Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Wxe4N6BBwSxf6BGaD0jBoknB2hw.roa
File:                     Wxe4N6BBwSxf6BGaD0jBoknB2hw.roa (raw, json)
Hash identifier:          lvK3ciZlVhmv4i2lqihFDQd48IY+qz5Cn9SSj0UqBw4=
Subject key identifier:   5B:17:B8:37:A0:41:C1:2C:5F:E8:11:9A:0F:48:C1:A2:49:C1:DA:1C
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0FAD
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Wxe4N6BBwSxf6BGaD0jBoknB2hw.roa
Signing time:             Tue 10 Jun 2025 11:40:40 +0000
ROA not before:           Tue 10 Jun 2025 11:40:40 +0000
ROA not after:            Sat 23 May 2026 09:51:00 +0000
asID:                     9605
IP address blocks:        220.210.82.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 28 Jun 2025 14:16:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4013 (0xfad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun 10 11:40:40 2025 GMT
            Not After : May 23 09:51:00 2026 GMT
        Subject: CN=5B17B837A041C12C5FE8119A0F48C1A249C1DA1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:08:3f:27:d2:48:15:a6:90:0b:e4:a4:95:c0:
                    73:a1:f3:eb:d9:1b:87:42:0e:79:f2:a7:61:be:18:
                    f4:f7:ed:3e:c7:bb:be:07:15:77:68:a2:bd:0a:2d:
                    c2:74:2d:74:f9:c6:31:b2:f9:c4:20:7a:08:f0:98:
                    01:6a:9f:8a:6c:1b:b7:73:34:0b:ec:e4:79:da:a1:
                    a1:49:92:db:d9:ca:89:54:11:22:59:61:65:0b:6f:
                    16:d2:f5:d7:d7:be:a0:1b:68:29:03:a9:f0:52:01:
                    b1:8c:55:ce:77:d1:f3:44:1d:54:ca:47:53:54:a5:
                    28:9b:19:85:79:9f:3f:18:9b:8a:87:68:f4:e8:cb:
                    24:35:b4:12:dd:b6:27:ef:6d:97:64:96:58:18:c8:
                    b7:f9:00:59:f0:8f:30:92:5c:4e:77:6b:ed:3e:41:
                    28:be:a2:64:cc:61:61:0d:fd:63:22:25:5e:40:c0:
                    a8:5d:74:44:d1:1c:43:12:7d:20:08:fa:73:d8:06:
                    b6:eb:8f:0c:91:13:7d:18:08:93:cd:56:2e:c8:8e:
                    15:41:46:3c:05:bc:1a:45:2d:1f:9f:28:1c:64:97:
                    dd:af:df:bc:e7:04:a4:e6:61:d7:b7:81:78:60:e6:
                    59:93:3d:5d:25:ce:c0:3a:f9:aa:8e:89:a4:d0:fe:
                    60:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:17:B8:37:A0:41:C1:2C:5F:E8:11:9A:0F:48:C1:A2:49:C1:DA:1C
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Wxe4N6BBwSxf6BGaD0jBoknB2hw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.210.82.0/23

    Signature Algorithm: sha256WithRSAEncryption
         25:4e:26:4b:91:a2:4b:fc:86:ca:76:b4:3a:3a:c4:fc:29:78:
         44:bd:a8:71:0f:85:74:ad:ec:4d:c6:66:8e:b9:00:d5:8f:0e:
         73:73:9a:18:21:20:ee:96:df:70:00:58:ef:4c:f0:e4:d5:29:
         8d:69:f9:0f:cf:06:3b:57:e1:bf:48:06:bd:9d:f0:5b:b8:91:
         e6:b6:0f:cf:c9:7c:ea:b7:33:d3:76:8e:4a:99:07:61:c9:a7:
         32:0d:2e:ad:e2:aa:16:3e:52:bc:59:74:fa:a7:58:af:d3:fc:
         6f:af:64:3a:4b:af:af:b7:b8:1f:af:d4:90:03:72:53:f0:46:
         a5:49:ad:0c:9c:21:93:83:bf:ac:8f:ef:a1:b0:75:c7:a3:8f:
         d3:3d:e8:f1:c3:75:05:7a:96:be:6d:6d:a2:e1:1f:80:34:0f:
         12:3f:36:fc:24:f2:96:71:99:b6:fe:b5:7b:3d:f9:f4:1c:dd:
         9b:4e:2d:74:1a:a0:06:52:11:d2:0c:36:c3:46:18:c9:a3:a9:
         f0:59:b6:b1:19:2b:65:dc:1f:f1:26:97:b4:7e:47:7c:a1:77:
         25:dc:bd:fa:31:06:ea:7b:34:fb:87:3b:d9:20:3d:4a:dd:b7:
         30:57:50:aa:65:00:e8:14:75:d3:53:12:d7:5e:a5:74:9a:c9:
         55:63:0c:86
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICD60wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx
MTQwNDBaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKDVCMTdCODM3QTA0MUMx
MkM1RkU4MTE5QTBGNDhDMUEyNDlDMURBMUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCmCD8n0kgVppAL5KSVwHOh8+vZG4dCDnnyp2G+GPT37T7Hu74H
FXdoor0KLcJ0LXT5xjGy+cQgegjwmAFqn4psG7dzNAvs5HnaoaFJktvZyolUESJZ
YWULbxbS9dfXvqAbaCkDqfBSAbGMVc530fNEHVTKR1NUpSibGYV5nz8Ym4qHaPTo
yyQ1tBLdtifvbZdkllgYyLf5AFnwjzCSXE53a+0+QSi+omTMYWEN/WMiJV5AwKhd
dETRHEMSfSAI+nPYBrbrjwyRE30YCJPNVi7IjhVBRjwFvBpFLR+fKBxkl92v37zn
BKTmYde3gXhg5lmTPV0lzsA6+aqOiaTQ/mBpAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUWxe4N6BBwSxf6BGaD0jBoknB2hwwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L1d4ZTRONkJCd1N4ZjZCR2FEMGpCb2tuQjJody5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAHc0lIwDQYJKoZIhvcNAQELBQADggEBACVOJkuRokv8hsp2tDo6xPwpeES9
qHEPhXSt7E3GZo65ANWPDnNzmhghIO6W33AAWO9M8OTVKY1p+Q/PBjtX4b9IBr2d
8Fu4kea2D8/JfOq3M9N2jkqZB2HJpzINLq3iqhY+UrxZdPqnWK/T/G+vZDpLr6+3
uB+v1JADclPwRqVJrQycIZODv6yP76Gwdcejj9M96PHDdQV6lr5tbaLhH4A0DxI/
Nvwk8pZxmbb+tXs9+fQc3ZtOLXQaoAZSEdIMNsNGGMmjqfBZtrEZK2XcH/Eml7R+
R3yhdyXcvfoxBup7NPuHO9kgPUrdtzBXUKplAOgUddNTEtdepXSayVVjDIY=
-----END CERTIFICATE-----
Generated at Sat Jun 21 16:55:27 2025 by rpki-client