Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/md07cF4ZzkJ05d_3v-4zq5t-HnA.roa
File:                     md07cF4ZzkJ05d_3v-4zq5t-HnA.roa (raw, json)
Hash identifier:          bSQONQ5pqYD/VFXAwPljQhzosStuGv+KRPLJmQasItg=
Subject key identifier:   99:DD:3B:70:5E:19:CE:42:74:E5:DF:F7:BF:EE:33:AB:9B:7E:1E:70
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0A48
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/md07cF4ZzkJ05d_3v-4zq5t-HnA.roa
Signing time:             Sun 30 Jun 2024 01:48:27 +0000
ROA not before:           Sun 30 Jun 2024 01:48:27 +0000
ROA not after:            Tue 24 Jun 2025 10:46:45 +0000
asID:                     9605
IP address blocks:        183.74.254.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2632 (0xa48)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun 30 01:48:27 2024 GMT
            Not After : Jun 24 10:46:45 2025 GMT
        Subject: CN=99DD3B705E19CE4274E5DFF7BFEE33AB9B7E1E70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:3b:a1:16:c9:ae:9b:45:b8:b1:74:a3:74:e4:
                    fa:10:8f:22:f0:62:2c:06:e6:41:f8:cf:c4:41:4a:
                    b0:fb:d2:5b:79:3d:fd:08:03:3b:fd:a2:ec:c6:ad:
                    7b:63:f4:5f:df:34:ce:eb:e0:5a:ba:ac:47:68:57:
                    e3:61:5e:f2:2f:61:23:95:12:a4:b7:09:ce:2d:d9:
                    a0:0c:2b:74:60:39:2b:52:1e:0b:f0:da:21:d6:42:
                    fe:bb:7f:51:e0:0d:15:e1:32:8b:b9:41:ce:2a:66:
                    9d:9a:c5:3a:79:6f:85:4b:98:1f:96:25:84:b8:b2:
                    ae:e6:85:38:a4:05:5d:23:6e:76:86:34:7c:e7:22:
                    17:2c:39:2b:12:a7:55:b8:28:3a:76:99:e5:60:16:
                    b6:70:3b:a8:11:4a:33:45:8c:83:3a:15:a5:4f:86:
                    cc:fd:eb:5b:01:4e:7d:07:ae:5a:59:4a:0f:29:ca:
                    e3:3d:7e:15:42:06:98:f6:b7:d9:b5:12:7f:03:b3:
                    bb:05:1f:ca:20:6e:30:03:cf:0b:75:88:5e:5e:57:
                    70:71:ae:94:2a:06:b4:c9:a1:ad:57:cd:dd:89:21:
                    fd:1a:b7:31:f2:83:ad:1c:85:a4:df:b7:7b:5e:38:
                    cb:8e:13:6e:ff:55:8f:e4:15:03:01:b9:20:4a:b6:
                    c1:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:DD:3B:70:5E:19:CE:42:74:E5:DF:F7:BF:EE:33:AB:9B:7E:1E:70
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/md07cF4ZzkJ05d_3v-4zq5t-HnA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.74.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         cd:6a:2b:aa:59:c1:23:17:f8:a0:97:36:d0:33:ef:ae:f0:76:
         d1:83:f8:fb:10:48:5c:0b:46:04:37:1e:0a:56:7f:ca:ae:49:
         48:84:b2:e2:fc:ec:47:5f:32:78:2b:a8:89:f8:5a:a5:fe:c0:
         b0:01:a5:e1:ec:cb:61:e9:b5:80:7b:59:79:c0:9d:27:d9:06:
         bb:a3:27:c6:ce:a0:77:7c:35:62:d5:a1:e0:6b:93:fb:84:47:
         2c:50:be:b0:f2:f8:07:66:5a:6c:f6:f7:af:d6:a9:80:38:7f:
         f6:5a:a4:17:94:2e:f6:33:d2:21:1e:a5:c4:51:2c:e8:54:16:
         e2:b4:0e:5f:2d:b8:73:31:3f:51:2f:f9:81:74:1e:92:e2:ed:
         69:70:48:e9:57:be:7f:48:8c:f3:a9:47:e0:b8:59:57:09:3c:
         c7:06:4a:e8:af:e6:e4:37:a6:69:62:b7:e2:f8:e6:e2:99:f9:
         a5:27:b8:5a:d1:88:f3:db:f2:54:9e:f7:44:57:89:2e:e5:e2:
         8d:eb:af:25:8b:e4:31:7d:65:74:1c:b9:bf:d3:e8:2f:6c:10:
         9d:61:af:ab:bb:66:58:10:21:e2:4c:42:4c:f0:a4:02:b0:02:
         6d:59:04:b6:a5:c6:9a:c9:a8:8e:0d:a1:8a:a7:f1:4f:b6:20:
         54:f7:82:08
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICCkgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA2MzAw
MTQ4MjdaFw0yNTA2MjQxMDQ2NDVaMDMxMTAvBgNVBAMTKDk5REQzQjcwNUUxOUNF
NDI3NEU1REZGN0JGRUUzM0FCOUI3RTFFNzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDLO6EWya6bRbixdKN05PoQjyLwYiwG5kH4z8RBSrD70lt5Pf0I
Azv9ouzGrXtj9F/fNM7r4Fq6rEdoV+NhXvIvYSOVEqS3Cc4t2aAMK3RgOStSHgvw
2iHWQv67f1HgDRXhMou5Qc4qZp2axTp5b4VLmB+WJYS4sq7mhTikBV0jbnaGNHzn
IhcsOSsSp1W4KDp2meVgFrZwO6gRSjNFjIM6FaVPhsz961sBTn0HrlpZSg8pyuM9
fhVCBpj2t9m1En8Ds7sFH8ogbjADzwt1iF5eV3BxrpQqBrTJoa1Xzd2JIf0atzHy
g60chaTft3teOMuOE27/VY/kFQMBuSBKtsFZAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUmd07cF4ZzkJ05d/3v+4zq5t+HnAwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L21kMDdjRjRaemtKMDVkXzN2LTR6cTV0LUhuQS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAG3Sv4wDQYJKoZIhvcNAQELBQADggEBAM1qK6pZwSMX+KCXNtAz767wdtGD
+PsQSFwLRgQ3HgpWf8quSUiEsuL87EdfMngrqIn4WqX+wLABpeHsy2HptYB7WXnA
nSfZBrujJ8bOoHd8NWLVoeBrk/uERyxQvrDy+AdmWmz296/WqYA4f/ZapBeULvYz
0iEepcRRLOhUFuK0Dl8tuHMxP1Ev+YF0HpLi7WlwSOlXvn9IjPOpR+C4WVcJPMcG
Suiv5uQ3pmlit+L45uKZ+aUnuFrRiPPb8lSe90RXiS7l4o3rryWL5DF9ZXQcub/T
6C9sEJ1hr6u7ZlgQIeJMQkzwpAKwAm1ZBLalxprJqI4NoYqn8U+2IFT3ggg=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:12:11 2025 by rpki-client