Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/zEhaY7A1d_N33GCq9D6sKohWDRs.roa
File:                     zEhaY7A1d_N33GCq9D6sKohWDRs.roa (raw, json)
Hash identifier:          Bg1xctztKcF7c/QIDwUk7stt66Mo4iFtQ3Wouv5Sm+4=
Subject key identifier:   CC:48:5A:63:B0:35:77:F3:77:DC:60:AA:F4:3E:AC:2A:88:56:0D:1B
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       043F
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/zEhaY7A1d_N33GCq9D6sKohWDRs.roa
Signing time:             Thu 27 Jul 2023 16:43:07 +0000
ROA not before:           Thu 27 Jul 2023 16:43:07 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     9605
IP address blocks:        211.14.114.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 23 Jun 2024 14:09:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1087 (0x43f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jul 27 16:43:07 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=CC485A63B03577F377DC60AAF43EAC2A88560D1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:64:e5:f0:ed:34:63:74:4e:c7:09:c8:4c:9f:
                    6f:0a:3e:4b:33:0d:99:8d:75:19:eb:e1:73:b3:60:
                    33:40:21:bc:c7:7d:2f:a6:a5:43:8e:6a:aa:b8:ca:
                    e3:52:ee:79:6b:40:47:c0:70:4f:ae:0d:c7:04:77:
                    b5:7b:2b:c8:07:f8:b7:ef:05:31:7a:15:e1:6a:2f:
                    90:07:ef:13:37:ee:d9:4f:dc:28:25:62:85:a3:de:
                    14:55:03:a7:d7:cb:98:69:da:66:16:99:51:59:3f:
                    f9:20:c1:f0:a9:ce:05:b0:f8:36:9b:a8:df:57:6e:
                    86:c8:56:5d:1b:48:66:48:5d:67:a3:43:65:c6:6c:
                    22:67:12:7e:d9:5b:c2:aa:38:3a:bb:b3:66:c6:fe:
                    5e:56:d3:5a:c6:a5:20:71:ec:3f:22:48:60:1b:e0:
                    14:3d:7c:3f:84:f9:f1:43:16:59:c3:8e:ee:01:19:
                    21:14:9d:55:09:e8:9f:39:71:ba:01:ce:f3:f5:7a:
                    13:15:0f:e4:1b:67:ab:8c:40:c4:ec:5f:5c:17:ee:
                    31:9d:40:cc:95:f5:06:0b:80:e7:de:e2:e1:3a:7c:
                    2c:9f:dc:36:6e:37:a5:96:eb:b5:ba:eb:6e:13:9b:
                    85:d6:d7:db:39:d1:17:8e:40:00:94:81:16:cf:77:
                    44:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:48:5A:63:B0:35:77:F3:77:DC:60:AA:F4:3E:AC:2A:88:56:0D:1B
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/zEhaY7A1d_N33GCq9D6sKohWDRs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.14.114.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3f:64:1b:e3:4b:b9:10:00:db:43:7a:5c:c1:76:fa:33:87:62:
         58:4b:83:ff:88:bb:58:da:a8:f2:f3:79:75:ad:79:ca:f4:bd:
         16:54:a1:fe:9e:63:b2:86:2e:19:58:cf:e9:a9:06:80:de:53:
         c5:8d:99:33:42:ff:a0:83:bb:91:ee:67:34:e6:ee:a6:13:04:
         fb:8a:60:3c:97:d4:ca:f3:93:cf:1e:94:46:4e:4e:d5:1d:b0:
         02:a1:7c:8a:f9:38:e9:53:f8:f1:fe:2d:e4:fa:b4:6d:26:94:
         15:94:9b:59:60:c0:50:65:73:00:f1:07:0a:4a:0f:0f:9b:20:
         c7:10:8f:c0:40:e9:5b:14:98:0a:70:a0:ef:37:df:dc:1f:d5:
         6a:f7:d7:a7:e7:a8:82:27:62:b5:48:ac:87:6d:48:25:2b:19:
         1e:42:ab:6d:87:27:90:28:cc:27:35:bd:b6:a8:09:bb:32:42:
         30:80:d1:73:d8:b6:ca:99:12:0e:5d:0b:4a:0b:b4:52:1e:5b:
         42:7b:37:69:ef:1c:b7:4b:1d:3c:72:c9:83:49:aa:e7:8b:cf:
         29:e6:ae:d7:02:9a:d1:4b:79:c9:7c:1d:a1:54:0c:45:5e:aa:
         a9:aa:36:b2:62:4c:74:f2:c3:8a:b3:e5:bb:13:32:9e:3f:4c:
         94:6d:28:4a
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICBD8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA3Mjcx
NjQzMDdaFw0yNDA3MTQwMTMwMDNaMDMxMTAvBgNVBAMTKENDNDg1QTYzQjAzNTc3
RjM3N0RDNjBBQUY0M0VBQzJBODg1NjBEMUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDjZOXw7TRjdE7HCchMn28KPkszDZmNdRnr4XOzYDNAIbzHfS+m
pUOOaqq4yuNS7nlrQEfAcE+uDccEd7V7K8gH+LfvBTF6FeFqL5AH7xM37tlP3Cgl
YoWj3hRVA6fXy5hp2mYWmVFZP/kgwfCpzgWw+DabqN9XbobIVl0bSGZIXWejQ2XG
bCJnEn7ZW8KqODq7s2bG/l5W01rGpSBx7D8iSGAb4BQ9fD+E+fFDFlnDju4BGSEU
nVUJ6J85cboBzvP1ehMVD+QbZ6uMQMTsX1wX7jGdQMyV9QYLgOfe4uE6fCyf3DZu
N6WW67W6624Tm4XW19s50ReOQACUgRbPd0RLAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUzEhaY7A1d/N33GCq9D6sKohWDRswHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L3pFaGFZN0ExZF9OMzNHQ3E5RDZzS29oV0RScy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAHTDnIwDQYJKoZIhvcNAQELBQADggEBAD9kG+NLuRAA20N6XMF2+jOHYlhL
g/+Iu1jaqPLzeXWtecr0vRZUof6eY7KGLhlYz+mpBoDeU8WNmTNC/6CDu5HuZzTm
7qYTBPuKYDyX1Mrzk88elEZOTtUdsAKhfIr5OOlT+PH+LeT6tG0mlBWUm1lgwFBl
cwDxBwpKDw+bIMcQj8BA6VsUmApwoO8339wf1Wr316fnqIInYrVIrIdtSCUrGR5C
q22HJ5AozCc1vbaoCbsyQjCA0XPYtsqZEg5dC0oLtFIeW0J7N2nvHLdLHTxyyYNJ
queLzynmrtcCmtFLecl8HaFUDEVeqqmqNrJiTHTyw4qz5bsTMp4/TJRtKEo=
-----END CERTIFICATE-----
Generated at Mon Jun 17 11:41:38 2024 by rpki-client on console-ams.rpki-client.org