Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20116/6Je1NCcyGC4r9RInSm2g4nnHyrA.roa
File:                     6Je1NCcyGC4r9RInSm2g4nnHyrA.roa (raw, json)
Hash identifier:          7M0osqlHh3gZJoiwiGgF52RYSLnLqMUXo5Fynw0hqgs=
Subject key identifier:   E8:97:B5:34:27:32:18:2E:2B:F5:12:27:4A:6D:A0:E2:79:C7:CA:B0
Certificate issuer:       /CN=C49E64FB7C8C7C6B5CD7C7701882E8597C42838E
Certificate serial:       87
Authority key identifier: C4:9E:64:FB:7C:8C:7C:6B:5C:D7:C7:70:18:82:E8:59:7C:42:83:8E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xJ5k-3yMfGtc18dwGILoWXxCg44.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/6Je1NCcyGC4r9RInSm2g4nnHyrA.roa
Signing time:             Tue 10 Jun 2025 10:50:48 +0000
ROA not before:           Tue 10 Jun 2025 10:50:48 +0000
ROA not after:            Sat 23 May 2026 09:51:00 +0000
asID:                     38631
IP address blocks:        119.235.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/xJ5k-3yMfGtc18dwGILoWXxCg44.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/xJ5k-3yMfGtc18dwGILoWXxCg44.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xJ5k-3yMfGtc18dwGILoWXxCg44.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 135 (0x87)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C49E64FB7C8C7C6B5CD7C7701882E8597C42838E
        Validity
            Not Before: Jun 10 10:50:48 2025 GMT
            Not After : May 23 09:51:00 2026 GMT
        Subject: CN=E897B5342732182E2BF512274A6DA0E279C7CAB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:55:0e:55:f9:76:25:d9:a4:f6:9d:af:ea:5b:
                    46:85:bf:d3:25:75:ce:30:58:1b:5d:3c:db:3e:0e:
                    76:50:54:13:aa:f3:97:71:a9:7c:23:88:21:f0:05:
                    57:28:4c:e9:29:b6:42:43:ad:b3:0e:9d:7e:6e:77:
                    9f:30:c9:71:57:1f:b5:b3:22:21:4f:13:fa:56:53:
                    1b:d9:f2:60:8a:4c:e8:42:41:ad:97:b0:f7:ba:02:
                    09:a3:69:31:cc:4a:49:87:4f:38:02:64:4f:be:b1:
                    84:c3:b5:e0:3a:ee:91:a2:36:0f:33:d4:42:db:cf:
                    17:bd:f8:00:ff:59:64:f5:12:a5:42:2c:f5:3e:09:
                    14:16:4b:5e:15:4a:6d:c2:87:ce:8f:e8:39:72:da:
                    c3:6a:26:97:4b:cc:78:f6:ea:58:14:81:01:16:bf:
                    ea:31:fe:56:90:dc:ba:c7:ec:b1:dc:1e:6e:61:5b:
                    e8:39:fe:b9:4a:8f:b0:ad:5e:19:65:14:89:40:cb:
                    70:2d:f7:3b:15:77:3d:2f:8e:de:15:8d:b4:4b:67:
                    4f:53:a3:d3:1a:5c:6a:45:09:06:29:b7:7b:db:28:
                    fc:e4:f1:3b:2a:f9:00:d0:b1:11:46:e0:e3:7a:bd:
                    eb:36:34:97:20:e7:49:e1:83:f9:79:52:ea:e4:55:
                    3b:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:97:B5:34:27:32:18:2E:2B:F5:12:27:4A:6D:A0:E2:79:C7:CA:B0
            X509v3 Authority Key Identifier:
