Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/240/_MWX6-q4MFkkE6gJJbhQYJEjX1I.roa
File:                     _MWX6-q4MFkkE6gJJbhQYJEjX1I.roa (raw, json)
Hash identifier:          HEh8HhTRKQZ/S5YQlhBo/SS/W8Bv3Td28TUqeCbe2ec=
Subject key identifier:   FC:C5:97:EB:EA:B8:30:59:24:13:A8:09:25:B8:50:60:91:23:5F:52
Certificate issuer:       /CN=B96964A7CE0A58F4AE3673F47D7A1D425BE4A07D
Certificate serial:       4C
Authority key identifier: B9:69:64:A7:CE:0A:58:F4:AE:36:73:F4:7D:7A:1D:42:5B:E4:A0:7D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uWlkp84KWPSuNnP0fXodQlvkoH0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/_MWX6-q4MFkkE6gJJbhQYJEjX1I.roa
Signing time:             Tue 01 Jul 2025 01:32:06 +0000
ROA not before:           Tue 01 Jul 2025 01:32:06 +0000
ROA not after:            Mon 15 Jun 2026 01:30:02 +0000
asID:                     9597
IP address blocks:        180.235.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/uWlkp84KWPSuNnP0fXodQlvkoH0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/uWlkp84KWPSuNnP0fXodQlvkoH0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uWlkp84KWPSuNnP0fXodQlvkoH0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 76 (0x4c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B96964A7CE0A58F4AE3673F47D7A1D425BE4A07D
        Validity
            Not Before: Jul  1 01:32:06 2025 GMT
            Not After : Jun 15 01:30:02 2026 GMT
        Subject: CN=FCC597EBEAB830592413A80925B8506091235F52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:46:d8:25:fb:68:2c:32:c6:a3:d6:7a:c8:94:
                    b2:fe:cc:63:c7:12:8b:f6:7f:a1:dd:dd:3c:74:35:
                    1e:34:94:04:1a:6b:7d:fe:33:45:e3:27:ac:da:8c:
                    06:08:0c:6d:58:dd:ee:3e:a2:a4:76:22:84:41:7e:
                    96:fe:80:ad:31:a0:7f:6d:f0:7c:6e:57:e0:9f:8f:
                    8a:ef:98:c6:5d:3d:ef:9b:21:0f:57:13:fc:00:d8:
                    eb:76:b3:7c:ae:5f:73:d3:f4:ed:15:35:3a:11:78:
                    2a:54:ec:9e:0d:fd:88:d9:60:84:41:7b:6f:32:b4:
                    d1:13:63:1b:95:72:87:7c:fe:9c:22:1e:e3:64:68:
                    89:1d:f7:a4:e7:68:79:ab:3f:49:78:da:94:c7:69:
                    5c:a8:8f:05:51:70:e1:73:77:e8:01:58:6b:6c:3a:
                    24:c9:16:ea:e8:c0:c0:b5:e3:27:71:22:55:12:4d:
                    72:21:b1:ca:95:cd:06:f8:49:c9:61:8d:ef:21:de:
                    d7:57:06:e4:71:b6:9d:ef:ef:eb:b8:d9:b5:c2:5f:
                    04:2d:5b:6a:41:c7:a9:94:b5:ed:31:8e:c0:a8:c9:
                    9d:11:3a:ca:e7:0d:87:2e:7a:6d:26:db:f7:c6:08:
                    ec:69:9e:36:0e:92:d0:b7:91:9c:ce:e9:86:63:9e:
                    f3:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:C5:97:EB:EA:B8:30:59:24:13:A8:09:25:B8:50:60:91:23:5F:52
            X509v3 Authority Key Identifier:
