Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/rMu2HxuuqTC6fkGvHrStocMJMhY.roa
File:                     rMu2HxuuqTC6fkGvHrStocMJMhY.roa (raw, json)
Hash identifier:          IrYWRm92BlxdGxVq9DR12yL9MKFkgq7tw0uOku7qZGk=
Subject key identifier:   AC:CB:B6:1F:1B:AE:A9:30:BA:7E:41:AF:1E:B4:AD:A1:C3:09:32:16
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0C0D
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/rMu2HxuuqTC6fkGvHrStocMJMhY.roa
Signing time:             Tue 01 Apr 2025 01:51:35 +0000
ROA not before:           Tue 01 Apr 2025 01:51:35 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     9605
IP address blocks:        110.163.10.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3085 (0xc0d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr  1 01:51:35 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=ACCBB61F1BAEA930BA7E41AF1EB4ADA1C3093216
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:37:2d:0a:47:f7:5d:e2:33:a9:d2:8f:65:60:
                    30:3f:ab:30:2b:bb:47:15:77:74:e2:fa:10:45:e3:
                    49:a0:0c:a9:bf:62:93:c9:c2:ed:9b:16:73:f4:73:
                    3f:cf:3d:da:7c:80:9d:03:88:d5:0f:63:9e:36:f2:
                    fc:4f:25:42:bb:df:09:e8:ef:dd:92:18:9c:3f:e2:
                    dc:cb:dc:e6:d2:0c:b7:49:38:4e:eb:71:d1:32:f6:
                    35:76:9d:15:07:ef:69:cd:97:e2:f8:53:3b:a2:20:
                    06:66:2a:2c:9b:cd:30:ce:70:9c:47:f4:59:fd:df:
                    6d:79:d8:9f:c6:a6:ad:2f:0b:ce:12:ed:76:41:8c:
                    c0:af:ed:ff:1c:6e:22:50:f8:3b:aa:35:0f:39:87:
                    09:a5:c9:32:51:04:97:5e:c7:d8:82:a0:3a:a8:01:
                    c8:a1:1a:6d:eb:df:6f:0d:66:83:4d:ce:35:59:b4:
                    48:48:6b:6f:fa:74:8e:57:7b:28:d4:ac:41:86:12:
                    a2:b2:b0:b9:e4:7e:dd:52:02:4f:f0:62:cd:ea:7f:
                    48:a0:14:a7:b3:79:c5:57:cd:6f:e9:53:45:44:17:
                    70:9a:db:6b:15:2d:3f:b4:8a:2d:e4:b7:ff:12:37:
                    db:da:d1:a9:66:2b:4f:61:70:f1:dd:76:11:22:1c:
                    5f:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:CB:B6:1F:1B:AE:A9:30:BA:7E:41:AF:1E:B4:AD:A1:C3:09:32:16
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/rMu2HxuuqTC6fkGvHrStocMJMhY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.163.10.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d2:63:36:9b:19:c3:f2:6d:33:8e:d5:14:4b:2f:b1:df:38:de:
         b0:4d:be:2b:56:d4:82:64:7b:fd:01:4b:1b:bc:d3:f1:0c:99:
         5b:b4:85:1d:f9:7b:b5:1b:d8:0f:51:69:6e:a3:48:6a:38:a1:
         e6:1f:0d:20:8a:07:0d:60:40:b4:ca:67:eb:86:5d:46:11:c8:
         5b:aa:7f:9d:04:0e:20:de:91:89:7e:63:8b:a6:50:eb:45:c8:
         0f:e8:17:da:dc:86:d6:a5:24:42:29:bd:4c:13:ed:41:6b:d5:
         8b:af:57:f6:31:34:96:03:0d:65:a0:af:c4:21:f1:2a:bf:7a:
         90:34:5c:20:8a:86:6f:5b:48:7a:69:2f:73:95:7d:6c:69:0f:
         f3:5a:2a:54:4b:81:fa:e7:03:70:b9:63:17:9f:f8:42:02:7b:
         a3:fc:39:dd:c2:75:f3:8f:f1:9f:a6:3a:cf:8b:6f:12:f0:2b:
         95:be:eb:ae:87:d9:5a:0f:0e:d5:69:7b:fe:99:2c:7c:ca:63:
         c3:1f:83:03:41:13:56:24:1b:19:4e:a7:57:15:67:d2:d9:3a:
         08:89:90:85:6b:87:e7:cc:69:67:3c:74:d6:90:ae:77:48:ad:
         20:64:2a:b3:ec:9a:a5:25:5d:fd:04:47:4e:80:1f:44:39:c6:
         2c:7c:b2:86
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICDA0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw
MTUxMzVaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEFDQ0JCNjFGMUJBRUE5
MzBCQTdFNDFBRjFFQjRBREExQzMwOTMyMTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCxNy0KR/dd4jOp0o9lYDA/qzAru0cVd3Ti+hBF40mgDKm/YpPJ
wu2bFnP0cz/PPdp8gJ0DiNUPY5428vxPJUK73wno792SGJw/4tzL3ObSDLdJOE7r
cdEy9jV2nRUH72nNl+L4UzuiIAZmKiybzTDOcJxH9Fn932152J/Gpq0vC84S7XZB
jMCv7f8cbiJQ+DuqNQ85hwmlyTJRBJdex9iCoDqoAcihGm3r328NZoNNzjVZtEhI
a2/6dI5XeyjUrEGGEqKysLnkft1SAk/wYs3qf0igFKezecVXzW/pU0VEF3Ca22sV
LT+0ii3kt/8SN9va0almK09hcPHddhEiHF9xAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUrMu2HxuuqTC6fkGvHrStocMJMhYwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L3JNdTJIeHV1cVRDNmZrR3ZIclN0b2NNSk1oWS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAFuowowDQYJKoZIhvcNAQELBQADggEBANJjNpsZw/JtM47VFEsvsd843rBN
vitW1IJke/0BSxu80/EMmVu0hR35e7Ub2A9RaW6jSGo4oeYfDSCKBw1gQLTKZ+uG
XUYRyFuqf50EDiDekYl+Y4umUOtFyA/oF9rchtalJEIpvUwT7UFr1YuvV/YxNJYD
DWWgr8Qh8Sq/epA0XCCKhm9bSHppL3OVfWxpD/NaKlRLgfrnA3C5Yxef+EICe6P8
Od3CdfOP8Z+mOs+LbxLwK5W+666H2VoPDtVpe/6ZLHzKY8MfgwNBE1YkGxlOp1cV
Z9LZOgiJkIVrh+fMaWc8dNaQrndIrSBkKrPsmqUlXf0ER06AH0Q5xix8soY=
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:35:11 2025 by rpki-client