                keyid:C4:9E:64:FB:7C:8C:7C:6B:5C:D7:C7:70:18:82:E8:59:7C:42:83:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/xJ5k-3yMfGtc18dwGILoWXxCg44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xJ5k-3yMfGtc18dwGILoWXxCg44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/6Je1NCcyGC4r9RInSm2g4nnHyrA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.235.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:82:12:14:84:11:8b:74:03:77:7b:5f:b5:e3:14:ad:02:af:
         9f:bc:db:d2:b7:e7:89:21:dd:f0:8e:ae:2d:62:f8:63:bf:ae:
         8a:a7:5c:15:4e:f8:8d:7d:56:33:2e:63:53:5b:fd:71:cc:b2:
         da:39:1a:9b:14:c3:39:0c:49:27:fa:2f:f3:93:c5:e5:96:54:
         43:fe:64:70:df:9b:61:cf:dc:79:a0:75:f7:02:18:5a:0f:a0:
         da:0b:8b:d6:19:08:c8:02:ca:60:06:02:ed:0e:65:46:ce:cc:
         56:8e:8c:27:a1:5e:ce:30:e1:6f:ff:9d:ea:dc:17:d5:05:3d:
         05:af:b1:b5:2c:1e:4d:9c:38:7f:9a:73:10:2a:59:23:96:02:
         89:81:6f:42:92:e7:72:9d:96:67:bd:24:da:fe:f3:e2:17:55:
         2a:be:12:0a:c5:e5:b7:71:ab:48:c4:5c:45:53:7c:c3:24:7f:
         0f:e7:d6:43:5a:ca:f8:05:2d:77:c2:af:6e:ad:97:ef:b3:5f:
         95:ba:95:20:df:57:45:55:bd:79:0f:d6:bc:fb:c8:d1:03:40:
         9b:8e:99:16:8a:48:65:4b:0b:e5:58:ad:d5:2b:a1:bf:da:8a:
         89:db:9e:37:fe:3a:37:18:24:0c:aa:cd:62:ea:ee:f6:e8:0e:
         7a:95:4f:ca
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgICAIcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5
RTY0RkI3QzhDN0M2QjVDRDdDNzcwMTg4MkU4NTk3QzQyODM4RTAeFw0yNTA2MTAx
MDUwNDhaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKEU4OTdCNTM0MjczMjE4
MkUyQkY1MTIyNzRBNkRBMEUyNzlDN0NBQjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC7VQ5V+XYl2aT2na/qW0aFv9Mldc4wWBtdPNs+DnZQVBOq85dx
qXwjiCHwBVcoTOkptkJDrbMOnX5ud58wyXFXH7WzIiFPE/pWUxvZ8mCKTOhCQa2X
sPe6AgmjaTHMSkmHTzgCZE++sYTDteA67pGiNg8z1ELbzxe9+AD/WWT1EqVCLPU+
CRQWS14VSm3Ch86P6Dly2sNqJpdLzHj26lgUgQEWv+ox/laQ3LrH7LHcHm5hW+g5
/rlKj7CtXhllFIlAy3At9zsVdz0vjt4VjbRLZ09To9MaXGpFCQYpt3vbKPzk8Tsq
+QDQsRFG4ON6ves2NJcg50nhg/l5UurkVTvdAgMBAAGjggIoMIICJDAdBgNVHQ4E
FgQU6Je1NCcyGC4r9RInSm2g4nnHyrAwHwYDVR0jBBgwFoAUxJ5k+3yMfGtc18dw
GILoWXxCg44wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzIwMTE2L3hKNWstM3lNZkd0YzE4ZHdHSUxvV1h4Q2c0NC5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3hKNWstM3lNZkd0YzE4ZHdHSUxv
V1h4Q2c0NC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8yMDExNi82SmUxTkNjeUdDNHI5UkluU20yZzRubkh5ckEu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAd+voMA0GCSqGSIb3DQEBCwUAA4IBAQC2ghIUhBGLdAN3e1+14xSt
Aq+fvNvSt+eJId3wjq4tYvhjv66Kp1wVTviNfVYzLmNTW/1xzLLaORqbFMM5DEkn
+i/zk8XlllRD/mRw35thz9x5oHX3AhhaD6DaC4vWGQjIAspgBgLtDmVGzsxWjown
oV7OMOFv/53q3BfVBT0Fr7G1LB5NnDh/mnMQKlkjlgKJgW9CkudynZZnvSTa/vPi
F1UqvhIKxeW3catIxFxFU3zDJH8P59ZDWsr4BS13wq9urZfvs1+VupUg31dFVb15
D9a8+8jRA0CbjpkWikhlSwvlWK3VK6G/2oqJ2543/jo3GCQMqs1i6u726A56lU/K
-----END CERTIFICATE-----
Generated at Sat Jul 5 19:29:16 2025 by rpki-client