Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/6ZIP7Ll2kUmYvdEWjx0P3223PjE.roa
File:                     6ZIP7Ll2kUmYvdEWjx0P3223PjE.roa (raw, json)
Hash identifier:          S3Mr3js7TyDFx5NJZvVo1dFuY9wDpYX50KXI2XQqDQQ=
Subject key identifier:   E9:92:0F:EC:B9:76:91:49:98:BD:D1:16:8F:1D:0F:DF:6D:B7:3E:31
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0C68
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/6ZIP7Ll2kUmYvdEWjx0P3223PjE.roa
Signing time:             Tue 01 Apr 2025 02:00:30 +0000
ROA not before:           Tue 01 Apr 2025 02:00:30 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     9605
IP address blocks:        49.98.144.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 15:43:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3176 (0xc68)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr  1 02:00:30 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=E9920FECB976914998BDD1168F1D0FDF6DB73E31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:5c:df:de:9a:0c:09:27:78:8c:a7:10:49:5b:
                    3f:90:7b:94:28:fd:f0:11:48:a5:0f:12:9b:94:0c:
                    cd:8c:ae:9e:d6:08:cc:86:25:cb:db:e0:8f:ae:d2:
                    9d:49:ea:b3:ef:47:4b:2e:07:13:0d:00:a1:b3:f4:
                    f8:33:6c:7a:de:e9:97:ec:16:c3:c5:6a:59:ed:5b:
                    57:45:d7:27:79:20:e4:3c:6b:3e:38:c8:3f:33:4a:
                    92:47:18:3d:e8:e3:ce:dd:19:e2:6c:d6:7a:da:54:
                    ab:28:d8:a9:2a:d5:5d:e8:62:b2:61:53:b9:b9:46:
                    ba:47:ef:27:12:0a:4a:94:94:8c:7a:46:2b:8a:87:
                    15:a7:70:2d:f7:91:27:3c:de:5e:af:7d:f1:12:1b:
                    2b:cd:ae:af:88:6f:cd:8b:78:96:09:ab:55:28:4f:
                    a2:5a:78:78:14:4b:d2:1c:7c:b8:b8:a7:2e:bd:6b:
                    0b:5f:0e:df:55:a7:ea:ce:f6:41:63:72:0b:45:2e:
                    8f:7a:14:48:a6:18:49:af:6a:40:eb:30:f3:cd:00:
                    10:e6:50:f8:f6:5a:8c:9d:51:c7:96:64:18:22:36:
                    ec:96:82:db:a5:6c:a2:f2:00:7b:dd:4f:de:96:0d:
                    4d:20:a3:cb:54:16:a8:fa:e7:49:f9:0e:ec:7f:da:
                    33:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:92:0F:EC:B9:76:91:49:98:BD:D1:16:8F:1D:0F:DF:6D:B7:3E:31
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/6ZIP7Ll2kUmYvdEWjx0P3223PjE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.98.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         51:1d:c7:06:3f:19:5f:b9:58:21:92:50:30:b8:14:d2:d6:0f:
         52:d2:06:15:83:99:cd:ce:b6:4a:e2:1a:33:6b:56:e5:54:af:
         81:f8:28:44:9f:75:fd:fb:e8:41:14:2f:13:b1:27:18:97:6d:
         6d:93:f2:87:07:a8:1a:c3:ae:fe:6c:68:ee:ba:12:d4:37:d7:
         07:a1:93:13:8c:a5:68:94:5b:d1:64:f3:64:18:03:d3:1f:1e:
         32:1e:66:0c:af:2a:1d:b6:59:0e:5b:c7:bb:28:18:48:d0:6f:
         d2:25:0f:aa:42:35:fc:dd:46:6b:e6:65:00:41:b8:29:25:c8:
         4f:ba:fb:b2:97:36:e0:a5:65:7a:ac:9e:ed:c7:bd:fa:6b:20:
         a4:d1:4e:f7:29:a6:4b:8f:0f:a3:d2:f9:89:ad:a4:ca:03:ee:
         c6:90:98:b9:38:b6:07:71:6a:c4:d3:cf:01:71:0c:1c:bb:f8:
         42:e6:38:cf:94:db:1e:7d:22:39:a7:2d:fc:ec:16:9e:9e:e0:
         4e:c1:d5:93:2b:63:49:7e:97:8d:10:96:dd:ec:89:ec:5f:21:
         0c:91:42:38:8c:d9:af:67:dc:c1:7d:7e:81:28:a7:d5:8e:6b:
         e8:4e:10:1e:bf:e4:7a:65:9a:51:15:e4:32:81:42:58:3d:83:
         39:0b:5b:f7
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICDGgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw
MjAwMzBaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEU5OTIwRkVDQjk3Njkx
NDk5OEJERDExNjhGMUQwRkRGNkRCNzNFMzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCkXN/emgwJJ3iMpxBJWz+Qe5Qo/fARSKUPEpuUDM2Mrp7WCMyG
Jcvb4I+u0p1J6rPvR0suBxMNAKGz9PgzbHre6ZfsFsPFalntW1dF1yd5IOQ8az44
yD8zSpJHGD3o487dGeJs1nraVKso2Kkq1V3oYrJhU7m5RrpH7ycSCkqUlIx6RiuK
hxWncC33kSc83l6vffESGyvNrq+Ib82LeJYJq1UoT6JaeHgUS9IcfLi4py69awtf
Dt9Vp+rO9kFjcgtFLo96FEimGEmvakDrMPPNABDmUPj2WoydUceWZBgiNuyWgtul
bKLyAHvdT96WDU0go8tUFqj650n5Dux/2jNBAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQU6ZIP7Ll2kUmYvdEWjx0P3223PjEwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5LzZaSVA3TGwya1VtWXZkRVdqeDBQMzIyM1BqRS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAIxYpAwDQYJKoZIhvcNAQELBQADggEBAFEdxwY/GV+5WCGSUDC4FNLWD1LS
BhWDmc3OtkriGjNrVuVUr4H4KESfdf376EEULxOxJxiXbW2T8ocHqBrDrv5saO66
EtQ31wehkxOMpWiUW9Fk82QYA9MfHjIeZgyvKh22WQ5bx7soGEjQb9IlD6pCNfzd
RmvmZQBBuCklyE+6+7KXNuClZXqsnu3HvfprIKTRTvcppkuPD6PS+YmtpMoD7saQ
mLk4tgdxasTTzwFxDBy7+ELmOM+U2x59IjmnLfzsFp6e4E7B1ZMrY0l+l40Qlt3s
iexfIQyRQjiM2a9n3MF9foEop9WOa+hOEB6/5HplmlEV5DKBQlg9gzkLW/c=
-----END CERTIFICATE-----
Generated at Sat Apr 26 18:20:58 2025 by rpki-client