOIpVQNKs=
Subject key identifier:   88:66:C1:79:3C:6D:64:C1:49:0A:94:E6:F7:EF:F3:B8:0F:7D:56:D2
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       05A4
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/iGbBeTxtZMFJCpTm9-_zuA99VtI.roa
Signing time:             Thu 27 Jul 2023 17:00:18 +0000
ROA not before:           Thu 27 Jul 2023 17:00:18 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     9605
IP address blocks:        1.76.12.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1444 (0x5a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jul 27 17:00:18 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=8866C1793C6D64C1490A94E6F7EFF3B80F7D56D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:08:bd:9d:40:92:ef:d5:02:ba:dd:51:dc:af:
                    33:a2:c3:31:99:b6:45:7f:ad:01:24:e5:a2:c7:20:
                    b6:25:10:7f:be:c4:2f:d2:7a:16:ea:48:59:11:1c:
                    f3:ed:2a:f0:8b:dc:70:7f:1e:14:bd:b4:9e:96:bc:
                    18:b2:37:de:64:73:5b:a3:34:b3:77:ed:d9:f0:af:
                    58:63:8e:fa:df:0a:ee:25:ec:d8:6f:89:b7:d8:b6:
                    4d:20:13:42:1d:9d:aa:89:ab:6c:ce:2b:63:ad:46:
                    29:54:fd:dc:60:a4:46:f8:f7:a5:32:88:1d:18:1b:
                    33:1a:5e:4a:e9:20:c8:36:c5:06:8d:c7:1c:7b:10:
                    4b:3d:f1:30:76:4c:30:67:22:a4:70:d6:7d:1e:de:
                    f4:a6:5a:f2:a9:76:14:f7:78:42:c7:04:3d:78:a3:
                    65:9e:42:39:92:cc:c7:58:92:3e:b2:00:96:8e:da:
                    d5:97:e5:24:73:a8:85:07:0f:63:45:a0:68:2f:77:
                    f5:34:3c:96:b7:e6:c3:a5:f0:ea:77:1a:85:63:cd:
                    05:c5:60:80:87:e5:71:17:cd:0e:fe:de:5b:7b:d4:
                    8e:d3:71:51:6d:e6:52:ed:05:22:56:f2:57:9a:09:
                    f6:78:ae:21:f0:cb:c7:1e:52:54:70:74:da:fe:7f:
                    5b:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:66:C1:79:3C:6D:64:C1:49:0A:94:E6:F7:EF:F3:B8:0F:7D:56:D2
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/iGbBeTxtZMFJCpTm9-_zuA99VtI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.76.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6e:02:ca:9c:95:7c:c4:f0:0f:83:49:4c:82:d8:b8:33:a1:fa:
         4a:b7:5d:de:f7:f6:84:d1:67:23:a6:48:23:eb:e3:64:84:f2:
         73:ad:b9:57:c9:f9:c5:71:14:0f:90:be:d2:02:a4:aa:7b:c4:
         9e:83:14:8b:70:73:16:2a:c4:ee:8f:db:c3:70:cb:07:d3:0a:
         2a:7d:2d:1b:6b:dc:5f:7c:da:ff:6f:28:9e:d0:f7:36:1c:aa:
         3c:23:9e:ec:af:04:e6:b1:a7:70:cc:a8:34:90:5a:d7:4a:aa:
         64:c3:dd:a1:3a:a7:74:06:b6:47:3c:b4:48:9e:d9:5d:7f:5c:
         fd:f8:13:94:5d:99:a9:ab:41:d3:48:32:5b:bc:57:dd:3c:b3:
         52:21:c2:be:1c:b9:39:43:76:99:aa:59:07:aa:0c:64:ff:80:
         87:88:90:d8:4f:66:c3:b0:53:7f:fe:78:25:05:d0:58:b6:e7:
         9f:36:77:eb:d9:60:55:3e:01:f4:75:9e:d0:ee:94:ed:5a:a0:
         80:d9:88:df:0f:32:f0:a7:ed:ee:31:2d:30:a1:10:91:0a:bc:
         4b:c6:67:ae:1c:c6:19:0e:ac:98:b0:39:20:43:64:84:11:e9:
         f8:37:20:32:32:63:e7:6d:c0:94:91:a3:12:6c:cd:db:3b:ed:
         0a:cb:02:46
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICBaQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA3Mjcx
NzAwMThaFw0yNDA3MTQwMTMwMDNaMDMxMTAvBgNVBAMTKDg4NjZDMTc5M0M2RDY0
QzE0OTBBOTRFNkY3RUZGM0I4MEY3RDU2RDIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDDCL2dQJLv1QK63VHcrzOiwzGZtkV/rQEk5aLHILYlEH++xC/S
ehbqSFkRHPPtKvCL3HB/HhS9tJ6WvBiyN95kc1ujNLN37dnwr1hjjvrfCu4l7Nhv
ibfYtk0gE0IdnaqJq2zOK2OtRilU/dxgpEb496UyiB0YGzMaXkrpIMg2xQaNxxx7
EEs98TB2TDBnIqRw1n0e3vSmWvKpdhT3eELHBD14o2WeQjmSzMdYkj6yAJaO2tWX
5SRzqIUHD2NFoGgvd/U0PJa35sOl8Op3GoVjzQXFYICH5XEXzQ7+3lt71I7TcVFt
5lLtBSJW8leaCfZ4riHwy8ceUlRwdNr+f1svAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUiGbBeTxtZMFJCpTm9+/zuA99VtIwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L2lHYkJlVHh0Wk1GSkNwVG05LV96dUE5OVZ0SS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAIBTAwwDQYJKoZIhvcNAQELBQADggEBAG4CypyVfMTwD4NJTILYuDOh+kq3
Xd739oTRZyOmSCPr42SE8nOtuVfJ+cVxFA+QvtICpKp7xJ6DFItwcxYqxO6P28Nw
ywfTCip9LRtr3F982v9vKJ7Q9zYcqjwjnuyvBOaxp3DMqDSQWtdKqmTD3aE6p3QG
tkc8tEie2V1/XP34E5RdmamrQdNIMlu8V908s1Ihwr4cuTlDdpmqWQeqDGT/gIeI
kNhPZsOwU3/+eCUF0Fi25582d+vZYFU+AfR1ntDulO1aoIDZiN8PMvCn7e4xLTCh
EJEKvEvGZ64cxhkOrJiwOSBDZIQR6fg3IDIyY+dtwJSRoxJszds77QrLAkY=
-----END CERTIFICATE-----
Generated at Sat Jun 1 13:38:48 2024 by rpki-client on console-fra.rpki-client.org