Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/B1M9cHgZzyykZ4JifVBkye6vkyk.roa
File:                     B1M9cHgZzyykZ4JifVBkye6vkyk.roa (raw, json)
Hash identifier:          0Umjs4Xcpn/4jeL2oXdqX652gu5uYur2i1a2Kuu0piA=
Subject key identifier:   07:53:3D:70:78:19:CF:2C:A4:67:82:62:7D:50:64:C9:EE:AF:93:29
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0BFB
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/B1M9cHgZzyykZ4JifVBkye6vkyk.roa
Signing time:             Tue 01 Apr 2025 01:51:27 +0000
ROA not before:           Tue 01 Apr 2025 01:51:27 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     9605
IP address blocks:        1.79.182.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3067 (0xbfb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr  1 01:51:27 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=07533D707819CF2CA46782627D5064C9EEAF9329
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:5e:c0:0b:fa:5d:90:45:78:f2:64:6f:aa:a4:
                    86:f8:37:f4:b2:4d:4f:de:84:da:25:2d:d7:23:52:
                    0a:28:3b:de:44:ea:a4:b2:d3:6b:51:a2:36:38:40:
                    3d:d3:fd:b9:a9:3c:b8:2b:86:e2:b9:82:0b:87:55:
                    21:26:71:d9:97:28:bf:51:18:3a:fa:18:6b:33:a6:
                    49:30:48:29:e0:83:6a:16:f7:5a:51:17:77:b3:c8:
                    be:28:d6:b1:f7:1d:0e:8c:de:c8:9a:fa:ce:ac:54:
                    3a:98:44:2f:2e:5f:c0:39:27:55:68:cd:76:e2:8d:
                    3e:85:8a:7c:52:27:0f:99:3e:bf:7d:48:95:19:3e:
                    04:d4:d9:3d:79:f5:11:99:b5:48:27:1e:82:cc:a0:
                    08:b5:c6:cd:c8:87:72:7a:49:16:01:b0:10:ea:9c:
                    c5:98:14:41:e8:53:8e:44:d2:85:e9:45:ba:01:ac:
                    5b:49:de:c7:19:71:56:a6:2c:62:83:04:2c:12:48:
                    b8:5e:b1:d8:3d:66:97:7e:77:ec:c2:ec:9f:0b:c6:
                    af:73:ae:c1:41:16:c4:e9:ac:e0:61:da:b2:4a:11:
                    0e:4f:99:f1:6b:97:b9:20:b8:af:07:01:c1:e1:b3:
                    41:36:a5:b8:53:4a:a4:af:d7:44:b4:ea:c5:bc:d8:
                    f1:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:53:3D:70:78:19:CF:2C:A4:67:82:62:7D:50:64:C9:EE:AF:93:29
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/B1M9cHgZzyykZ4JifVBkye6vkyk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.79.182.0/23

    Signature Algorithm: sha256WithRSAEncryption
         44:4d:40:a5:fe:2a:58:94:76:0f:f5:92:73:0f:4d:65:ba:22:
         3b:82:ad:4c:e8:46:dd:9c:95:ec:5b:9f:71:ae:fa:94:f4:b1:
         49:cd:46:f8:c1:6d:79:23:e3:b9:5c:04:2a:35:82:cd:ef:bb:
         3f:12:fd:e0:e8:ee:6f:b6:59:3c:43:6d:6e:36:40:bf:2e:d4:
         17:75:42:05:03:83:c5:6b:a9:92:c1:81:77:ac:c9:a3:de:03:
         61:c3:dc:85:ca:41:23:46:ed:b8:6b:59:d2:e6:7a:b9:90:8e:
         5c:34:15:d2:e0:7b:c1:55:80:d7:ef:d2:f1:4e:f0:47:d9:dc:
         0c:22:de:dc:01:53:04:e7:23:33:c9:02:8f:01:a1:bf:fb:9f:
         d1:45:3c:fa:70:86:42:5f:a3:3f:9b:30:b5:c2:30:71:ac:7f:
         30:15:66:64:e0:d1:d7:57:09:23:48:be:8e:82:8c:87:52:99:
         23:bb:b2:48:78:dd:68:d2:3d:86:e6:ff:2a:6a:b8:d1:cd:b2:
         4e:33:38:ef:27:5f:f3:b0:f6:12:cc:58:08:50:fa:8b:6a:67:
         7f:38:6f:0e:12:21:32:dd:b6:fd:3e:9d:4c:6e:33:b1:9e:2c:
         ff:6d:a0:d2:bd:e6:aa:60:c6:dd:0f:47:e5:62:b9:5f:f5:6e:
         71:00:61:3a
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICC/swDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw
MTUxMjdaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDA3NTMzRDcwNzgxOUNG
MkNBNDY3ODI2MjdENTA2NEM5RUVBRjkzMjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCsXsAL+l2QRXjyZG+qpIb4N/SyTU/ehNolLdcjUgooO95E6qSy
02tRojY4QD3T/bmpPLgrhuK5gguHVSEmcdmXKL9RGDr6GGszpkkwSCngg2oW91pR
F3ezyL4o1rH3HQ6M3sia+s6sVDqYRC8uX8A5J1VozXbijT6FinxSJw+ZPr99SJUZ
PgTU2T159RGZtUgnHoLMoAi1xs3Ih3J6SRYBsBDqnMWYFEHoU45E0oXpRboBrFtJ
3scZcVamLGKDBCwSSLhesdg9Zpd+d+zC7J8Lxq9zrsFBFsTprOBh2rJKEQ5PmfFr
l7kguK8HAcHhs0E2pbhTSqSv10S06sW82PGhAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUB1M9cHgZzyykZ4JifVBkye6vkykwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L0IxTTljSGdaenl5a1o0SmlmVkJreWU2dmt5ay5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAEBT7YwDQYJKoZIhvcNAQELBQADggEBAERNQKX+KliUdg/1knMPTWW6IjuC
rUzoRt2clexbn3Gu+pT0sUnNRvjBbXkj47lcBCo1gs3vuz8S/eDo7m+2WTxDbW42
QL8u1Bd1QgUDg8VrqZLBgXesyaPeA2HD3IXKQSNG7bhrWdLmermQjlw0FdLge8FV
gNfv0vFO8EfZ3Awi3twBUwTnIzPJAo8Bob/7n9FFPPpwhkJfoz+bMLXCMHGsfzAV
ZmTg0ddXCSNIvo6CjIdSmSO7skh43WjSPYbm/ypquNHNsk4zOO8nX/Ow9hLMWAhQ
+otqZ384bw4SITLdtv0+nUxuM7GeLP9toNK95qpgxt0PR+ViuV/1bnEAYTo=
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:33:20 2025 by rpki-client