Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/ugiGDLHcgM_DbLc-pYYtfWIr_IU.roa
File:                     ugiGDLHcgM_DbLc-pYYtfWIr_IU.roa (raw, json)
Hash identifier:          8nuen0XhtderUrMmdGESkqVYmSRBTF4DMjQDJqEfM2I=
Subject key identifier:   BA:08:86:0C:B1:DC:80:CF:C3:6C:B7:3E:A5:86:2D:7D:62:2B:FC:85
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       051B
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ugiGDLHcgM_DbLc-pYYtfWIr_IU.roa
Signing time:             Thu 27 Jul 2023 16:54:06 +0000
ROA not before:           Thu 27 Jul 2023 16:54:06 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     9605
IP address blocks:        1.79.160.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1307 (0x51b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jul 27 16:54:06 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=BA08860CB1DC80CFC36CB73EA5862D7D622BFC85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:5a:e2:42:01:d9:20:11:55:20:7b:4b:85:0a:
                    7c:a0:82:9d:05:e4:e6:36:99:42:f5:b7:79:36:44:
                    13:c8:8a:c1:66:ab:c7:25:d5:d1:dc:02:c6:2d:ba:
                    df:45:34:a2:1d:9a:69:f0:00:2f:4b:2a:f4:3a:d2:
                    32:8e:94:f0:50:ff:c9:5a:4b:3c:af:4f:6b:ff:bf:
                    c7:af:31:8b:15:f2:5b:60:c8:90:45:3c:b2:74:76:
                    e0:6c:51:22:fc:2f:50:e6:5a:89:ee:bd:87:a0:ad:
                    c8:ed:f8:d1:9b:de:59:8f:b2:d4:7d:10:23:c4:35:
                    b5:39:08:e3:99:ff:90:68:fc:c8:8d:37:21:c0:68:
                    de:d1:16:9d:a3:0f:d9:68:23:a9:c7:17:87:a7:ca:
                    af:06:31:35:a1:52:47:b9:96:f8:bc:57:68:53:9b:
                    17:a9:1d:e6:b2:9f:94:b4:b1:55:72:a1:2c:c8:64:
                    73:a7:9c:58:a7:cd:ad:ba:44:6c:5c:73:43:13:51:
                    3d:e6:6c:b9:6c:6c:3c:33:32:1e:5f:c9:ca:38:57:
                    6a:61:30:74:94:80:81:20:7e:72:39:69:23:df:6f:
                    6a:20:f6:d2:1f:cb:ae:3f:31:30:ed:69:25:86:d8:
                    7b:4f:d7:b3:ab:9c:55:86:65:cb:2c:6a:3f:0b:1a:
                    8b:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:08:86:0C:B1:DC:80:CF:C3:6C:B7:3E:A5:86:2D:7D:62:2B:FC:85
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ugiGDLHcgM_DbLc-pYYtfWIr_IU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.79.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         58:89:63:42:5d:98:fb:ba:7c:c6:55:89:34:c4:27:37:7c:cb:
         26:2a:57:b3:ce:af:71:6b:75:57:0e:ca:a8:8c:e6:6d:0b:e2:
         3e:2f:15:71:94:74:e7:cc:65:b1:b8:27:50:1f:ec:77:eb:8a:
         27:8b:42:1d:4c:98:65:3a:bb:05:02:45:c2:1d:d2:e6:ed:e8:
         a9:8f:53:f2:d9:ac:7f:87:7d:81:7f:16:ef:51:5e:90:a2:b8:
         c8:61:43:81:e2:f3:cc:61:84:dd:2e:a0:38:b5:d7:89:3f:15:
         51:4e:02:b7:69:25:48:b5:5a:6c:e3:2d:90:7c:99:7c:bb:45:
         4a:e8:50:76:4c:99:61:bb:ab:31:cf:ee:03:70:d6:5d:cd:67:
         cb:48:b0:df:a2:86:c1:a7:03:43:49:8d:38:6e:aa:91:5e:61:
         93:ec:3d:97:33:36:20:94:88:1a:1b:40:7e:c1:7b:70:1f:3a:
         5c:d4:62:89:40:c1:ba:ed:ce:bc:ee:1e:3e:f6:37:da:d9:cf:
         22:72:b9:e4:14:9b:72:1e:b1:ee:d4:5e:46:f4:fc:38:49:f3:
         62:57:0b:9a:af:d5:84:98:3d:3f:47:92:6e:6e:a8:4c:9e:d0:
         0b:68:50:e0:f4:20:dd:fa:de:91:76:6c:cb:a2:29:1c:ca:e8:
         52:0e:c8:07
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICBRswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA3Mjcx
NjU0MDZaFw0yNDA3MTQwMTMwMDNaMDMxMTAvBgNVBAMTKEJBMDg4NjBDQjFEQzgw
Q0ZDMzZDQjczRUE1ODYyRDdENjIyQkZDODUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCwWuJCAdkgEVUge0uFCnyggp0F5OY2mUL1t3k2RBPIisFmq8cl
1dHcAsYtut9FNKIdmmnwAC9LKvQ60jKOlPBQ/8laSzyvT2v/v8evMYsV8ltgyJBF
PLJ0duBsUSL8L1DmWonuvYegrcjt+NGb3lmPstR9ECPENbU5COOZ/5Bo/MiNNyHA
aN7RFp2jD9loI6nHF4enyq8GMTWhUke5lvi8V2hTmxepHeayn5S0sVVyoSzIZHOn
nFinza26RGxcc0MTUT3mbLlsbDwzMh5fyco4V2phMHSUgIEgfnI5aSPfb2og9tIf
y64/MTDtaSWG2HtP17OrnFWGZcssaj8LGosPAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUugiGDLHcgM/DbLc+pYYtfWIr/IUwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L3VnaUdETEhjZ01fRGJMYy1wWVl0ZldJcl9JVS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAIBT6AwDQYJKoZIhvcNAQELBQADggEBAFiJY0JdmPu6fMZViTTEJzd8yyYq
V7POr3FrdVcOyqiM5m0L4j4vFXGUdOfMZbG4J1Af7HfriieLQh1MmGU6uwUCRcId
0ubt6KmPU/LZrH+HfYF/Fu9RXpCiuMhhQ4Hi88xhhN0uoDi114k/FVFOArdpJUi1
WmzjLZB8mXy7RUroUHZMmWG7qzHP7gNw1l3NZ8tIsN+ihsGnA0NJjThuqpFeYZPs
PZczNiCUiBobQH7Be3AfOlzUYolAwbrtzrzuHj72N9rZzyJyueQUm3Iese7UXkb0
/DhJ82JXC5qv1YSYPT9Hkm5uqEye0AtoUOD0IN363pF2bMuiKRzK6FIOyAc=
-----END CERTIFICATE-----
Generated at Sat Jun 1 13:38:48 2024 by rpki-client on console-fra.rpki-client.org