Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/slOewT4QGFrswjL1whJC_8BspLk.roa
File:                     slOewT4QGFrswjL1whJC_8BspLk.roa (raw, json)
Hash identifier:          2p0q2Nir0fo6eZjE3gApOo6m84Y+sAAcQqE5/Um/7e0=
Subject key identifier:   B2:53:9E:C1:3E:10:18:5A:EC:C2:32:F5:C2:12:42:FF:C0:6C:A4:B9
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0F13
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/slOewT4QGFrswjL1whJC_8BspLk.roa
Signing time:             Tue 10 Jun 2025 11:20:14 +0000
ROA not before:           Tue 10 Jun 2025 11:20:14 +0000
ROA not after:            Sat 23 May 2026 09:51:00 +0000
asID:                     9605
IP address blocks:        220.210.80.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 28 Jun 2025 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3859 (0xf13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun 10 11:20:14 2025 GMT
            Not After : May 23 09:51:00 2026 GMT
        Subject: CN=B2539EC13E10185AECC232F5C21242FFC06CA4B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:46:01:ee:03:84:9f:e6:c3:41:6d:45:f0:79:
                    00:57:e1:c2:99:aa:a7:7b:ff:31:c2:ed:ad:e6:fa:
                    98:21:fd:36:71:3e:6d:a3:a4:82:c0:a9:91:90:f3:
                    a2:cc:75:c2:ce:62:89:66:58:ba:a1:86:cc:6b:40:
                    44:bd:2e:a1:46:c0:d7:89:d0:08:7e:cb:b3:4e:7c:
                    bd:3f:d3:8b:a2:20:dd:b7:41:7d:b4:d9:f9:7d:d7:
                    3b:81:80:f3:f9:ea:9d:80:dc:6a:5b:d6:52:2e:fe:
                    12:e3:f8:52:d3:89:71:8f:20:9c:1e:c9:36:77:30:
                    43:92:e8:2d:1a:e8:39:2d:04:3e:f4:21:5b:53:37:
                    cb:e6:51:a9:da:09:c9:fb:ff:6f:94:76:3a:cc:14:
                    ae:16:6f:a7:10:71:1d:f6:91:83:49:7b:78:ac:8d:
                    88:86:c9:2a:ad:77:d8:87:0e:f6:13:0f:7b:bb:88:
                    50:38:01:1e:d3:19:45:28:fc:6c:8b:47:6a:1a:ab:
                    12:99:7d:fa:e1:5b:49:a2:ce:57:cc:e8:77:87:69:
                    45:21:8a:94:11:f1:33:7d:79:07:36:33:36:09:0b:
                    73:0f:e9:43:1a:e9:aa:f5:16:97:2e:af:5b:03:9e:
                    54:a0:8c:64:a6:fe:ca:e4:2b:33:16:0c:26:2d:4e:
                    c8:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:53:9E:C1:3E:10:18:5A:EC:C2:32:F5:C2:12:42:FF:C0:6C:A4:B9
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/slOewT4QGFrswjL1whJC_8BspLk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.210.80.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5a:65:65:27:b8:c7:31:db:b6:55:8a:b0:97:c2:ce:1b:a8:44:
         52:9e:dd:ab:e9:2a:cc:5a:1b:57:5a:6a:67:c1:2b:49:91:e2:
         df:1b:31:00:48:13:84:c8:be:98:69:0d:28:ad:70:c0:ea:15:
         de:e0:e1:c8:cd:8d:83:0f:81:de:e7:6c:a4:12:17:aa:d2:ee:
         70:d2:b1:8b:6e:e0:ee:78:2e:cb:77:c1:84:04:be:f7:eb:d6:
         de:89:77:14:b5:da:9e:1c:bb:4e:e1:52:1d:e1:40:b2:60:db:
         c0:b9:63:7b:c5:37:57:38:2f:07:99:72:98:39:67:44:bd:2a:
         ef:04:d9:7e:c2:ea:e2:9e:06:cc:e0:62:8b:21:3a:ea:a9:80:
         57:b2:cb:1e:45:01:dc:c7:5a:f3:e6:f3:d5:47:41:22:03:27:
         8b:83:34:e4:cb:6a:d6:b9:27:0d:34:c2:39:34:64:61:02:6d:
         6c:b2:6f:27:ae:c5:e9:f6:e8:67:11:3d:19:5f:cf:da:94:bd:
         32:e9:7c:9e:0e:59:a3:fc:7c:18:ff:d3:09:7e:e5:b8:1b:03:
         ea:0d:7e:ff:ff:98:f5:42:e1:57:80:d4:84:af:bd:d0:c1:fd:
         dc:44:43:94:c7:4c:e2:75:6c:2c:7d:8f:65:14:0a:c1:ad:54:
         b2:08:1d:44
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICDxMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx
MTIwMTRaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKEIyNTM5RUMxM0UxMDE4
NUFFQ0MyMzJGNUMyMTI0MkZGQzA2Q0E0QjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC+RgHuA4Sf5sNBbUXweQBX4cKZqqd7/zHC7a3m+pgh/TZxPm2j
pILAqZGQ86LMdcLOYolmWLqhhsxrQES9LqFGwNeJ0Ah+y7NOfL0/04uiIN23QX20
2fl91zuBgPP56p2A3Gpb1lIu/hLj+FLTiXGPIJweyTZ3MEOS6C0a6DktBD70IVtT
N8vmUanaCcn7/2+UdjrMFK4Wb6cQcR32kYNJe3isjYiGySqtd9iHDvYTD3u7iFA4
AR7TGUUo/GyLR2oaqxKZffrhW0mizlfM6HeHaUUhipQR8TN9eQc2MzYJC3MP6UMa
6ar1Fpcur1sDnlSgjGSm/srkKzMWDCYtTsiDAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUslOewT4QGFrswjL1whJC/8BspLkwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L3NsT2V3VDRRR0Zyc3dqTDF3aEpDXzhCc3BMay5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAHc0lAwDQYJKoZIhvcNAQELBQADggEBAFplZSe4xzHbtlWKsJfCzhuoRFKe
3avpKsxaG1daamfBK0mR4t8bMQBIE4TIvphpDSitcMDqFd7g4cjNjYMPgd7nbKQS
F6rS7nDSsYtu4O54Lst3wYQEvvfr1t6JdxS12p4cu07hUh3hQLJg28C5Y3vFN1c4
LweZcpg5Z0S9Ku8E2X7C6uKeBszgYoshOuqpgFeyyx5FAdzHWvPm89VHQSIDJ4uD
NOTLata5Jw00wjk0ZGECbWyybyeuxen26GcRPRlfz9qUvTLpfJ4OWaP8fBj/0wl+
5bgbA+oNfv//mPVC4VeA1ISvvdDB/dxEQ5THTOJ1bCx9j2UUCsGtVLIIHUQ=
-----END CERTIFICATE-----
Generated at Sat Jun 21 09:42:53 2025 by rpki-client