                keyid:B9:69:64:A7:CE:0A:58:F4:AE:36:73:F4:7D:7A:1D:42:5B:E4:A0:7D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/uWlkp84KWPSuNnP0fXodQlvkoH0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uWlkp84KWPSuNnP0fXodQlvkoH0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/_MWX6-q4MFkkE6gJJbhQYJEjX1I.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.235.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         c7:b1:bf:09:f1:1c:d4:35:d3:b0:2e:d0:1b:d7:99:65:6c:fe:
         03:6b:b1:80:a1:71:9b:5e:e9:b3:aa:32:6a:9a:4a:33:55:b9:
         31:77:7f:3c:27:a7:ab:c3:09:f0:89:54:f9:fb:41:f3:ed:05:
         5e:62:5b:89:72:90:24:22:5d:e9:e1:93:82:ad:ee:bf:a7:1e:
         58:0f:fb:b5:9b:9b:4a:ca:17:17:87:fd:12:c7:8d:c2:7f:bf:
         98:73:a1:3f:83:dd:d4:66:25:f1:88:91:d0:2b:ad:aa:92:d7:
         d9:42:e2:bd:34:54:79:cc:91:64:76:c6:4f:64:02:b3:b4:ac:
         bc:8c:50:fb:05:54:ce:9e:26:05:53:d2:ee:d1:cd:1c:bf:b2:
         25:6d:d0:92:25:d2:02:a0:76:d3:73:73:5b:11:03:2e:52:82:
         ff:cd:e2:1a:aa:16:e8:9a:c3:fa:0a:93:98:e5:46:ee:52:c2:
         1d:97:8d:c3:fd:eb:5d:19:ab:6c:fe:38:34:56:43:bb:b2:4b:
         de:92:02:e2:28:6e:5a:b2:a8:0d:b1:2b:e6:4a:b8:01:2e:81:
         09:db:dc:92:90:2d:3d:06:1c:ce:ee:f4:5c:b2:fc:98:61:96:
         01:3b:b2:4f:fa:c0:0b:84:fb:1a:71:5f:f4:d5:17:bd:74:92:
         08:3d:44:76
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBTDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhCOTY5
NjRBN0NFMEE1OEY0QUUzNjczRjQ3RDdBMUQ0MjVCRTRBMDdEMB4XDTI1MDcwMTAx
MzIwNloXDTI2MDYxNTAxMzAwMlowMzExMC8GA1UEAxMoRkNDNTk3RUJFQUI4MzA1
OTI0MTNBODA5MjVCODUwNjA5MTIzNUY1MjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALVG2CX7aCwyxqPWesiUsv7MY8cSi/Z/od3dPHQ1HjSUBBprff4z
ReMnrNqMBggMbVjd7j6ipHYihEF+lv6ArTGgf23wfG5X4J+Piu+Yxl0975shD1cT
/ADY63azfK5fc9P07RU1OhF4KlTsng39iNlghEF7bzK00RNjG5Vyh3z+nCIe42Ro
iR33pOdoeas/SXjalMdpXKiPBVFw4XN36AFYa2w6JMkW6ujAwLXjJ3EiVRJNciGx
ypXNBvhJyWGN7yHe11cG5HG2ne/v67jZtcJfBC1bakHHqZS17TGOwKjJnRE6yucN
hy56bSbb98YI7GmeNg6S0LeRnM7phmOe8wkCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBT8xZfr6rgwWSQTqAkluFBgkSNfUjAfBgNVHSMEGDAWgBS5aWSnzgpY9K42c/R9
eh1CW+SgfTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjQwL3VXbGtwODRLV1BTdU5uUDBmWG9kUWx2a29IMC5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3VXbGtwODRLV1BTdU5uUDBmWG9kUWx2
a29IMC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8yNDAvX01XWDYtcTRNRmtrRTZnSkpiaFFZSkVqWDFJLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBbTr4DANBgkqhkiG9w0BAQsFAAOCAQEAx7G/CfEc1DXTsC7QG9eZZWz+A2ux
gKFxm17ps6oyappKM1W5MXd/PCenq8MJ8IlU+ftB8+0FXmJbiXKQJCJd6eGTgq3u
v6ceWA/7tZubSsoXF4f9EseNwn+/mHOhP4Pd1GYl8YiR0CutqpLX2ULivTRUecyR
ZHbGT2QCs7SsvIxQ+wVUzp4mBVPS7tHNHL+yJW3QkiXSAqB203NzWxEDLlKC/83i
GqoW6JrD+gqTmOVG7lLCHZeNw/3rXRmrbP44NFZDu7JL3pIC4ihuWrKoDbEr5kq4
AS6BCdvckpAtPQYczu70XLL8mGGWATuyT/rAC4T7GnFf9NUXvXSSCD1Edg==
-----END CERTIFICATE-----
Generated at Sat Jul 5 06:38:29 2025 by rpki-client