Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/MMMWLnryXQalMBhqoA_jxzW6_wA.roa
File:                     MMMWLnryXQalMBhqoA_jxzW6_wA.roa (raw, json)
Hash identifier:          dGw3OwZjeVNx9MDKnFzt8rSI+cWPpWRzjpZZLPE2aJM=
Subject key identifier:   30:C3:16:2E:7A:F2:5D:06:A5:30:18:6A:A0:0F:E3:C7:35:BA:FF:00
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0A70
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/MMMWLnryXQalMBhqoA_jxzW6_wA.roa
Signing time:             Sun 30 Jun 2024 01:50:29 +0000
ROA not before:           Sun 30 Jun 2024 01:50:29 +0000
ROA not after:            Tue 24 Jun 2025 10:46:45 +0000
asID:                     9605
IP address blocks:        211.14.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 15:43:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2672 (0xa70)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun 30 01:50:29 2024 GMT
            Not After : Jun 24 10:46:45 2025 GMT
        Subject: CN=30C3162E7AF25D06A530186AA00FE3C735BAFF00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:0d:48:83:b0:fd:92:50:4e:ba:34:d8:93:4a:
                    0b:4b:5a:a2:a3:74:23:60:b8:86:ff:a9:fb:49:fc:
                    05:1d:a6:96:85:2b:c7:7d:be:c8:df:3f:60:c4:95:
                    3f:1c:ef:08:bb:e9:fe:52:b5:40:7e:ac:c4:2d:30:
                    a3:2b:f8:5f:7b:6a:14:f6:7f:57:8d:29:77:da:f0:
                    93:73:08:ce:70:7a:4e:79:45:04:7a:31:86:d4:55:
                    7e:f5:6e:d0:86:45:24:38:ef:21:fd:44:1b:74:ef:
                    bb:9c:fd:4f:fc:a4:3d:e5:20:e3:fc:06:52:93:fa:
                    1d:f0:4d:3a:30:02:37:db:86:61:eb:9b:3f:5e:23:
                    2a:55:4a:c3:2c:d7:43:ce:4e:c6:dc:5c:74:0d:47:
                    20:94:92:0b:85:36:25:8f:9d:55:ba:56:02:3f:7e:
                    87:2d:18:8c:20:1c:e3:5a:fc:92:4c:14:ab:4c:e6:
                    a5:e3:98:3d:ca:7d:0b:05:24:a2:db:1e:a9:7e:f7:
                    1f:bf:b9:e1:ee:fc:72:ff:f7:26:83:b5:51:23:8c:
                    ef:ae:ba:c7:3e:4e:52:82:1d:a0:60:47:ad:91:2a:
                    af:ca:4f:7c:10:19:cf:a8:e5:7d:01:3f:80:03:03:
                    5e:8a:16:0c:e6:62:1b:97:3d:81:5c:fb:0a:c8:29:
                    85:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:C3:16:2E:7A:F2:5D:06:A5:30:18:6A:A0:0F:E3:C7:35:BA:FF:00
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/MMMWLnryXQalMBhqoA_jxzW6_wA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.14.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:d5:80:82:ff:68:50:c5:78:1b:2e:9c:76:e3:b2:d2:34:46:
         ec:b9:30:bc:b9:75:72:3a:b8:93:8d:13:e1:5a:9e:63:84:b1:
         93:21:6e:75:3d:af:24:ea:b2:28:c0:f8:35:f1:c0:59:51:06:
         13:f3:f5:1e:30:bd:a5:99:d5:93:f4:d9:a9:8a:0b:e2:de:0c:
         5b:c9:48:94:7c:4a:b1:86:10:f0:a2:6f:65:41:9b:d4:f6:ce:
         ad:6c:1f:33:e0:9d:ed:42:77:cd:72:11:6f:70:14:fd:17:57:
         ce:a5:d5:67:7e:51:bd:70:24:3e:6b:ed:78:12:17:46:53:98:
         7d:82:8d:cf:68:8c:d9:49:42:02:51:9d:0f:f8:97:37:df:10:
         68:a6:c3:ee:76:ab:8d:e2:95:0c:c7:a6:19:25:a2:b8:f0:0f:
         ff:ce:cf:b1:63:39:1c:3f:46:00:fa:1d:84:d3:e9:59:77:6c:
         a8:7f:55:2c:87:01:fb:46:39:c3:48:bd:2e:c6:d3:35:1e:4c:
         06:dd:b5:7e:23:85:2b:87:8e:06:0d:a6:1b:42:0b:97:67:1e:
         66:ca:e7:13:fc:e4:f3:36:6c:a9:ec:76:c0:a5:57:6d:64:d5:
         13:d5:44:64:b7:a9:b5:80:9e:a9:b1:2f:1f:35:42:4d:d2:fe:
         aa:71:ab:98
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICCnAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA2MzAw
MTUwMjlaFw0yNTA2MjQxMDQ2NDVaMDMxMTAvBgNVBAMTKDMwQzMxNjJFN0FGMjVE
MDZBNTMwMTg2QUEwMEZFM0M3MzVCQUZGMDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDJDUiDsP2SUE66NNiTSgtLWqKjdCNguIb/qftJ/AUdppaFK8d9
vsjfP2DElT8c7wi76f5StUB+rMQtMKMr+F97ahT2f1eNKXfa8JNzCM5wek55RQR6
MYbUVX71btCGRSQ47yH9RBt077uc/U/8pD3lIOP8BlKT+h3wTTowAjfbhmHrmz9e
IypVSsMs10POTsbcXHQNRyCUkguFNiWPnVW6VgI/foctGIwgHONa/JJMFKtM5qXj
mD3KfQsFJKLbHql+9x+/ueHu/HL/9yaDtVEjjO+uusc+TlKCHaBgR62RKq/KT3wQ
Gc+o5X0BP4ADA16KFgzmYhuXPYFc+wrIKYUFAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUMMMWLnryXQalMBhqoA/jxzW6/wAwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L01NTVdMbnJ5WFFhbE1CaHFvQV9qeHpXNl93QS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADTDncwDQYJKoZIhvcNAQELBQADggEBAFDVgIL/aFDFeBsunHbjstI0Ruy5
MLy5dXI6uJONE+FanmOEsZMhbnU9ryTqsijA+DXxwFlRBhPz9R4wvaWZ1ZP02amK
C+LeDFvJSJR8SrGGEPCib2VBm9T2zq1sHzPgne1Cd81yEW9wFP0XV86l1Wd+Ub1w
JD5r7XgSF0ZTmH2Cjc9ojNlJQgJRnQ/4lzffEGimw+52q43ilQzHphklorjwD//O
z7FjORw/RgD6HYTT6Vl3bKh/VSyHAftGOcNIvS7G0zUeTAbdtX4jhSuHjgYNphtC
C5dnHmbK5xP85PM2bKnsdsClV21k1RPVRGS3qbWAnqmxLx81Qk3S/qpxq5g=
-----END CERTIFICATE-----
Generated at Sat Apr 26 18:20:31 2025 by rpki-client