Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/pIAfocLFnDiAxFuTZmiTWOCt9HM.roa
File:                     pIAfocLFnDiAxFuTZmiTWOCt9HM.roa (raw, json)
Hash identifier:          flw2IZgGXKyRSsOKjKFrsH7IEDubFtDfvZFd1z1gkdY=
Subject key identifier:   A4:80:1F:A1:C2:C5:9C:38:80:C4:5B:93:66:68:93:58:E0:AD:F4:73
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0F5E
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/pIAfocLFnDiAxFuTZmiTWOCt9HM.roa
Signing time:             Tue 10 Jun 2025 11:28:34 +0000
ROA not before:           Tue 10 Jun 2025 11:28:34 +0000
ROA not after:            Sat 23 May 2026 09:51:00 +0000
asID:                     9605
IP address blocks:        110.160.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 27 Jun 2025 20:05:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3934 (0xf5e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun 10 11:28:34 2025 GMT
            Not After : May 23 09:51:00 2026 GMT
        Subject: CN=A4801FA1C2C59C3880C45B9366689358E0ADF473
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:4e:05:0d:3a:d4:60:55:31:a0:86:48:12:5f:
                    79:15:ef:81:84:ed:32:80:02:c3:cf:c6:ac:dd:2a:
                    34:cb:39:bd:4f:48:a7:fc:52:d0:05:2f:d9:a4:c0:
                    c5:52:34:5f:b0:8c:de:c5:00:50:b7:27:ed:9b:ea:
                    73:01:ae:c6:0e:ee:16:cb:31:51:47:13:fa:db:27:
                    c1:dc:82:f1:b8:45:7b:85:b2:c6:b5:04:17:df:2c:
                    82:51:6e:85:84:da:f8:ae:58:92:56:63:47:6b:c9:
                    f2:79:d8:4b:a6:ef:c3:e9:cb:c6:5c:7a:9c:de:d9:
                    24:40:2d:ac:b6:70:95:9a:49:8c:f0:84:ca:4a:84:
                    63:75:20:43:37:c6:54:c1:60:16:b0:eb:7c:8e:7c:
                    c3:3d:42:cb:8e:67:cd:84:da:8e:e7:e7:1b:7c:f9:
                    3a:3f:c9:56:ab:1d:f6:2c:be:8b:b7:57:95:de:9d:
                    5a:67:a5:25:93:4e:de:70:5e:f0:81:15:bb:f6:3f:
                    fa:63:7b:31:e3:52:43:9b:07:7d:e9:c9:e0:27:43:
                    2b:a3:05:91:4c:83:b4:75:1e:86:3e:81:93:5b:d4:
                    00:e0:43:82:0c:da:92:cc:bb:66:97:17:29:94:35:
                    bf:16:33:a3:52:89:3b:e6:bf:c2:c5:a0:e7:8a:3c:
                    f5:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:80:1F:A1:C2:C5:9C:38:80:C4:5B:93:66:68:93:58:E0:AD:F4:73
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/pIAfocLFnDiAxFuTZmiTWOCt9HM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.160.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         8d:07:37:8a:19:1d:a0:c4:05:93:ec:5d:f9:ef:31:02:72:ea:
         8e:e3:95:5a:ff:50:37:2b:22:c2:f6:ad:f1:f6:cf:20:0a:5f:
         31:2e:58:23:db:eb:da:b3:99:37:83:59:88:e7:15:2b:f1:e4:
         71:10:fd:6f:a4:d9:ea:c5:28:57:d3:88:95:f5:7a:7f:c5:65:
         6d:80:9f:45:a4:04:32:50:71:d8:23:67:74:ad:6a:97:9e:dc:
         b4:bc:75:20:12:5d:5e:74:fd:4f:50:3e:7e:e5:b0:41:e2:91:
         92:d2:95:93:95:fd:78:89:c7:02:ba:41:46:cc:1b:8b:f5:08:
         dc:e6:fb:39:62:3f:65:76:47:5d:fe:55:52:46:74:60:6f:46:
         60:20:7c:4c:41:40:d2:71:40:67:21:11:2b:a7:32:1d:d8:26:
         69:7f:e2:9e:14:50:2d:37:60:08:54:76:32:ef:2f:68:77:3c:
         49:12:e2:09:14:dd:4a:4f:a5:86:a2:d7:19:e5:57:06:17:62:
         85:5c:2e:65:49:e3:9f:bb:0a:fa:27:16:04:80:28:c0:48:c0:
         15:18:8b:b9:09:27:7d:3a:06:e0:28:a7:cc:85:1d:12:63:73:
         2f:bb:8e:a3:be:f2:77:73:4b:c5:01:f2:50:80:dc:11:52:dd:
         c6:5d:11:aa
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICD14wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx
MTI4MzRaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKEE0ODAxRkExQzJDNTlD
Mzg4MEM0NUI5MzY2Njg5MzU4RTBBREY0NzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDwTgUNOtRgVTGghkgSX3kV74GE7TKAAsPPxqzdKjTLOb1PSKf8
UtAFL9mkwMVSNF+wjN7FAFC3J+2b6nMBrsYO7hbLMVFHE/rbJ8HcgvG4RXuFssa1
BBffLIJRboWE2viuWJJWY0dryfJ52Eum78Ppy8Zcepze2SRALay2cJWaSYzwhMpK
hGN1IEM3xlTBYBaw63yOfMM9QsuOZ82E2o7n5xt8+To/yVarHfYsvou3V5XenVpn
pSWTTt5wXvCBFbv2P/pjezHjUkObB33pyeAnQyujBZFMg7R1HoY+gZNb1ADgQ4IM
2pLMu2aXFymUNb8WM6NSiTvmv8LFoOeKPPUFAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUpIAfocLFnDiAxFuTZmiTWOCt9HMwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L3BJQWZvY0xGbkRpQXhGdVRabWlUV09DdDlITS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAduoAAwDQYJKoZIhvcNAQELBQADggEBAI0HN4oZHaDEBZPsXfnvMQJy6o7j
lVr/UDcrIsL2rfH2zyAKXzEuWCPb69qzmTeDWYjnFSvx5HEQ/W+k2erFKFfTiJX1
en/FZW2An0WkBDJQcdgjZ3Stapee3LS8dSASXV50/U9QPn7lsEHikZLSlZOV/XiJ
xwK6QUbMG4v1CNzm+zliP2V2R13+VVJGdGBvRmAgfExBQNJxQGchESunMh3YJml/
4p4UUC03YAhUdjLvL2h3PEkS4gkU3UpPpYai1xnlVwYXYoVcLmVJ45+7CvonFgSA
KMBIwBUYi7kJJ306BuAop8yFHRJjcy+7jqO+8ndzS8UB8lCA3BFS3cZdEao=
-----END CERTIFICATE-----
Generated at Fri Jun 20 23:11:35 2025 by rpki-client