Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/0ls5Zeuw4kqtR6DTB8SjaI0omtY.roa
File:                     0ls5Zeuw4kqtR6DTB8SjaI0omtY.roa (raw, json)
Hash identifier:          DpDHOZVSdAogqJlwm8KndTiodyqD8/n9mfcfZha1lb8=
Subject key identifier:   D2:5B:39:65:EB:B0:E2:4A:AD:47:A0:D3:07:C4:A3:68:8D:28:9A:D6
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0E08
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/0ls5Zeuw4kqtR6DTB8SjaI0omtY.roa
Signing time:             Tue 01 Apr 2025 02:31:24 +0000
ROA not before:           Tue 01 Apr 2025 02:31:24 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     9605
IP address blocks:        1.77.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 18:34:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3592 (0xe08)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr  1 02:31:24 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=D25B3965EBB0E24AAD47A0D307C4A3688D289AD6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:29:50:35:47:da:82:d1:ca:84:d5:8a:81:dd:
                    e3:df:5d:8b:33:6c:59:b0:c8:c6:7f:64:cb:9f:b6:
                    52:16:3f:43:93:93:4a:cb:df:d8:44:da:94:f0:c5:
                    83:8d:48:19:4f:ec:60:95:7e:b2:b4:3e:7e:24:34:
                    27:23:f6:62:49:21:54:9c:ff:dc:b8:cc:e3:17:a1:
                    75:e9:80:bf:98:08:7f:72:8b:b3:4f:02:21:9f:a1:
                    0a:49:35:90:06:24:a6:68:9c:f2:31:66:01:ca:ca:
                    ad:16:8f:ce:fa:bf:e3:64:60:d1:0c:7b:94:f6:09:
                    ae:35:45:e9:ac:74:2e:39:15:7a:16:8e:05:d4:c2:
                    39:70:5d:ec:c2:ea:b3:09:e9:44:52:02:7d:50:92:
                    05:5d:f8:4f:cb:34:8f:ab:d0:c6:bf:f0:c1:26:10:
                    3d:55:e4:73:f2:9c:0d:f3:2b:b2:64:ad:ce:31:30:
                    e5:ea:7b:fc:d9:bd:26:7c:d4:4f:4e:1d:12:04:04:
                    a9:51:95:83:3c:b1:82:ad:74:a3:ad:96:68:b4:18:
                    27:7d:30:08:da:4b:a0:b2:6d:9e:f1:9f:c9:9e:0a:
                    0b:e3:93:f8:6b:42:82:d5:99:04:6a:19:0f:26:32:
                    9b:68:c1:88:b7:b8:e0:e8:97:9d:fe:7b:1f:54:3b:
                    83:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:5B:39:65:EB:B0:E2:4A:AD:47:A0:D3:07:C4:A3:68:8D:28:9A:D6
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/0ls5Zeuw4kqtR6DTB8SjaI0omtY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.77.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         17:c1:99:d3:a3:c4:75:05:b2:f8:06:98:7d:c6:74:3c:3d:0a:
         8b:f1:c6:29:93:4d:9c:87:82:b5:53:fd:28:9b:49:1b:04:ce:
         b7:35:c6:f2:ff:c6:05:a9:55:da:68:b0:34:7e:02:fc:7c:76:
         13:6e:d3:33:c4:27:70:0b:0b:d3:a4:77:05:71:7d:10:74:06:
         8d:e7:5b:46:bb:44:f4:3c:04:19:5d:39:a9:01:90:20:bd:11:
         22:6a:f1:b7:f3:de:7f:96:d6:99:a4:bc:cd:d2:b3:55:b1:2b:
         85:df:de:97:60:ac:a2:b9:4c:4c:fe:92:a6:08:be:4e:b9:07:
         92:ec:a3:ac:02:45:a8:b4:6d:57:09:ec:96:97:29:64:ee:f2:
         d5:48:1c:ec:fb:ef:4b:5d:f6:b0:53:d3:c2:79:c5:83:cc:e3:
         0b:82:f5:89:84:1e:e6:9d:99:f8:cc:ff:1c:ee:a5:39:11:0f:
         28:93:0f:5f:c9:58:d5:26:76:84:1f:57:1c:cf:d5:f6:16:7e:
         3f:85:37:7e:8d:2c:6f:58:e5:f0:1f:75:2a:e2:f6:46:e8:4e:
         e8:69:63:92:89:1d:a7:ac:f3:24:1c:c7:ca:1b:c5:61:af:e0:
         7a:7e:d6:5a:fd:a6:c5:be:59:f5:97:0e:8c:04:3a:72:46:8d:
         58:5d:9f:30
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgICDggwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw
MjMxMjRaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEQyNUIzOTY1RUJCMEUy
NEFBRDQ3QTBEMzA3QzRBMzY4OEQyODlBRDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDWKVA1R9qC0cqE1YqB3ePfXYszbFmwyMZ/ZMuftlIWP0OTk0rL
39hE2pTwxYONSBlP7GCVfrK0Pn4kNCcj9mJJIVSc/9y4zOMXoXXpgL+YCH9yi7NP
AiGfoQpJNZAGJKZonPIxZgHKyq0Wj876v+NkYNEMe5T2Ca41RemsdC45FXoWjgXU
wjlwXezC6rMJ6URSAn1QkgVd+E/LNI+r0Ma/8MEmED1V5HPynA3zK7Jkrc4xMOXq
e/zZvSZ81E9OHRIEBKlRlYM8sYKtdKOtlmi0GCd9MAjaS6CybZ7xn8meCgvjk/hr
QoLVmQRqGQ8mMptowYi3uODol53+ex9UO4PBAgMBAAGjggIjMIICHzAdBgNVHQ4E
FgQU0ls5Zeuw4kqtR6DTB8SjaI0omtYwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5LzBsczVaZXV3NGtxdFI2RFRCOFNqYUkwb210WS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwABTTANBgkqhkiG9w0BAQsFAAOCAQEAF8GZ06PEdQWy+AaYfcZ0PD0Ki/HG
KZNNnIeCtVP9KJtJGwTOtzXG8v/GBalV2miwNH4C/Hx2E27TM8QncAsL06R3BXF9
EHQGjedbRrtE9DwEGV05qQGQIL0RImrxt/Pef5bWmaS8zdKzVbErhd/el2CsorlM
TP6Spgi+TrkHkuyjrAJFqLRtVwnslpcpZO7y1Ugc7PvvS132sFPTwnnFg8zjC4L1
iYQe5p2Z+Mz/HO6lOREPKJMPX8lY1SZ2hB9XHM/V9hZ+P4U3fo0sb1jl8B91KuL2
RuhO6Gljkokdp6zzJBzHyhvFYa/gen7WWv2mxb5Z9ZcOjAQ6ckaNWF2fMA==
-----END CERTIFICATE-----
Generated at Sat Apr 26 20:40:02 2025 by rpki-client