Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/6WA0U1NyJyvZbcfrzNcuVNuo14Q.roa
File:                     6WA0U1NyJyvZbcfrzNcuVNuo14Q.roa (raw, json)
Hash identifier:          ermJnDpXYtVm8esqMVnCKWAvxN9HfIYJZsFdQJfWKiw=
Subject key identifier:   E9:60:34:53:53:72:27:2B:D9:6D:C7:EB:CC:D7:2E:54:DB:A8:D7:84
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       071D
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/6WA0U1NyJyvZbcfrzNcuVNuo14Q.roa
Signing time:             Tue 30 Apr 2024 01:55:49 +0000
ROA not before:           Tue 30 Apr 2024 01:55:49 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        1.79.178.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1821 (0x71d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr 30 01:55:49 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=E96034535372272BD96DC7EBCCD72E54DBA8D784
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:26:f6:57:f3:28:b2:1f:f7:27:5f:73:05:3b:
                    88:1e:af:85:89:d7:0e:80:d3:72:08:3e:1f:56:d4:
                    52:be:d7:f1:5b:a1:ae:d8:02:90:1b:4e:cf:be:9b:
                    73:c0:58:2a:31:75:c8:fd:91:c1:9b:ec:be:f1:5a:
                    06:cd:6e:4d:50:b3:aa:fa:11:fc:53:ae:41:6d:ac:
                    88:cf:42:ea:bf:23:57:28:e7:fc:52:29:6c:63:53:
                    0e:f7:18:d0:0f:09:27:a5:f2:cd:df:ac:86:48:29:
                    e0:f1:16:50:6c:31:4e:79:0e:36:81:ef:40:87:34:
                    90:0d:d6:f2:f3:eb:83:46:bd:54:95:1c:6e:ac:20:
                    fe:f2:27:f7:6c:74:c0:16:c3:a9:45:4c:47:f3:78:
                    33:c5:9d:5e:3d:60:e7:93:1f:72:ad:48:a7:a1:29:
                    32:9a:69:00:99:2e:5d:4d:6a:27:aa:79:d1:3a:8b:
                    68:fd:3d:63:8d:ff:3b:25:57:01:9f:9b:32:b8:9b:
                    e6:a2:84:be:c6:5b:5f:d4:40:d2:9f:8d:0c:b1:9a:
                    08:de:ef:d4:e6:e9:95:99:95:05:8e:27:c4:4b:8d:
                    46:cc:2e:72:7a:f3:3c:9d:7a:64:ed:c5:c8:5b:f8:
                    d1:de:1a:bc:1e:88:94:66:de:53:6d:42:96:de:2c:
                    36:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:60:34:53:53:72:27:2B:D9:6D:C7:EB:CC:D7:2E:54:DB:A8:D7:84
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/6WA0U1NyJyvZbcfrzNcuVNuo14Q.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.79.178.0/23

    Signature Algorithm: sha256WithRSAEncryption
         64:16:b6:eb:2d:75:29:43:9f:77:ae:56:ed:66:a9:fc:a9:15:
         02:e7:58:cd:b8:69:a4:2c:81:05:00:f4:9e:ec:cd:cd:a3:1a:
         46:7b:a8:32:ab:75:1a:0d:c2:e1:5c:28:8d:54:4d:68:ec:a5:
         d4:31:b8:d9:b0:72:75:32:49:ca:f6:4c:18:04:aa:6c:a6:3a:
         02:8e:01:33:f8:c1:f5:86:9c:2a:63:47:b4:2c:33:01:05:6d:
         69:bc:52:8b:14:2f:fb:b0:87:c4:41:28:00:91:5b:cd:69:97:
         c8:cb:90:a8:d4:15:fe:15:f1:f8:54:e4:79:24:ca:79:62:3f:
         b8:df:a0:fe:28:e5:43:52:4c:51:a8:fa:a8:b3:28:cd:d1:1b:
         c7:a5:d9:4c:9b:de:be:9d:cf:cf:2d:3a:46:1b:cf:cf:b8:0c:
         35:94:ba:46:1c:be:ce:ab:03:c1:12:ac:42:5e:3b:b4:22:88:
         13:2a:33:20:de:0c:13:2d:e7:3c:97:3c:ce:46:1b:f5:e0:c7:
         5c:19:ed:01:21:10:f2:fa:e7:42:94:a1:2c:6a:87:2c:fe:0d:
         91:19:7f:ce:7c:94:f9:06:6e:bf:87:88:ee:85:9a:c3:95:eb:
         5d:20:42:cc:36:2f:7f:e5:f7:f7:b0:a3:2b:9f:ad:61:75:90:
         50:82:1b:71
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICBx0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw
MTU1NDlaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKEU5NjAzNDUzNTM3MjI3
MkJEOTZEQzdFQkNDRDcyRTU0REJBOEQ3ODQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDUJvZX8yiyH/cnX3MFO4ger4WJ1w6A03IIPh9W1FK+1/Fboa7Y
ApAbTs++m3PAWCoxdcj9kcGb7L7xWgbNbk1Qs6r6EfxTrkFtrIjPQuq/I1co5/xS
KWxjUw73GNAPCSel8s3frIZIKeDxFlBsMU55DjaB70CHNJAN1vLz64NGvVSVHG6s
IP7yJ/dsdMAWw6lFTEfzeDPFnV49YOeTH3KtSKehKTKaaQCZLl1NaieqedE6i2j9
PWON/zslVwGfmzK4m+aihL7GW1/UQNKfjQyxmgje79Tm6ZWZlQWOJ8RLjUbMLnJ6
8zydemTtxchb+NHeGrweiJRm3lNtQpbeLDabAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQU6WA0U1NyJyvZbcfrzNcuVNuo14QwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5LzZXQTBVMU55Snl2WmJjZnJ6TmN1Vk51bzE0US5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAEBT7IwDQYJKoZIhvcNAQELBQADggEBAGQWtustdSlDn3euVu1mqfypFQLn
WM24aaQsgQUA9J7szc2jGkZ7qDKrdRoNwuFcKI1UTWjspdQxuNmwcnUyScr2TBgE
qmymOgKOATP4wfWGnCpjR7QsMwEFbWm8UosUL/uwh8RBKACRW81pl8jLkKjUFf4V
8fhU5HkkynliP7jfoP4o5UNSTFGo+qizKM3RG8el2Uyb3r6dz88tOkYbz8+4DDWU
ukYcvs6rA8ESrEJeO7QiiBMqMyDeDBMt5zyXPM5GG/Xgx1wZ7QEhEPL650KUoSxq
hyz+DZEZf858lPkGbr+HiO6FmsOV610gQsw2L3/l9/ewoyufrWF1kFCCG3E=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:25:54 2025 by rpki-client