Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/blWEYBeUzPSce0MwAkNsOBwH_cw.roa
File:                     blWEYBeUzPSce0MwAkNsOBwH_cw.roa (raw, json)
Hash identifier:          2eRA8oBodtR44sWqbv4PT7OijKW2Hqlj99K7su5VC/I=
Subject key identifier:   6E:55:84:60:17:94:CC:F4:9C:7B:43:30:02:43:6C:38:1C:07:FD:CC
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0BA6
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/blWEYBeUzPSce0MwAkNsOBwH_cw.roa
Signing time:             Tue 01 Apr 2025 01:39:55 +0000
ROA not before:           Tue 01 Apr 2025 01:39:55 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     9605
IP address blocks:        49.106.80.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2982 (0xba6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr  1 01:39:55 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=6E5584601794CCF49C7B433002436C381C07FDCC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:09:b6:60:6d:0b:19:e3:c3:61:4f:e2:46:6e:
                    00:70:7d:07:f5:6b:2d:79:62:53:83:00:02:01:c6:
                    da:79:be:2f:5e:64:74:fd:e0:6f:2c:5f:60:d6:8a:
                    8a:54:82:cd:45:fb:20:36:47:f2:92:68:f6:32:58:
                    c1:94:36:e3:2b:20:ef:90:c5:80:fb:d8:14:ca:8e:
                    12:5a:71:16:b8:31:6a:fb:5c:b9:f6:bf:27:12:39:
                    dd:61:22:f5:40:5b:42:07:ce:b7:78:2b:5b:b8:bc:
                    d0:62:12:65:fb:9b:de:93:d0:dc:e4:6c:e7:52:af:
                    7f:46:c2:04:71:ab:5e:e1:a8:c3:cb:0e:58:09:7e:
                    e4:7e:37:50:f8:46:0b:50:6c:e2:f8:24:b8:58:0a:
                    1e:74:f5:3e:e6:0e:f1:23:36:02:23:27:c4:1e:d6:
                    a6:d6:66:cf:db:03:a5:3f:ad:3c:27:93:56:bb:7f:
                    53:06:ca:1e:d6:4e:13:92:34:85:91:26:c5:df:be:
                    57:8b:73:3f:4d:dc:af:d7:0a:56:0f:bc:a8:c2:62:
                    23:b3:d2:f7:74:6e:ae:40:f8:42:10:c0:76:34:8b:
                    4b:e5:ad:1b:90:a7:5e:38:1f:90:12:a5:01:73:08:
                    19:d9:3b:57:99:59:d5:20:26:d2:0d:fe:af:97:66:
                    24:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:55:84:60:17:94:CC:F4:9C:7B:43:30:02:43:6C:38:1C:07:FD:CC
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/blWEYBeUzPSce0MwAkNsOBwH_cw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.106.80.0/21

    Signature Algorithm: sha256WithRSAEncryption
         71:f8:8a:84:4d:cd:b0:a4:b0:04:6a:1a:76:be:ec:d8:2b:1f:
         3f:2c:23:dc:87:d2:b7:fa:1d:8f:2b:7b:12:21:eb:a6:fe:9e:
         50:b8:ac:d2:d0:e3:9c:79:d3:f3:51:46:8f:90:ca:80:6e:ad:
         af:2a:f4:db:b2:4b:44:fd:05:c7:fd:54:bf:71:22:5c:3d:ae:
         e8:1a:f3:2d:74:41:74:e5:61:ca:d0:48:f8:c5:e5:54:8d:a9:
         cc:64:da:ed:b8:17:d0:26:44:aa:a1:42:61:0c:e1:ec:f9:23:
         99:d0:22:25:94:f4:f4:d0:34:3a:40:ad:6f:65:80:f5:a5:d0:
         80:51:ee:96:a1:92:89:56:d7:f7:b4:56:77:d2:f2:ef:50:51:
         1b:68:79:cf:2c:33:a8:12:8a:7d:98:dc:98:f2:e6:91:d4:98:
         41:88:d3:87:c6:0a:e1:f4:be:80:7d:86:5f:5b:b3:7f:98:83:
         00:e8:6e:e0:5f:be:0d:7a:c9:a0:15:1d:86:0a:c2:28:04:ee:
         f9:ae:75:98:82:80:88:be:e2:06:d2:84:bf:29:f5:4f:60:f5:
         0a:8a:25:7c:3e:06:8a:63:2f:55:c3:08:d3:6d:1e:d7:cc:69:
         36:b5:da:2e:42:3b:25:18:d3:b8:aa:89:b3:83:51:0e:f4:0f:
         06:dd:f5:08
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICC6YwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw
MTM5NTVaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDZFNTU4NDYwMTc5NEND
RjQ5QzdCNDMzMDAyNDM2QzM4MUMwN0ZEQ0MwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCkCbZgbQsZ48NhT+JGbgBwfQf1ay15YlODAAIBxtp5vi9eZHT9
4G8sX2DWiopUgs1F+yA2R/KSaPYyWMGUNuMrIO+QxYD72BTKjhJacRa4MWr7XLn2
vycSOd1hIvVAW0IHzrd4K1u4vNBiEmX7m96T0NzkbOdSr39GwgRxq17hqMPLDlgJ
fuR+N1D4RgtQbOL4JLhYCh509T7mDvEjNgIjJ8Qe1qbWZs/bA6U/rTwnk1a7f1MG
yh7WThOSNIWRJsXfvleLcz9N3K/XClYPvKjCYiOz0vd0bq5A+EIQwHY0i0vlrRuQ
p144H5ASpQFzCBnZO1eZWdUgJtIN/q+XZiTNAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUblWEYBeUzPSce0MwAkNsOBwH/cwwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L2JsV0VZQmVVelBTY2UwTXdBa05zT0J3SF9jdy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAMxalAwDQYJKoZIhvcNAQELBQADggEBAHH4ioRNzbCksARqGna+7NgrHz8s
I9yH0rf6HY8rexIh66b+nlC4rNLQ45x50/NRRo+QyoBura8q9NuyS0T9Bcf9VL9x
Ilw9ruga8y10QXTlYcrQSPjF5VSNqcxk2u24F9AmRKqhQmEM4ez5I5nQIiWU9PTQ
NDpArW9lgPWl0IBR7pahkolW1/e0VnfS8u9QURtoec8sM6gSin2Y3Jjy5pHUmEGI
04fGCuH0voB9hl9bs3+YgwDobuBfvg16yaAVHYYKwigE7vmudZiCgIi+4gbShL8p
9U9g9QqKJXw+BopjL1XDCNNtHtfMaTa12i5COyUY07iqibODUQ70Dwbd9Qg=
-----END CERTIFICATE-----
Generated at Sun Apr 6 01:51:56 2025 by rpki-client