Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/9beexl0wgwCtQix4RTnfsYvAQbI.roa
File:                     9beexl0wgwCtQix4RTnfsYvAQbI.roa (raw, json)
Hash identifier:          zneNnacT/3JEWogd1MaNDNDw/di6kbKP2gFFgLDzXQI=
Subject key identifier:   F5:B7:9E:C6:5D:30:83:00:AD:42:2C:78:45:39:DF:B1:8B:C0:41:B2
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0F4C
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/9beexl0wgwCtQix4RTnfsYvAQbI.roa
Signing time:             Tue 10 Jun 2025 11:28:24 +0000
ROA not before:           Tue 10 Jun 2025 11:28:24 +0000
ROA not after:            Sat 23 May 2026 09:51:00 +0000
asID:                     9605
IP address blocks:        1.76.150.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 28 Jun 2025 21:03:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3916 (0xf4c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun 10 11:28:24 2025 GMT
            Not After : May 23 09:51:00 2026 GMT
        Subject: CN=F5B79EC65D308300AD422C784539DFB18BC041B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:8a:7d:74:58:6c:85:e8:f1:20:d8:0d:17:bf:
                    19:a2:44:64:25:c7:cd:9b:d4:2c:53:a3:33:0b:9f:
                    24:f2:f5:0d:d2:e8:85:fa:79:65:aa:4d:1f:62:bc:
                    17:f0:5c:f0:e8:97:8c:65:20:bd:20:c8:75:44:be:
                    4e:a1:0c:01:83:67:72:34:1f:4c:3e:13:1c:78:bb:
                    09:68:dd:00:b0:4a:e3:27:3f:15:6b:ec:a1:f5:5a:
                    b5:89:13:ae:3a:c2:1d:c1:7e:c5:cf:ef:1b:13:0b:
                    08:b2:b5:4c:40:53:24:21:3f:3a:a9:93:df:76:db:
                    57:e3:d5:6f:2d:eb:14:41:90:23:99:1d:74:00:f5:
                    6d:e4:c3:8a:54:b6:21:eb:5f:42:30:ad:0b:69:9f:
                    24:b9:92:2f:6a:2b:0f:b6:f7:ab:c1:7d:e8:72:b5:
                    cd:31:32:0e:60:01:0d:cc:a1:9a:88:bc:d9:0d:a2:
                    3f:8a:09:b6:1c:76:04:44:d1:4d:0b:f9:2e:79:63:
                    de:6e:e1:9e:4c:8d:74:e4:5e:32:7b:cd:6a:7f:60:
                    07:3d:72:7c:7a:b5:d2:4a:29:29:88:c5:11:ad:07:
                    56:11:5b:7e:5f:91:4a:c8:2e:a4:7f:d4:85:c8:4f:
                    ad:fd:4f:d2:e9:51:52:22:96:c3:4a:2c:a7:ab:ee:
                    16:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:B7:9E:C6:5D:30:83:00:AD:42:2C:78:45:39:DF:B1:8B:C0:41:B2
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/9beexl0wgwCtQix4RTnfsYvAQbI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.76.150.0/23

    Signature Algorithm: sha256WithRSAEncryption
         15:9c:69:04:dd:e0:69:8e:61:0e:24:e7:72:07:cc:d3:49:35:
         1f:34:96:50:92:27:64:d5:f0:69:87:8c:a8:e7:9b:80:cf:a9:
         52:dd:10:d8:a1:f3:b2:e2:36:2d:b0:14:05:30:19:7a:b4:77:
         88:93:36:93:5f:4a:ed:22:fb:2b:e3:03:0a:4c:b3:d6:97:31:
         99:79:79:fd:15:05:a7:47:b4:9f:ed:f7:8e:dd:63:80:7c:6e:
         9a:cc:5e:48:2e:06:35:06:73:9d:83:ad:c0:3a:05:f3:35:e1:
         bf:7b:86:8b:af:35:61:d5:21:ca:98:f2:73:57:69:30:2f:d1:
         d3:da:47:02:fd:9b:c9:28:74:d1:50:4a:bb:49:c9:c9:ef:38:
         1b:08:f0:3f:6a:7b:5c:b6:f3:12:eb:ea:49:4e:9a:f6:99:84:
         20:ac:45:18:aa:2b:7f:02:1d:55:05:8f:4c:0e:c8:9e:6a:f7:
         3d:96:ac:7f:59:81:5d:74:70:bf:e0:ba:75:29:39:02:e4:15:
         45:b9:75:2d:80:09:06:10:0d:6f:4e:e0:63:ce:bc:b3:7b:5d:
         05:57:c9:72:e0:65:65:ff:2d:8b:46:2c:f5:43:38:31:33:b0:
         0c:af:bf:3f:68:ab:46:70:ac:41:56:62:6b:c0:8b:fe:80:ab:
         83:53:a8:ac
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICD0wwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx
MTI4MjRaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKEY1Qjc5RUM2NUQzMDgz
MDBBRDQyMkM3ODQ1MzlERkIxOEJDMDQxQjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCjin10WGyF6PEg2A0XvxmiRGQlx82b1CxTozMLnyTy9Q3S6IX6
eWWqTR9ivBfwXPDol4xlIL0gyHVEvk6hDAGDZ3I0H0w+Exx4uwlo3QCwSuMnPxVr
7KH1WrWJE646wh3BfsXP7xsTCwiytUxAUyQhPzqpk99221fj1W8t6xRBkCOZHXQA
9W3kw4pUtiHrX0IwrQtpnyS5ki9qKw+296vBfehytc0xMg5gAQ3MoZqIvNkNoj+K
CbYcdgRE0U0L+S55Y95u4Z5MjXTkXjJ7zWp/YAc9cnx6tdJKKSmIxRGtB1YRW35f
kUrILqR/1IXIT639T9LpUVIilsNKLKer7hbhAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQU9beexl0wgwCtQix4RTnfsYvAQbIwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5LzliZWV4bDB3Z3dDdFFpeDRSVG5mc1l2QVFiSS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAEBTJYwDQYJKoZIhvcNAQELBQADggEBABWcaQTd4GmOYQ4k53IHzNNJNR80
llCSJ2TV8GmHjKjnm4DPqVLdENih87LiNi2wFAUwGXq0d4iTNpNfSu0i+yvjAwpM
s9aXMZl5ef0VBadHtJ/t947dY4B8bprMXkguBjUGc52DrcA6BfM14b97houvNWHV
IcqY8nNXaTAv0dPaRwL9m8kodNFQSrtJycnvOBsI8D9qe1y28xLr6klOmvaZhCCs
RRiqK38CHVUFj0wOyJ5q9z2WrH9ZgV10cL/gunUpOQLkFUW5dS2ACQYQDW9O4GPO
vLN7XQVXyXLgZWX/LYtGLPVDODEzsAyvvz9oq0ZwrEFWYmvAi/6Aq4NTqKw=
-----END CERTIFICATE-----
Generated at Sun Jun 22 01:03:13 2025 by rpki-client