Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/pTeEyE62dT0VJqm8WVvzOVIDcQE.roa
File:                     pTeEyE62dT0VJqm8WVvzOVIDcQE.roa (raw, json)
Hash identifier:          lN5JQ/Cs9wreimevAJzCbQiJRRmZppkyuyiVF2FHEfg=
Subject key identifier:   A5:37:84:C8:4E:B6:75:3D:15:26:A9:BC:59:5B:F3:39:52:03:71:01
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0A1D
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/pTeEyE62dT0VJqm8WVvzOVIDcQE.roa
Signing time:             Sun 30 Jun 2024 01:44:26 +0000
ROA not before:           Sun 30 Jun 2024 01:44:26 +0000
ROA not after:            Tue 24 Jun 2025 10:46:45 +0000
asID:                     9605
IP address blocks:        110.161.206.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2589 (0xa1d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun 30 01:44:26 2024 GMT
            Not After : Jun 24 10:46:45 2025 GMT
        Subject: CN=A53784C84EB6753D1526A9BC595BF33952037101
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:f2:7c:b6:68:b2:1e:6d:2d:89:91:48:da:fd:
                    b7:32:a9:a1:d6:ba:8f:8d:4b:71:c5:15:6d:0d:ad:
                    14:f7:19:a8:f1:4f:5b:c6:a5:80:dd:b8:8e:25:40:
                    59:20:0a:20:6e:e6:3e:dd:f9:fc:98:98:79:d7:d9:
                    fe:27:ba:63:c8:02:18:1a:00:b4:a9:ea:ee:fb:3b:
                    a5:6e:41:35:a9:e8:8c:eb:e5:27:5b:74:b2:27:5c:
                    9e:61:be:f2:68:49:db:5a:d5:96:30:9d:4e:cc:64:
                    aa:b6:19:b6:e2:69:ba:79:dc:12:63:00:1a:34:3b:
                    0c:0e:4d:f4:2a:d1:fa:21:a2:ab:0b:cb:22:1b:2d:
                    da:a5:d0:bb:44:08:c4:9b:1f:aa:0e:22:5d:dc:de:
                    2d:ca:c0:60:64:8c:b7:32:9b:5f:ad:5b:23:d6:1c:
                    a8:41:54:e2:36:63:7f:b1:b7:94:c0:32:f9:cc:83:
                    63:95:2e:02:ec:7b:c0:4a:9d:1b:83:2e:71:c7:ca:
                    8c:1c:6d:51:81:7f:f5:a8:06:c2:6d:0d:89:98:1a:
                    71:e9:02:11:ce:8e:7d:bc:66:6d:78:7b:3e:8f:0e:
                    db:e5:c0:8e:de:0b:aa:2b:a4:d7:b4:41:4e:9a:d5:
                    56:b0:85:de:28:66:85:4e:28:d3:17:eb:34:f2:64:
                    9b:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:37:84:C8:4E:B6:75:3D:15:26:A9:BC:59:5B:F3:39:52:03:71:01
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/pTeEyE62dT0VJqm8WVvzOVIDcQE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.161.206.0/23

    Signature Algorithm: sha256WithRSAEncryption
         90:0f:ea:f0:3b:9e:79:16:57:6e:26:4e:46:17:b6:a9:60:5d:
         b6:15:fd:1d:86:4e:6f:18:e4:e3:1b:f8:67:fb:15:4b:ea:a3:
         0e:b6:0e:4d:c0:11:b3:77:74:45:c0:f5:ff:da:b7:e3:4c:39:
         db:ae:ca:8c:af:08:ac:79:80:03:6d:ef:91:49:b2:11:ab:c2:
         45:22:1a:32:3d:8f:3e:30:45:44:ca:05:b5:bb:8c:fc:82:f3:
         e9:00:96:f1:0b:2b:ca:e9:08:d3:ab:e1:2a:38:98:a9:b0:6e:
         b0:e2:48:20:fa:62:d3:2f:34:e1:57:d0:9a:42:96:71:7c:fb:
         96:fc:6c:d1:b0:67:0f:78:50:5d:b8:80:47:21:00:9f:72:61:
         0f:e5:68:55:9e:d6:87:14:52:d8:43:60:7c:cd:58:dd:01:6e:
         91:28:2e:9e:87:ea:89:66:34:8f:9a:48:fa:80:a2:2b:61:4d:
         c6:4a:a9:36:40:ca:03:92:18:bd:8d:63:8b:4f:35:a4:0d:68:
         03:b4:c1:88:57:71:86:34:38:33:4c:4a:39:20:d4:d0:34:f0:
         3f:9d:0c:6c:2b:26:58:e6:ec:53:f4:a2:78:f1:da:01:4e:2c:
         dc:b5:f6:ff:e6:b7:4b:ff:c6:59:cd:a1:1a:a3:cd:69:94:2e:
         4b:11:68:30
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICCh0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA2MzAw
MTQ0MjZaFw0yNTA2MjQxMDQ2NDVaMDMxMTAvBgNVBAMTKEE1Mzc4NEM4NEVCNjc1
M0QxNTI2QTlCQzU5NUJGMzM5NTIwMzcxMDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDg8ny2aLIebS2JkUja/bcyqaHWuo+NS3HFFW0NrRT3GajxT1vG
pYDduI4lQFkgCiBu5j7d+fyYmHnX2f4numPIAhgaALSp6u77O6VuQTWp6Izr5Sdb
dLInXJ5hvvJoSdta1ZYwnU7MZKq2Gbbiabp53BJjABo0OwwOTfQq0fohoqsLyyIb
Ldql0LtECMSbH6oOIl3c3i3KwGBkjLcym1+tWyPWHKhBVOI2Y3+xt5TAMvnMg2OV
LgLse8BKnRuDLnHHyowcbVGBf/WoBsJtDYmYGnHpAhHOjn28Zm14ez6PDtvlwI7e
C6orpNe0QU6a1Vawhd4oZoVOKNMX6zTyZJsPAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUpTeEyE62dT0VJqm8WVvzOVIDcQEwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L3BUZUV5RTYyZFQwVkpxbThXVnZ6T1ZJRGNRRS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAFuoc4wDQYJKoZIhvcNAQELBQADggEBAJAP6vA7nnkWV24mTkYXtqlgXbYV
/R2GTm8Y5OMb+Gf7FUvqow62Dk3AEbN3dEXA9f/at+NMOduuyoyvCKx5gANt75FJ
shGrwkUiGjI9jz4wRUTKBbW7jPyC8+kAlvELK8rpCNOr4So4mKmwbrDiSCD6YtMv
NOFX0JpClnF8+5b8bNGwZw94UF24gEchAJ9yYQ/laFWe1ocUUthDYHzNWN0BbpEo
Lp6H6olmNI+aSPqAoithTcZKqTZAygOSGL2NY4tPNaQNaAO0wYhXcYY0ODNMSjkg
1NA08D+dDGwrJljm7FP0onjx2gFOLNy19v/mt0v/xlnNoRqjzWmULksRaDA=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:20:16 2025 by rpki-client