Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/KmeKHoCX3usQcJy5UhFgVtr3Qo4.roa
File:                     KmeKHoCX3usQcJy5UhFgVtr3Qo4.roa (raw, json)
Hash identifier:          K2cjgHZmdK3Cs6RBKDyePsCRU5AFKA9pD9B2v6f+XtE=
Subject key identifier:   2A:67:8A:1E:80:97:DE:EB:10:70:9C:B9:52:11:60:56:DA:F7:42:8E
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0A26
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/KmeKHoCX3usQcJy5UhFgVtr3Qo4.roa
Signing time:             Sun 30 Jun 2024 01:46:28 +0000
ROA not before:           Sun 30 Jun 2024 01:46:28 +0000
ROA not after:            Tue 24 Jun 2025 10:46:45 +0000
asID:                     9605
IP address blocks:        211.14.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2598 (0xa26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun 30 01:46:28 2024 GMT
            Not After : Jun 24 10:46:45 2025 GMT
        Subject: CN=2A678A1E8097DEEB10709CB952116056DAF7428E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:df:d4:aa:d8:56:f3:16:cd:bd:6e:1f:91:3e:
                    e1:12:ae:20:fb:f9:4a:5d:5c:78:56:30:6d:90:5b:
                    03:fc:e6:bd:97:05:2d:fc:a7:7a:eb:64:b6:60:e9:
                    40:95:6e:c7:b5:99:52:c2:86:61:56:0b:7c:62:f8:
                    80:62:20:88:fa:94:4e:ea:41:a5:34:90:bb:2f:8d:
                    2d:49:1e:dd:bb:59:05:96:fb:52:b4:7c:78:f2:18:
                    85:bb:5c:4f:02:f5:12:46:57:88:fb:c6:88:d4:19:
                    9c:46:93:bb:0f:dd:a2:c7:64:cb:89:32:8c:49:83:
                    bf:08:9d:20:f0:42:db:da:57:d9:68:41:26:61:24:
                    d8:cc:ae:87:56:fc:b2:96:1a:a2:27:2a:21:08:ac:
                    9f:6d:07:6b:1c:ab:f3:36:f3:af:f9:2a:7d:82:4c:
                    bc:a5:e3:76:cb:cc:7f:e2:18:83:ac:31:34:f0:ce:
                    4d:f4:33:51:66:3d:4f:70:0d:3b:b7:92:45:d0:75:
                    66:60:8b:86:4c:05:c6:99:8a:49:b4:c7:14:d6:ff:
                    72:e1:01:93:b7:23:9a:fe:a5:91:f8:04:34:5d:c0:
                    ea:0b:95:74:50:6a:41:62:3d:aa:d1:0a:a2:d2:62:
                    14:7f:04:18:af:e7:9b:0f:e1:7a:84:7f:77:bb:43:
                    68:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:67:8A:1E:80:97:DE:EB:10:70:9C:B9:52:11:60:56:DA:F7:42:8E
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/KmeKHoCX3usQcJy5UhFgVtr3Qo4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.14.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:ed:fb:26:85:dc:a0:24:8f:29:bb:62:68:9b:4d:5a:b3:c4:
         6b:a3:84:73:c1:8c:74:00:57:94:f9:f7:19:ad:d7:cc:78:cf:
         1c:62:a2:32:0a:20:cc:47:07:1d:18:a8:4c:29:27:c0:a2:fe:
         42:dc:8b:bd:7f:91:50:e5:85:bf:9d:14:7c:b2:96:f5:56:2e:
         2a:16:2d:51:c2:3d:4f:ee:32:91:ab:18:14:26:39:ad:19:6c:
         84:99:4a:7e:8b:24:02:6a:f3:55:81:f5:88:02:bf:aa:28:b6:
         6e:e9:61:ce:4b:16:1b:34:67:4e:7a:d9:05:a4:83:07:4b:51:
         ce:72:6d:1a:5a:77:97:65:94:bd:27:d8:ee:1c:da:3d:2b:67:
         d1:fd:cc:50:7b:b3:11:6c:dd:b4:2e:38:4f:39:d5:a3:3a:20:
         36:ce:69:b9:e4:14:88:7f:8c:69:34:75:1f:13:97:89:b5:89:
         15:c4:a1:43:ad:4d:8b:7a:cd:15:95:04:39:72:89:64:88:57:
         bb:21:00:88:e1:7c:12:1e:5f:d4:00:28:32:51:8d:de:0f:fc:
         6d:7e:0c:a4:8c:a7:ef:90:2d:ab:7e:b0:f7:aa:43:0d:87:ee:
         23:64:e0:32:78:80:93:a1:cd:c0:f8:48:f6:d9:42:b5:9f:23:
         82:69:90:93
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICCiYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA2MzAw
MTQ2MjhaFw0yNTA2MjQxMDQ2NDVaMDMxMTAvBgNVBAMTKDJBNjc4QTFFODA5N0RF
RUIxMDcwOUNCOTUyMTE2MDU2REFGNzQyOEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDO39Sq2FbzFs29bh+RPuESriD7+UpdXHhWMG2QWwP85r2XBS38
p3rrZLZg6UCVbse1mVLChmFWC3xi+IBiIIj6lE7qQaU0kLsvjS1JHt27WQWW+1K0
fHjyGIW7XE8C9RJGV4j7xojUGZxGk7sP3aLHZMuJMoxJg78InSDwQtvaV9loQSZh
JNjMrodW/LKWGqInKiEIrJ9tB2scq/M286/5Kn2CTLyl43bLzH/iGIOsMTTwzk30
M1FmPU9wDTu3kkXQdWZgi4ZMBcaZikm0xxTW/3LhAZO3I5r+pZH4BDRdwOoLlXRQ
akFiParRCqLSYhR/BBiv55sP4XqEf3e7Q2jFAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUKmeKHoCX3usQcJy5UhFgVtr3Qo4wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L0ttZUtIb0NYM3VzUWNKeTVVaEZnVnRyM1FvNC5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADTDk4wDQYJKoZIhvcNAQELBQADggEBAEnt+yaF3KAkjym7YmibTVqzxGuj
hHPBjHQAV5T59xmt18x4zxxiojIKIMxHBx0YqEwpJ8Ci/kLci71/kVDlhb+dFHyy
lvVWLioWLVHCPU/uMpGrGBQmOa0ZbISZSn6LJAJq81WB9YgCv6ootm7pYc5LFhs0
Z0562QWkgwdLUc5ybRpad5dllL0n2O4c2j0rZ9H9zFB7sxFs3bQuOE851aM6IDbO
abnkFIh/jGk0dR8Tl4m1iRXEoUOtTYt6zRWVBDlyiWSIV7shAIjhfBIeX9QAKDJR
jd4P/G1+DKSMp++QLat+sPeqQw2H7iNk4DJ4gJOhzcD4SPbZQrWfI4JpkJM=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:29:50 2025 by rpki-client