Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1937/oWC7NTFXvT9-vFpeq-wqvmb3x0g.roa
File:                     oWC7NTFXvT9-vFpeq-wqvmb3x0g.roa (raw, json)
Hash identifier:          4bFJVIZFwFI+I8BAbRWL8shJNGhDtwyuIhGvml48XZk=
Subject key identifier:   A1:60:BB:35:31:57:BD:3F:7E:BC:5A:5E:AB:EC:2A:BE:66:F7:C7:48
Certificate issuer:       /CN=C60076FC28F04DEB9817A3482226942CBEF1F80D
Certificate serial:       40
Authority key identifier: C6:00:76:FC:28:F0:4D:EB:98:17:A3:48:22:26:94:2C:BE:F1:F8:0D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/oWC7NTFXvT9-vFpeq-wqvmb3x0g.roa
Signing time:             Tue 01 Jul 2025 01:32:44 +0000
ROA not before:           Tue 01 Jul 2025 01:32:44 +0000
ROA not after:            Mon 15 Jun 2026 01:30:02 +0000
asID:                     18071
IP address blocks:        133.183.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 64 (0x40)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C60076FC28F04DEB9817A3482226942CBEF1F80D
        Validity
            Not Before: Jul  1 01:32:44 2025 GMT
            Not After : Jun 15 01:30:02 2026 GMT
        Subject: CN=A160BB353157BD3F7EBC5A5EABEC2ABE66F7C748
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ce:8c:5b:dd:33:04:7f:7a:9b:64:58:58:1f:
                    99:eb:e5:91:1a:9e:9d:9e:40:b0:79:0d:15:06:b2:
                    04:4d:01:25:2a:b4:c0:3c:f9:b9:3c:cf:dd:5b:2b:
                    e6:f0:77:37:e6:d0:33:2a:8a:9a:05:87:a9:e4:c8:
                    7d:2c:19:63:c0:5d:4a:fd:b4:69:5f:ee:03:41:6f:
                    76:36:f1:44:a2:a7:c4:4e:bf:74:95:ef:1e:90:98:
                    63:c6:42:92:fe:5c:38:23:fc:03:3c:e8:da:1e:d2:
                    95:9f:ec:6f:00:48:bf:e6:5b:82:ff:8b:6e:4d:ae:
                    1c:bb:13:99:16:69:d5:a9:ff:70:1c:d5:71:50:86:
                    69:67:6a:57:9e:db:c4:cd:53:ed:f2:51:5d:b0:18:
                    07:76:86:c8:f6:eb:f6:22:3b:56:62:e2:a9:1c:9e:
                    b5:f5:09:92:79:7d:26:c2:d5:37:93:5a:ea:a2:26:
                    c8:ea:42:2f:4f:8c:7a:cd:46:36:c4:41:d6:54:04:
                    18:0d:fe:e0:5f:c1:da:28:f6:dd:c4:48:3a:4b:b1:
                    93:f7:6a:fe:9f:22:29:28:00:b5:80:b2:09:3f:07:
                    b5:b0:83:33:79:c9:c7:5e:55:fb:01:dd:3d:f7:92:
                    4b:33:b2:49:74:94:66:9c:f8:16:5a:e7:c9:99:e9:
                    15:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:60:BB:35:31:57:BD:3F:7E:BC:5A:5E:AB:EC:2A:BE:66:F7:C7:48
            X509v3 Authority Key Identifier:
                keyid:C6:00:76:FC:28:F0:4D:EB:98:17:A3:48:22:26:94:2C:BE:F1:F8:0D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/oWC7NTFXvT9-vFpeq-wqvmb3x0g.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.183.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:f9:a3:b2:92:45:67:69:f0:14:db:b8:2d:f9:0a:54:bf:2b:
