Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/skYQNzn1CQ1RYYB6ddhshU2Nj9U.roa
File:                     skYQNzn1CQ1RYYB6ddhshU2Nj9U.roa (raw, json)
Hash identifier:          WXDOFJESVFlm4O6Vqtn+iFvzp2vjhmwr15Vqk7Co3Go=
Subject key identifier:   B2:46:10:37:39:F5:09:0D:51:61:80:7A:75:D8:6C:85:4D:8D:8F:D5
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0993
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/skYQNzn1CQ1RYYB6ddhshU2Nj9U.roa
Signing time:             Sun 30 Jun 2024 01:36:28 +0000
ROA not before:           Sun 30 Jun 2024 01:36:28 +0000
ROA not after:            Tue 24 Jun 2025 10:46:45 +0000
asID:                     9605
IP address blocks:        1.67.224.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Dec 2024 00:11:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2451 (0x993)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun 30 01:36:28 2024 GMT
            Not After : Jun 24 10:46:45 2025 GMT
        Subject: CN=B246103739F5090D5161807A75D86C854D8D8FD5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:86:ef:4d:df:cf:d0:b5:6c:f6:c0:2f:44:11:
                    8a:c2:ec:aa:3e:e7:9c:ce:06:cf:08:46:62:08:3e:
                    5f:99:c8:fa:3b:16:1f:16:3a:6d:8d:5b:d1:38:15:
                    39:b7:13:12:1f:82:62:23:f6:43:d2:30:09:75:78:
                    b2:08:3f:87:e2:34:0d:2a:74:f5:da:86:ba:3f:61:
                    97:bc:fe:8a:e2:dd:19:db:49:e1:25:73:0b:d7:76:
                    19:1b:16:00:dc:9d:93:c2:7f:65:6f:75:71:18:e0:
                    de:4a:0c:24:bd:37:8c:03:0f:0d:e8:e0:57:8c:68:
                    8b:63:b2:a6:47:d5:ce:14:f8:12:7c:97:10:cf:19:
                    90:27:9f:44:07:bb:48:ca:3a:8a:e6:5d:c2:2d:8d:
                    7a:54:41:f9:ad:3e:1a:4b:ab:19:2b:9f:35:5c:7a:
                    85:f3:d7:38:c2:21:ce:23:d3:fd:49:da:f7:8b:3a:
                    e6:85:32:ef:d2:8b:95:1c:8c:f2:fd:db:81:ce:28:
                    bd:c6:10:58:c4:ca:8c:e5:9c:4f:33:23:18:8b:bf:
                    52:be:ae:1b:5e:67:a7:ec:22:81:72:fb:cd:35:f9:
                    8c:c3:77:d4:7f:32:ea:34:d9:a3:88:13:18:45:d5:
                    c5:88:55:9f:fc:57:93:81:3e:a4:15:b9:cf:32:f1:
                    ae:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:46:10:37:39:F5:09:0D:51:61:80:7A:75:D8:6C:85:4D:8D:8F:D5
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/skYQNzn1CQ1RYYB6ddhshU2Nj9U.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.67.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ce:a5:55:ed:75:77:5d:c5:63:59:ef:bc:19:18:ff:31:cb:35:
         0a:0c:72:8f:a4:3e:de:05:7b:48:28:08:fa:fc:e9:1b:17:5e:
         ac:2f:4b:7a:ca:0b:98:d8:e5:a6:19:b4:af:54:fd:4b:c4:ea:
         32:7f:4b:71:0c:54:55:7c:a0:ff:50:23:0b:b4:7f:6a:8d:c0:
         f9:fe:8d:6e:ca:5e:79:c6:86:6f:d7:f5:4c:0e:f8:9b:cb:aa:
         52:97:93:b0:5f:3b:a8:28:ae:05:ab:29:c7:45:25:cb:e7:3a:
         fb:a0:0c:59:e5:0a:b1:bc:39:79:67:00:5b:1a:28:91:66:6a:
         62:33:7c:dd:84:90:df:9d:7e:5b:2c:96:a6:56:a2:9e:d9:c9:
         5c:2a:0a:8d:6f:6a:f6:bf:60:4d:62:3a:97:62:62:a9:a9:56:
         61:de:3b:ae:7b:98:0a:e8:f6:c4:a6:78:28:f9:bc:bb:91:61:
         27:42:86:c7:df:86:ec:17:67:21:32:8f:98:b1:d9:77:14:1c:
         5a:8f:7e:e4:fe:63:87:d9:5c:98:66:d3:b8:20:30:f2:df:01:
         b6:b9:04:28:89:d8:79:19:93:95:7e:63:8f:4c:a3:3e:bd:1e:
         e3:c4:43:9d:c3:0b:c0:1f:4d:9c:6a:16:4c:d7:59:4b:01:81:
         d4:0d:68:93
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICCZMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA2MzAw
MTM2MjhaFw0yNTA2MjQxMDQ2NDVaMDMxMTAvBgNVBAMTKEIyNDYxMDM3MzlGNTA5
MEQ1MTYxODA3QTc1RDg2Qzg1NEQ4RDhGRDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCyhu9N38/QtWz2wC9EEYrC7Ko+55zOBs8IRmIIPl+ZyPo7Fh8W
Om2NW9E4FTm3ExIfgmIj9kPSMAl1eLIIP4fiNA0qdPXahro/YZe8/ori3RnbSeEl
cwvXdhkbFgDcnZPCf2VvdXEY4N5KDCS9N4wDDw3o4FeMaItjsqZH1c4U+BJ8lxDP
GZAnn0QHu0jKOormXcItjXpUQfmtPhpLqxkrnzVceoXz1zjCIc4j0/1J2veLOuaF
Mu/Si5UcjPL924HOKL3GEFjEyozlnE8zIxiLv1K+rhteZ6fsIoFy+801+YzDd9R/
Muo02aOIExhF1cWIVZ/8V5OBPqQVuc8y8a57AgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUskYQNzn1CQ1RYYB6ddhshU2Nj9UwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L3NrWVFOem4xQ1ExUllZQjZkZGhzaFUyTmo5VS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAIBQ+AwDQYJKoZIhvcNAQELBQADggEBAM6lVe11d13FY1nvvBkY/zHLNQoM
co+kPt4Fe0goCPr86RsXXqwvS3rKC5jY5aYZtK9U/UvE6jJ/S3EMVFV8oP9QIwu0
f2qNwPn+jW7KXnnGhm/X9UwO+JvLqlKXk7BfO6gorgWrKcdFJcvnOvugDFnlCrG8
OXlnAFsaKJFmamIzfN2EkN+dflsslqZWop7ZyVwqCo1vava/YE1iOpdiYqmpVmHe
O657mAro9sSmeCj5vLuRYSdChsffhuwXZyEyj5ix2XcUHFqPfuT+Y4fZXJhm07gg
MPLfAba5BCiJ2HkZk5V+Y49Moz69HuPEQ53DC8AfTZxqFkzXWUsBgdQNaJM=
-----END CERTIFICATE-----
Generated at Tue Nov 26 02:17:12 2024 by rpki-client on console-fra.rpki-client.org