Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/VxFw6A4vr8ponG0R3ZRP8CXAo6k.roa
File:                     VxFw6A4vr8ponG0R3ZRP8CXAo6k.roa (raw, json)
Hash identifier:          6JSzM785mhDtn06TD2ACiPE0FP0l5QAahCudEjV5WFk=
Subject key identifier:   57:11:70:E8:0E:2F:AF:CA:68:9C:6D:11:DD:94:4F:F0:25:C0:A3:A9
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0F10
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/VxFw6A4vr8ponG0R3ZRP8CXAo6k.roa
Signing time:             Tue 10 Jun 2025 11:20:13 +0000
ROA not before:           Tue 10 Jun 2025 11:20:13 +0000
ROA not after:            Sat 23 May 2026 09:51:00 +0000
asID:                     9605
IP address blocks:        183.75.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 28 Jun 2025 21:03:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3856 (0xf10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun 10 11:20:13 2025 GMT
            Not After : May 23 09:51:00 2026 GMT
        Subject: CN=571170E80E2FAFCA689C6D11DD944FF025C0A3A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:78:68:c4:ff:02:65:bd:01:9b:c6:00:61:62:
                    60:0b:52:45:88:40:65:15:ef:fb:b9:25:5e:f3:7e:
                    98:89:1e:23:a2:b0:67:ea:e3:57:55:4e:f5:a7:54:
                    fe:ed:23:af:96:5b:1f:14:a2:1a:1b:e9:0d:1d:6a:
                    9c:81:5a:9e:80:74:23:bb:1a:b4:e7:a0:f9:4b:88:
                    dc:8e:1a:d9:6f:c3:52:01:56:83:49:f3:cc:77:54:
                    48:ac:21:30:7f:96:42:72:b3:6e:a3:73:72:d6:85:
                    7f:c2:f7:c5:c8:ce:63:1f:c0:18:55:18:30:52:c4:
                    8d:55:16:a4:c6:4c:fd:98:a4:a4:1c:2d:c6:d1:32:
                    f7:18:df:51:5d:a4:d4:a8:54:68:39:ff:ac:84:59:
                    f8:28:7b:ba:45:8b:59:8e:4d:f3:a9:92:09:c0:d6:
                    0b:39:01:4f:ca:e9:4f:93:7c:09:49:97:ff:8e:e6:
                    74:76:73:68:05:32:9a:4f:6f:da:91:34:0e:8b:b3:
                    08:54:0f:36:31:d8:86:ad:f0:d4:5e:7c:da:26:eb:
                    8b:0e:f1:6c:c4:5d:7c:14:83:9c:53:78:97:98:88:
                    b1:22:39:4b:e8:38:31:7a:8f:29:5f:be:63:25:42:
                    58:b8:48:c9:53:be:d0:c4:ea:df:da:33:1f:8e:96:
                    20:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:11:70:E8:0E:2F:AF:CA:68:9C:6D:11:DD:94:4F:F0:25:C0:A3:A9
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/VxFw6A4vr8ponG0R3ZRP8CXAo6k.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.75.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         45:fa:f0:51:c2:f8:b5:a7:b9:07:81:a5:29:d5:a4:97:3d:12:
         a5:55:45:6e:0f:65:32:65:4e:29:d3:3c:be:41:bc:c5:9f:17:
         1a:f2:76:65:a2:0d:6a:44:37:09:00:13:fb:68:32:a1:a0:23:
         c0:d9:66:39:8c:78:0b:1c:c4:39:49:3f:eb:08:b1:cf:ca:34:
         c5:65:e2:d4:20:3d:7c:dc:24:3b:43:8d:02:75:e9:44:aa:22:
         76:70:55:be:7b:09:5d:25:b9:78:5f:bf:a4:17:4a:4d:fe:b9:
         14:71:e8:a6:87:fa:10:6b:16:68:0d:a8:fc:2d:32:fd:87:f7:
         f3:91:43:cb:07:a3:93:e7:4d:7d:d2:43:3b:91:04:ef:ab:8b:
         4e:c2:18:1e:55:b5:c2:1f:93:9e:73:1f:f1:7d:45:70:a3:01:
         ec:7a:91:fe:0a:de:46:5d:0a:63:a1:8f:4a:3c:d2:cb:47:78:
         06:46:a5:8e:d2:4b:f7:05:fa:22:ed:29:b2:27:46:1e:5f:6c:
         01:93:38:c1:21:6d:6a:56:99:09:af:a6:a7:f0:d1:6e:e0:20:
         6a:7e:90:64:d9:2a:d9:25:71:94:4e:ac:ee:58:49:3a:4f:c0:
         51:2f:6d:24:4e:73:c4:5a:cf:4c:3b:2c:b4:d6:dd:0d:0f:7f:
         1d:2a:e1:ed
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICDxAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx
MTIwMTNaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKDU3MTE3MEU4MEUyRkFG
Q0E2ODlDNkQxMUREOTQ0RkYwMjVDMEEzQTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC2eGjE/wJlvQGbxgBhYmALUkWIQGUV7/u5JV7zfpiJHiOisGfq
41dVTvWnVP7tI6+WWx8Uohob6Q0dapyBWp6AdCO7GrTnoPlLiNyOGtlvw1IBVoNJ
88x3VEisITB/lkJys26jc3LWhX/C98XIzmMfwBhVGDBSxI1VFqTGTP2YpKQcLcbR
MvcY31FdpNSoVGg5/6yEWfgoe7pFi1mOTfOpkgnA1gs5AU/K6U+TfAlJl/+O5nR2
c2gFMppPb9qRNA6LswhUDzYx2Iat8NRefNom64sO8WzEXXwUg5xTeJeYiLEiOUvo
ODF6jylfvmMlQli4SMlTvtDE6t/aMx+OliDFAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUVxFw6A4vr8ponG0R3ZRP8CXAo6kwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L1Z4Rnc2QTR2cjhwb25HMFIzWlJQOENYQW82ay5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAa3S0AwDQYJKoZIhvcNAQELBQADggEBAEX68FHC+LWnuQeBpSnVpJc9EqVV
RW4PZTJlTinTPL5BvMWfFxrydmWiDWpENwkAE/toMqGgI8DZZjmMeAscxDlJP+sI
sc/KNMVl4tQgPXzcJDtDjQJ16USqInZwVb57CV0luXhfv6QXSk3+uRRx6KaH+hBr
FmgNqPwtMv2H9/ORQ8sHo5PnTX3SQzuRBO+ri07CGB5VtcIfk55zH/F9RXCjAex6
kf4K3kZdCmOhj0o80stHeAZGpY7SS/cF+iLtKbInRh5fbAGTOMEhbWpWmQmvpqfw
0W7gIGp+kGTZKtklcZROrO5YSTpPwFEvbSROc8Raz0w7LLTW3Q0Pfx0q4e0=
-----END CERTIFICATE-----
Generated at Sun Jun 22 03:54:55 2025 by rpki-client