         3b:2b:1a:b8:30:e5:d5:c6:de:c8:cd:ee:b2:ce:47:91:3b:ca:
         e3:8b:e1:69:ab:e2:0a:11:2f:a2:b9:5b:8f:b6:82:2b:b6:eb:
         c1:4d:8d:b4:8e:f7:c0:b7:82:d4:60:b0:1d:3e:e0:83:1e:97:
         52:f4:b4:2b:ee:89:b6:75:33:57:f2:0e:c4:b6:92:a2:41:f7:
         aa:57:16:af:39:0e:4a:47:8f:e1:33:23:e7:4f:0c:70:24:e6:
         58:70:cf:22:ef:55:ab:8c:24:6d:41:44:5b:7a:19:b4:60:8b:
         a3:2d:dc:3b:a3:e1:55:f8:21:ca:5a:74:9b:5d:41:8e:ae:f7:
         19:33:e7:95:93:cb:f9:f3:dc:2d:ca:9b:a9:ec:72:ed:69:f3:
         5e:3c:c5:3d:2b:9a:4f:42:70:1f:79:fa:e6:1f:bb:a8:94:71:
         8b:2f:42:85:0e:55:79:02:cb:8c:89:92:c0:e7:79:57:a1:11:
         b4:28:55:16:15:8a:ef:39:c5:c7:d2:3e:84:15:91:17:e8:e0:
         0d:99:10:ab:92:65:18:50:13:bd:f0:4e:89:28:60:a9:b2:14:
         d5:8a:4f:62:ef:ec:7e:4f:44:0f:37:60:50:51:09:01:9a:6d:
         87:64:c3:15
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgIBQDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDNjAw
NzZGQzI4RjA0REVCOTgxN0EzNDgyMjI2OTQyQ0JFRjFGODBEMB4XDTI1MDcwMTAx
MzI0NFoXDTI2MDYxNTAxMzAwMlowMzExMC8GA1UEAxMoQTE2MEJCMzUzMTU3QkQz
RjdFQkM1QTVFQUJFQzJBQkU2NkY3Qzc0ODCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKrOjFvdMwR/eptkWFgfmevlkRqenZ5AsHkNFQayBE0BJSq0wDz5
uTzP3Vsr5vB3N+bQMyqKmgWHqeTIfSwZY8BdSv20aV/uA0FvdjbxRKKnxE6/dJXv
HpCYY8ZCkv5cOCP8Azzo2h7SlZ/sbwBIv+Zbgv+Lbk2uHLsTmRZp1an/cBzVcVCG
aWdqV57bxM1T7fJRXbAYB3aGyPbr9iI7VmLiqRyetfUJknl9JsLVN5Na6qImyOpC
L0+Mes1GNsRB1lQEGA3+4F/B2ij23cRIOkuxk/dq/p8iKSgAtYCyCT8HtbCDM3nJ
x15V+wHdPfeSSzOySXSUZpz4FlrnyZnpFSsCAwEAAaOCAiYwggIiMB0GA1UdDgQW
BBShYLs1MVe9P368Wl6r7Cq+ZvfHSDAfBgNVHSMEGDAWgBTGAHb8KPBN65gXo0gi
JpQsvvH4DTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa
oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMTkzNy94Z0IyX0Nqd1RldVlGNk5JSWlhVUxMN3gtQTAuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC94Z0IyX0Nqd1RldVlGNk5JSWlhVUxM
N3gtQTAuY2VyMA4GA1UdDwEB/wQEAwIHgDCBvAYIKwYBBQUHAQsEga8wgawwYgYI
KwYBBQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTkzNy9vV0M3TlRGWHZUOS12RnBlcS13cXZtYjN4MGcucm9h
MEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAv
cnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA
ATAGAwQAhbdrMA0GCSqGSIb3DQEBCwUAA4IBAQB3+aOykkVnafAU27gt+QpUvys7
Kxq4MOXVxt7Ize6yzkeRO8rji+Fpq+IKES+iuVuPtoIrtuvBTY20jvfAt4LUYLAd
PuCDHpdS9LQr7om2dTNX8g7EtpKiQfeqVxavOQ5KR4/hMyPnTwxwJOZYcM8i71Wr
jCRtQURbehm0YIujLdw7o+FV+CHKWnSbXUGOrvcZM+eVk8v589wtypup7HLtafNe
PMU9K5pPQnAfefrmH7uolHGLL0KFDlV5AsuMiZLA53lXoRG0KFUWFYrvOcXH0j6E
FZEX6OANmRCrkmUYUBO98E6JKGCpshTVik9i7+x+T0QPN2BQUQkBmm2HZMMV
-----END CERTIFICATE-----
Generated at Fri Jul 4 01:24:52 2025 by rpki-client