Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/0vAzAfLUZ1ft8NIOMPdNSfv1uS8.roa
File:                     0vAzAfLUZ1ft8NIOMPdNSfv1uS8.roa (raw, json)
Hash identifier:          jYDvaAWg8/MqZIihKCPv/t15P5d3vSqJFuy8LBl32gs=
Subject key identifier:   D2:F0:33:01:F2:D4:67:57:ED:F0:D2:0E:30:F7:4D:49:FB:F5:B9:2F
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0E43
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/0vAzAfLUZ1ft8NIOMPdNSfv1uS8.roa
Signing time:             Sun 01 Jun 2025 01:30:19 +0000
ROA not before:           Sun 01 Jun 2025 01:30:19 +0000
ROA not after:            Sat 23 May 2026 09:51:00 +0000
asID:                     9605
IP address blocks:        49.96.112.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Jun 2025 22:24:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3651 (0xe43)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun  1 01:30:19 2025 GMT
            Not After : May 23 09:51:00 2026 GMT
        Subject: CN=D2F03301F2D46757EDF0D20E30F74D49FBF5B92F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:40:62:5d:e7:7c:51:7e:b5:ac:f6:8b:bd:b4:
                    0b:45:13:6b:da:f3:8d:27:3e:4e:96:73:3b:84:ca:
                    4b:89:95:10:58:50:a6:e1:4c:ef:0b:6f:ca:89:7f:
                    03:88:79:e5:48:02:45:cc:de:75:42:b1:c3:b4:1a:
                    f9:96:fa:c6:a0:3f:cd:12:2b:cc:64:51:cf:e7:bb:
                    d4:6c:34:61:20:85:16:09:9a:79:f9:4b:63:a3:3b:
                    cf:0a:57:87:11:6d:75:de:15:0e:2e:7b:5b:e0:1c:
                    32:52:95:9c:72:b3:df:32:83:55:fc:38:23:84:65:
                    cf:09:d8:6e:04:00:97:1f:50:89:f8:ed:70:f1:3e:
                    95:6a:36:47:b8:f3:30:7a:9e:97:bf:fd:f8:8c:58:
                    42:3c:ba:19:3f:50:45:a4:40:78:79:a1:1b:53:e4:
                    b6:ad:74:5e:ba:3f:5a:dd:a1:53:ac:cd:15:46:54:
                    eb:f2:4d:46:a4:58:68:dd:f6:75:23:25:bf:8b:0e:
                    85:8f:4a:af:cc:8f:6e:d6:85:99:e3:a8:3f:ce:32:
                    f9:8e:6d:f8:cb:3b:65:94:54:1b:54:26:dd:da:61:
                    a5:75:2e:ec:da:a0:27:16:09:ac:fa:4e:81:c8:71:
                    50:56:4f:ed:ba:04:a0:28:a1:e5:d5:48:25:a0:4a:
                    55:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:F0:33:01:F2:D4:67:57:ED:F0:D2:0E:30:F7:4D:49:FB:F5:B9:2F
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/0vAzAfLUZ1ft8NIOMPdNSfv1uS8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.96.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9b:ab:8d:42:27:c7:7e:03:c4:22:4a:8e:92:7e:d4:fd:6f:61:
         8b:34:1f:ef:c4:97:1d:8e:10:70:f7:43:be:7a:5a:84:87:28:
         51:55:9e:3b:54:c7:2c:4d:32:4b:ef:11:56:f3:4c:92:20:f6:
         00:93:64:60:f5:db:01:5a:7d:83:3f:90:a4:02:a1:9c:4c:55:
         ab:98:c7:81:98:cd:d4:5a:58:13:a0:06:5f:25:44:e4:6b:03:
         5e:b8:d8:53:2e:94:1f:38:12:ec:37:33:25:f0:79:17:f8:20:
         f1:aa:29:54:fe:4c:41:a1:84:d9:99:4a:73:54:f0:d5:6e:53:
         24:9b:ab:32:a2:21:6e:47:db:9a:39:af:5d:b9:03:55:33:80:
         8a:31:55:50:a9:9c:9a:52:e4:25:2e:4f:6c:bf:ed:c8:a1:23:
         c8:3b:0e:6b:ff:99:e4:b8:dc:91:29:5c:74:30:5e:c2:73:1e:
         4f:c8:77:4e:3e:2e:2a:21:38:04:99:9a:e6:59:fd:09:34:33:
         88:1a:23:a2:9d:fd:13:a1:7a:82:31:8c:19:8f:cf:14:a1:bf:
         e2:56:a6:80:b3:01:d6:14:2c:4f:f7:06:7b:77:11:74:4a:81:
         62:29:07:70:a2:a0:6b:d0:18:98:f3:f5:cb:b8:5c:72:c8:7d:
         d0:64:d0:14
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICDkMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MDEw
MTMwMTlaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKEQyRjAzMzAxRjJENDY3
NTdFREYwRDIwRTMwRjc0RDQ5RkJGNUI5MkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDnQGJd53xRfrWs9ou9tAtFE2va840nPk6WczuEykuJlRBYUKbh
TO8Lb8qJfwOIeeVIAkXM3nVCscO0GvmW+sagP80SK8xkUc/nu9RsNGEghRYJmnn5
S2OjO88KV4cRbXXeFQ4ue1vgHDJSlZxys98yg1X8OCOEZc8J2G4EAJcfUIn47XDx
PpVqNke48zB6npe//fiMWEI8uhk/UEWkQHh5oRtT5LatdF66P1rdoVOszRVGVOvy
TUakWGjd9nUjJb+LDoWPSq/Mj27WhZnjqD/OMvmObfjLO2WUVBtUJt3aYaV1Luza
oCcWCaz6ToHIcVBWT+26BKAooeXVSCWgSlUbAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQU0vAzAfLUZ1ft8NIOMPdNSfv1uS8wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5LzB2QXpBZkxVWjFmdDhOSU9NUGROU2Z2MXVTOC5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAIxYHAwDQYJKoZIhvcNAQELBQADggEBAJurjUInx34DxCJKjpJ+1P1vYYs0
H+/Elx2OEHD3Q756WoSHKFFVnjtUxyxNMkvvEVbzTJIg9gCTZGD12wFafYM/kKQC
oZxMVauYx4GYzdRaWBOgBl8lRORrA1642FMulB84Euw3MyXweRf4IPGqKVT+TEGh
hNmZSnNU8NVuUySbqzKiIW5H25o5r125A1UzgIoxVVCpnJpS5CUuT2y/7cihI8g7
Dmv/meS43JEpXHQwXsJzHk/Id04+LiohOASZmuZZ/Qk0M4gaI6Kd/ROheoIxjBmP
zxShv+JWpoCzAdYULE/3Bnt3EXRKgWIpB3CioGvQGJjz9cu4XHLIfdBk0BQ=
-----END CERTIFICATE-----
Generated at Wed Jun 4 01:06:54 2025 by rpki-client