Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Me1kG35wjC6BFKRplkeyur4FbQ4.roa
File:                     Me1kG35wjC6BFKRplkeyur4FbQ4.roa (raw, json)
Hash identifier:          SVhbLpCJhNnFK8+UG6oa4ooxwvuBRgqPjgft1QdZd+Y=
Subject key identifier:   31:ED:64:1B:7E:70:8C:2E:81:14:A4:69:96:47:B2:BA:BE:05:6D:0E
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0D16
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Me1kG35wjC6BFKRplkeyur4FbQ4.roa
Signing time:             Tue 01 Apr 2025 02:13:43 +0000
ROA not before:           Tue 01 Apr 2025 02:13:43 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     9605
IP address blocks:        183.75.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3350 (0xd16)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr  1 02:13:43 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=31ED641B7E708C2E8114A4699647B2BABE056D0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:44:cc:da:f9:42:6f:c8:f3:46:65:eb:77:3f:
                    c7:e0:6b:21:0c:53:b6:eb:74:0d:24:32:60:24:dc:
                    ec:b7:18:47:ea:e7:56:c3:4b:87:01:6a:f3:49:9d:
                    b5:e7:a2:00:a4:84:fb:2a:8a:24:3b:d4:2c:04:8e:
                    a7:79:91:b3:98:5e:04:a0:40:f4:d5:7a:7c:27:aa:
                    4f:f0:80:4a:93:08:14:5d:df:0f:6d:76:45:a8:d6:
                    b5:41:b2:37:5f:98:55:5f:cf:27:4d:9a:ad:81:d6:
                    e3:5e:5f:4d:4a:89:83:54:e3:91:05:d6:9c:27:3b:
                    31:90:24:15:ce:39:1e:c1:23:d7:c7:d9:e3:ea:50:
                    5c:ca:b2:7e:de:04:e3:1e:a3:2c:92:ad:0d:d8:89:
                    bb:72:4f:f3:f6:f7:b8:93:96:bf:7e:9d:2b:90:43:
                    c3:ed:cb:c8:6c:d8:86:bc:2e:8a:24:e9:24:46:b5:
                    f0:43:73:fa:c5:aa:a4:5e:3a:39:11:63:fd:bf:e9:
                    15:8c:30:80:46:ee:fd:88:1d:83:e9:54:80:fa:e9:
                    99:01:d1:0e:da:9f:a8:90:03:ce:5f:a4:0b:c4:92:
                    3b:4c:07:8e:70:c3:83:c2:fc:0b:13:44:0c:14:d4:
                    24:68:79:44:6f:2a:32:1b:bc:54:16:dd:b7:e0:f4:
                    d8:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:ED:64:1B:7E:70:8C:2E:81:14:A4:69:96:47:B2:BA:BE:05:6D:0E
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Me1kG35wjC6BFKRplkeyur4FbQ4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.75.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:fb:3c:84:94:90:56:d1:d9:3f:7a:d2:8b:7c:f7:f1:c2:e3:
         89:2a:6e:3c:7a:86:ff:e3:6d:05:b9:f9:a8:27:a0:73:6c:eb:
         37:21:91:37:64:b2:03:ed:e2:c9:95:1b:3f:50:32:b4:88:d4:
         6e:d8:4c:7d:96:35:9a:30:d3:98:11:f0:5b:5b:40:6a:55:87:
         be:30:61:27:6d:7a:18:52:08:62:1d:9e:29:0e:1d:7d:89:a5:
         50:ac:16:71:79:5e:8c:17:ff:85:97:97:1a:42:9b:b7:0e:95:
         53:9e:a9:91:44:30:94:46:e9:7e:6a:32:98:fd:b4:96:33:77:
         f7:7f:dd:a0:7d:b7:72:1f:d1:34:73:09:76:a7:d9:a1:af:ae:
         7d:16:e3:2e:7a:65:39:9f:92:92:47:03:32:76:e6:6d:c8:14:
         7e:7c:18:84:e0:45:68:15:64:34:56:34:a8:8b:54:44:08:71:
         03:57:95:93:d6:99:17:e0:5e:8b:b6:4c:51:40:6e:2d:42:9c:
         a0:64:52:98:42:79:37:3b:3f:88:f0:3d:37:19:d0:ff:03:85:
         40:69:c4:1d:af:32:94:b0:b6:46:8e:a0:d2:ae:b5:c4:33:4e:
         d5:cc:e2:df:1e:74:ed:4c:42:3d:38:a8:a9:0c:70:ff:52:29:
         c6:5c:3e:bc
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICDRYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw
MjEzNDNaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDMxRUQ2NDFCN0U3MDhD
MkU4MTE0QTQ2OTk2NDdCMkJBQkUwNTZEMEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDARMza+UJvyPNGZet3P8fgayEMU7brdA0kMmAk3Oy3GEfq51bD
S4cBavNJnbXnogCkhPsqiiQ71CwEjqd5kbOYXgSgQPTVenwnqk/wgEqTCBRd3w9t
dkWo1rVBsjdfmFVfzydNmq2B1uNeX01KiYNU45EF1pwnOzGQJBXOOR7BI9fH2ePq
UFzKsn7eBOMeoyySrQ3YibtyT/P297iTlr9+nSuQQ8Pty8hs2Ia8Look6SRGtfBD
c/rFqqReOjkRY/2/6RWMMIBG7v2IHYPpVID66ZkB0Q7an6iQA85fpAvEkjtMB45w
w4PC/AsTRAwU1CRoeURvKjIbvFQW3bfg9Nh3AgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUMe1kG35wjC6BFKRplkeyur4FbQ4wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L01lMWtHMzV3akM2QkZLUnBsa2V5dXI0RmJRNC5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAC3S8QwDQYJKoZIhvcNAQELBQADggEBAHf7PISUkFbR2T960ot89/HC44kq
bjx6hv/jbQW5+agnoHNs6zchkTdksgPt4smVGz9QMrSI1G7YTH2WNZow05gR8Ftb
QGpVh74wYSdtehhSCGIdnikOHX2JpVCsFnF5XowX/4WXlxpCm7cOlVOeqZFEMJRG
6X5qMpj9tJYzd/d/3aB9t3If0TRzCXan2aGvrn0W4y56ZTmfkpJHAzJ25m3IFH58
GITgRWgVZDRWNKiLVEQIcQNXlZPWmRfgXou2TFFAbi1CnKBkUphCeTc7P4jwPTcZ
0P8DhUBpxB2vMpSwtkaOoNKutcQzTtXM4t8edO1MQj04qKkMcP9SKcZcPrw=
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:37:59 2025 by rpki-client