Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/EwcWR_h0YGMEaZxsudxukdNfgMQ.roa
File:                     EwcWR_h0YGMEaZxsudxukdNfgMQ.roa (raw, json)
Hash identifier:          FJEsE6gIQDQtuHEA3+WsM+FausI912W3vfGcqx3PJmM=
Subject key identifier:   13:07:16:47:F8:74:60:63:04:69:9C:6C:B9:DC:6E:91:D3:5F:80:C4
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0964
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/EwcWR_h0YGMEaZxsudxukdNfgMQ.roa
Signing time:             Sun 30 Jun 2024 01:33:33 +0000
ROA not before:           Sun 30 Jun 2024 01:33:33 +0000
ROA not after:            Tue 24 Jun 2025 10:46:45 +0000
asID:                     9605
IP address blocks:        183.72.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2404 (0x964)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun 30 01:33:33 2024 GMT
            Not After : Jun 24 10:46:45 2025 GMT
        Subject: CN=13071647F874606304699C6CB9DC6E91D35F80C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:54:b6:76:de:95:d4:c5:69:f9:f7:f4:d8:2d:
                    ac:da:1f:ce:89:c4:7e:57:f6:4f:3d:b3:9b:10:d4:
                    76:56:61:fb:ac:d4:14:3d:c4:76:cc:b5:26:88:b9:
                    99:75:67:0e:1c:f3:3e:bd:46:1b:7e:d4:e9:c1:9a:
                    03:89:4a:2b:71:5d:b0:33:81:dd:a2:ad:09:79:9e:
                    da:6c:73:b3:4a:9f:5c:28:dd:d0:4b:c1:ef:6e:1b:
                    cc:20:6c:f9:1f:ef:37:6a:d8:3b:9a:9e:50:b3:9a:
                    b5:56:6e:cd:8a:a1:44:6e:80:f9:95:68:d0:16:b8:
                    ef:96:c3:1e:80:aa:aa:61:2a:5d:78:18:40:a2:cc:
                    00:11:a8:dc:30:d0:de:c3:23:32:fb:85:fd:5a:78:
                    4f:d2:d9:8b:2a:00:54:4a:82:8b:63:62:36:1a:33:
                    fc:9e:d5:7f:78:04:08:db:21:c4:ef:35:63:aa:44:
                    4d:50:e3:1d:86:6b:42:de:f0:ca:06:2a:ae:42:6a:
                    c5:67:9f:82:19:e5:a3:72:33:22:bf:f1:59:ff:76:
                    af:e6:c3:62:ca:4e:61:33:03:c0:41:fb:36:ab:7e:
                    79:a1:36:e8:2e:6f:02:1b:1d:fb:5d:5d:cc:fb:e4:
                    c1:32:cd:6b:6b:da:76:c3:c4:a6:c5:7d:6a:79:1d:
                    00:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:07:16:47:F8:74:60:63:04:69:9C:6C:B9:DC:6E:91:D3:5F:80:C4
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/EwcWR_h0YGMEaZxsudxukdNfgMQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.72.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         11:41:3d:1f:ca:88:97:66:cb:e1:bd:53:89:02:14:32:1d:b4:
         4b:5a:5e:81:a3:a0:0c:7d:b3:58:ea:49:e6:dc:d6:56:4a:0c:
         b2:fd:d2:c1:d8:9b:5d:eb:a1:df:a0:54:ee:41:a6:7a:89:48:
         e0:f5:9d:f3:d8:1b:65:75:59:7e:1f:18:23:26:3c:5f:2a:27:
         f6:02:d3:78:bc:68:2f:b3:12:b2:72:f7:be:49:af:ef:bf:3c:
         7e:3f:b5:61:2d:46:da:5a:53:2c:f5:5c:40:13:9a:54:5b:a5:
         5b:0c:7e:e4:00:a5:af:ff:5a:b9:cf:04:cc:c8:e5:6a:80:15:
         70:9e:9f:96:2f:1f:39:f1:bb:cd:bf:35:20:5f:89:1c:1f:9f:
         98:9e:00:08:db:9f:75:38:23:f9:3f:a4:c9:f3:e1:59:ab:f8:
         ee:e0:c6:01:72:de:ee:df:b7:3d:64:b6:0b:2f:98:99:64:7c:
         36:79:d3:fc:3f:83:43:35:f4:10:42:21:c7:58:0a:b3:ca:6e:
         43:90:7a:68:fa:46:dc:1a:22:75:37:12:2f:40:39:95:a7:cc:
         6a:db:18:0a:00:cc:dc:56:2a:d1:38:8a:31:dd:1c:39:b4:2f:
         8f:b1:7b:0a:aa:ba:7b:c0:d1:37:3e:c6:d7:e8:de:6e:42:9a:
         eb:83:50:fc
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICCWQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA2MzAw
MTMzMzNaFw0yNTA2MjQxMDQ2NDVaMDMxMTAvBgNVBAMTKDEzMDcxNjQ3Rjg3NDYw
NjMwNDY5OUM2Q0I5REM2RTkxRDM1RjgwQzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDMVLZ23pXUxWn59/TYLazaH86JxH5X9k89s5sQ1HZWYfus1BQ9
xHbMtSaIuZl1Zw4c8z69Rht+1OnBmgOJSitxXbAzgd2irQl5ntpsc7NKn1wo3dBL
we9uG8wgbPkf7zdq2DuanlCzmrVWbs2KoURugPmVaNAWuO+Wwx6AqqphKl14GECi
zAARqNww0N7DIzL7hf1aeE/S2YsqAFRKgotjYjYaM/ye1X94BAjbIcTvNWOqRE1Q
4x2Ga0Le8MoGKq5CasVnn4IZ5aNyMyK/8Vn/dq/mw2LKTmEzA8BB+zarfnmhNugu
bwIbHftdXcz75MEyzWtr2nbDxKbFfWp5HQAHAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUEwcWR/h0YGMEaZxsudxukdNfgMQwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L0V3Y1dSX2gwWUdNRWFaeHN1ZHh1a2ROZmdNUS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAe3SAAwDQYJKoZIhvcNAQELBQADggEBABFBPR/KiJdmy+G9U4kCFDIdtEta
XoGjoAx9s1jqSebc1lZKDLL90sHYm13rod+gVO5BpnqJSOD1nfPYG2V1WX4fGCMm
PF8qJ/YC03i8aC+zErJy975Jr++/PH4/tWEtRtpaUyz1XEATmlRbpVsMfuQApa//
WrnPBMzI5WqAFXCen5YvHznxu82/NSBfiRwfn5ieAAjbn3U4I/k/pMnz4Vmr+O7g
xgFy3u7ftz1ktgsvmJlkfDZ50/w/g0M19BBCIcdYCrPKbkOQemj6RtwaInU3Ei9A
OZWnzGrbGAoAzNxWKtE4ijHdHDm0L4+xewqqunvA0Tc+xtfo3m5CmuuDUPw=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:33:38 2025 by rpki-client