Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/EkJx8jP9xUWdgKHbSmU-npCl7Ac.roa
File:                     EkJx8jP9xUWdgKHbSmU-npCl7Ac.roa (raw, json)
Hash identifier:          qey4YJJe4ZGkcj7/UId+TWg4k+e3EVlxrUkKT/+ZjBU=
Subject key identifier:   12:42:71:F2:33:FD:C5:45:9D:80:A1:DB:4A:65:3E:9E:90:A5:EC:07
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0A63
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/EkJx8jP9xUWdgKHbSmU-npCl7Ac.roa
Signing time:             Sun 30 Jun 2024 01:50:23 +0000
ROA not before:           Sun 30 Jun 2024 01:50:23 +0000
ROA not after:            Tue 24 Jun 2025 10:46:45 +0000
asID:                     9605
IP address blocks:        1.76.16.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2659 (0xa63)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun 30 01:50:23 2024 GMT
            Not After : Jun 24 10:46:45 2025 GMT
        Subject: CN=124271F233FDC5459D80A1DB4A653E9E90A5EC07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:00:1b:21:ca:53:02:89:ff:05:f0:9d:d6:10:
                    e2:49:52:6c:78:60:66:28:53:49:75:54:5b:20:e7:
                    87:97:d1:ab:87:e1:f5:85:76:d6:29:56:e2:ab:58:
                    6f:47:3f:b6:e2:a6:ea:56:31:cb:03:09:15:63:f1:
                    97:ee:e5:91:b3:e5:7f:ac:8f:0e:8d:84:af:5e:d6:
                    cf:56:a2:9d:5b:8e:7f:b7:5c:e3:37:45:40:9f:73:
                    f0:0e:da:c3:30:55:14:20:e3:c8:a6:fc:3f:57:4d:
                    bc:a1:a9:51:b8:b8:d6:af:a4:82:cd:1f:97:84:15:
                    90:0c:3c:67:8a:fb:f1:68:fb:f1:6c:07:ba:59:82:
                    26:7c:36:34:47:c7:f5:fc:99:28:9f:6b:8d:32:9f:
                    75:ac:fd:d5:7b:c2:c4:7f:bc:bf:26:32:78:83:01:
                    a9:36:06:f4:98:de:72:94:04:82:42:90:4a:5c:81:
                    d6:ec:5e:b0:2e:01:0e:9c:c2:77:a3:49:32:70:57:
                    a1:30:ac:7e:2f:c3:3d:d7:e6:90:48:ab:86:6d:5c:
                    f8:95:3c:35:f1:a8:ba:9a:55:d0:0e:93:ea:98:d5:
                    80:e5:dd:19:7a:f1:9c:cc:09:d3:f9:33:02:42:05:
                    3a:0e:96:1b:12:a3:3d:e3:f0:04:f4:bb:1b:bf:a5:
                    1b:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:42:71:F2:33:FD:C5:45:9D:80:A1:DB:4A:65:3E:9E:90:A5:EC:07
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/EkJx8jP9xUWdgKHbSmU-npCl7Ac.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.76.16.0/21

    Signature Algorithm: sha256WithRSAEncryption
         44:d4:12:e8:8e:f3:ed:88:fb:f2:c7:e6:02:2b:01:6b:33:6f:
         f9:d3:d4:21:f6:97:f3:1d:77:de:b4:89:83:c9:95:b7:63:ef:
         38:7e:17:ae:41:55:f9:b0:9b:d2:24:a2:f7:1b:8d:09:9a:99:
         63:fc:1e:98:32:6b:2a:bb:13:9a:c3:d2:d6:69:f6:9e:11:a1:
         79:ca:9c:ba:ac:95:a4:72:19:9e:8f:7e:1d:c9:e1:3b:a8:fd:
         02:af:05:5a:95:63:10:ab:ca:3b:79:cb:9e:48:af:9d:ce:7a:
         61:64:f7:fe:77:0c:c4:e6:9e:21:64:f9:f3:7b:b7:99:94:4e:
         dc:d4:ec:fd:11:0e:5c:f3:e2:be:15:7e:82:f8:1d:e6:01:77:
         81:20:3e:bd:83:b6:ff:b9:ec:5f:8b:f8:8a:95:bd:2b:31:7e:
         f6:ee:01:2d:c0:21:9e:8b:d9:95:4d:ea:28:e7:5b:65:6a:ed:
         58:dd:27:16:e4:b8:b5:54:9f:63:be:dc:5a:60:51:98:d2:9e:
         ef:a0:66:48:fe:d6:67:ca:a8:39:18:cf:1b:bb:8f:4a:e8:26:
         fa:f9:be:59:ab:3b:d3:3a:66:d1:61:10:d0:ef:20:b0:bf:f7:
         37:77:82:d9:f4:52:6c:dc:62:79:c0:8a:ba:89:8c:98:3c:67:
         39:a6:d7:5f
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICCmMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA2MzAw
MTUwMjNaFw0yNTA2MjQxMDQ2NDVaMDMxMTAvBgNVBAMTKDEyNDI3MUYyMzNGREM1
NDU5RDgwQTFEQjRBNjUzRTlFOTBBNUVDMDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQChABshylMCif8F8J3WEOJJUmx4YGYoU0l1VFsg54eX0auH4fWF
dtYpVuKrWG9HP7bipupWMcsDCRVj8Zfu5ZGz5X+sjw6NhK9e1s9Wop1bjn+3XOM3
RUCfc/AO2sMwVRQg48im/D9XTbyhqVG4uNavpILNH5eEFZAMPGeK+/Fo+/FsB7pZ
giZ8NjRHx/X8mSifa40yn3Ws/dV7wsR/vL8mMniDAak2BvSY3nKUBIJCkEpcgdbs
XrAuAQ6cwnejSTJwV6EwrH4vwz3X5pBIq4ZtXPiVPDXxqLqaVdAOk+qY1YDl3Rl6
8ZzMCdP5MwJCBToOlhsSoz3j8AT0uxu/pRt3AgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUEkJx8jP9xUWdgKHbSmU+npCl7AcwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L0VrSng4alA5eFVXZGdLSGJTbVUtbnBDbDdBYy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAMBTBAwDQYJKoZIhvcNAQELBQADggEBAETUEuiO8+2I+/LH5gIrAWszb/nT
1CH2l/Mdd960iYPJlbdj7zh+F65BVfmwm9IkovcbjQmamWP8Hpgyayq7E5rD0tZp
9p4RoXnKnLqslaRyGZ6Pfh3J4Tuo/QKvBVqVYxCryjt5y55Ir53OemFk9/53DMTm
niFk+fN7t5mUTtzU7P0RDlzz4r4VfoL4HeYBd4EgPr2Dtv+57F+L+IqVvSsxfvbu
AS3AIZ6L2ZVN6ijnW2Vq7VjdJxbkuLVUn2O+3FpgUZjSnu+gZkj+1mfKqDkYzxu7
j0roJvr5vlmrO9M6ZtFhENDvILC/9zd3gtn0UmzcYnnAirqJjJg8Zzmm118=
-----END CERTIFICATE-----
Generated at Fri Nov 22 16:45:39 2024 by rpki-client on console-ams.rpki-client.org