Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/OSKr1j-RUOE9MDcp2weiQhNTWnI.roa
File:                     OSKr1j-RUOE9MDcp2weiQhNTWnI.roa (raw, json)
Hash identifier:          a5GlRfQ7ahoNs1YdFxLMcNKGCq0d4AcyTPubcpU5EY4=
Subject key identifier:   39:22:AB:D6:3F:91:50:E1:3D:30:37:29:DB:07:A2:42:13:53:5A:72
Certificate issuer:       /CN=06FA662194FCF1EB983AB44CC913004180770D18
Certificate serial:       73
Authority key identifier: 06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/OSKr1j-RUOE9MDcp2weiQhNTWnI.roa
Signing time:             Tue 01 Jul 2025 01:28:09 +0000
ROA not before:           Tue 01 Jul 2025 01:28:09 +0000
ROA not after:            Mon 15 Jun 2026 01:30:02 +0000
asID:                     2514
IP address blocks:        61.197.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 115 (0x73)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06FA662194FCF1EB983AB44CC913004180770D18
        Validity
            Not Before: Jul  1 01:28:09 2025 GMT
            Not After : Jun 15 01:30:02 2026 GMT
        Subject: CN=3922ABD63F9150E13D303729DB07A24213535A72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:5f:73:cd:bf:d5:99:9c:7d:13:ea:3b:91:06:
                    84:7d:90:9f:af:ab:16:96:9e:1f:b8:34:f0:f4:ec:
                    1c:96:4a:9b:f0:83:5a:9b:b7:d7:a3:5e:e5:21:08:
                    4b:34:f1:0f:41:a1:4c:0c:81:7b:58:23:2d:9a:2a:
                    5c:e5:8d:d7:57:2b:34:d9:0a:b5:12:8a:e8:41:48:
                    36:cb:b7:df:35:eb:05:cb:4c:be:7d:f6:e7:20:8f:
                    c3:ac:9e:af:e1:f9:4a:fc:5d:68:16:87:2b:32:91:
                    87:62:d4:0d:ac:68:e7:4b:1c:d6:76:93:10:be:f6:
                    9b:a8:de:53:01:6e:63:af:03:e8:a4:34:36:39:4e:
                    bf:6e:58:d5:43:3c:92:21:7a:f9:78:af:ae:ec:a9:
                    28:2d:e9:e3:37:29:7f:8c:8a:49:18:dc:ba:cb:49:
                    8b:48:c2:89:3e:4c:86:a6:54:34:4c:8a:d2:cf:ae:
                    2f:ec:0f:67:e8:23:d2:e9:60:fc:4d:2a:12:d3:73:
                    9c:15:ce:13:46:a0:4a:53:96:1d:7d:f9:b2:c9:ee:
                    97:49:d3:88:00:ee:aa:f8:e0:a3:52:f8:9f:72:ae:
                    5a:df:54:61:11:03:5b:f6:2f:fc:e5:73:8f:6c:f0:
                    60:99:f1:24:a7:6c:88:b0:16:00:71:db:ca:91:1b:
                    ab:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:22:AB:D6:3F:91:50:E1:3D:30:37:29:DB:07:A2:42:13:53:5A:72
            X509v3 Authority Key Identifier:
                keyid:06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/OSKr1j-RUOE9MDcp2weiQhNTWnI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.197.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         63:bb:73:f4:88:35:95:4c:fa:4b:98:43:23:d1:90:89:dd:5c:
         09:b1:35:1d:3c:aa:99:9a:e2:8c:28:54:a1:ca:f3:ca:12:72:
         28:cb:60:bb:e1:dd:1a:27:79:4b:2c:48:2f:96:0f:f7:12:99:
         ba:24:46:97:c4:42:47:12:bf:5e:3a:f9:8a:3f:f2:78:87:0e:
         1a:52:3d:94:9c:8f:7d:c4:b7:3d:1e:31:75:eb:da:da:36:27:
         4b:ab:10:a7:c2:de:b5:8d:6d:6b:3a:0a:7f:d1:17:f3:7d:41:
         5c:e7:ab:38:17:55:98:ee:35:4c:ea:98:81:cf:14:c7:23:ed:
         5c:c7:d8:d9:69:b1:b6:5e:26:fa:76:60:4e:6a:f6:af:aa:fa:
         74:21:5a:f0:24:f1:f5:6f:0b:22:4a:b1:51:69:6b:b1:03:4a:
         e3:c4:e2:cf:14:fa:16:d5:b0:3e:58:0d:9d:9c:2d:b3:c6:d6:
         55:fe:cd:53:52:46:77:19:e8:76:b3:7d:17:58:3d:af:75:94:
         d9:53:02:8c:a9:e1:c6:99:e6:b7:c0:bf:1a:da:51:e7:b1:36:
         dd:2e:27:43:2e:33:7e:84:9c:07:c9:11:5b:fd:fd:bc:1e:4a:
         61:fc:8e:26:0a:bd:61:ae:38:4f:a3:32:de:75:96:00:d1:6a:
         42:47:4d:48
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgIBczANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygwNkZB
NjYyMTk0RkNGMUVCOTgzQUI0NENDOTEzMDA0MTgwNzcwRDE4MB4XDTI1MDcwMTAx
MjgwOVoXDTI2MDYxNTAxMzAwMlowMzExMC8GA1UEAxMoMzkyMkFCRDYzRjkxNTBF
MTNEMzAzNzI5REIwN0EyNDIxMzUzNUE3MjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMlfc82/1ZmcfRPqO5EGhH2Qn6+rFpaeH7g08PTsHJZKm/CDWpu3
16Ne5SEISzTxD0GhTAyBe1gjLZoqXOWN11crNNkKtRKK6EFINsu33zXrBctMvn32
5yCPw6yer+H5SvxdaBaHKzKRh2LUDaxo50sc1naTEL72m6jeUwFuY68D6KQ0NjlO
v25Y1UM8kiF6+XivruypKC3p4zcpf4yKSRjcustJi0jCiT5MhqZUNEyK0s+uL+wP
Z+gj0ulg/E0qEtNznBXOE0agSlOWHX35ssnul0nTiADuqvjgo1L4n3KuWt9UYRED
W/Yv/OVzj2zwYJnxJKdsiLAWAHHbypEbq3UCAwEAAaOCAiEwggIdMB0GA1UdDgQW
BBQ5IqvWP5FQ4T0wNynbB6JCE1NacjAfBgNVHSMEGDAWgBQG+mYhlPzx65g6tEzJ
EwBBgHcNGDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGUGA1UdHwReMFwwWqBY
oFaGVHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjkvQnZwbUlaVDg4ZXVZT3JSTXlSTUFRWUIzRFJnLmNybDBtBggrBgEF
BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p
Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvQnZwbUlaVDg4ZXVZT3JSTXlSTUFRWUIz
RFJnLmNlcjAOBgNVHQ8BAf8EBAMCB4AwgboGCCsGAQUFBwELBIGtMIGqMGAGCCsG
AQUFBzALhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzI5L09TS3Ixai1SVU9FOU1EY3Ayd2VpUWhOVFduSS5yb2EwRgYI
KwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRw
L2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwA9xTANBgkqhkiG9w0BAQsFAAOCAQEAY7tz9Ig1lUz6S5hDI9GQid1cCbE1HTyq
mZrijChUocrzyhJyKMtgu+HdGid5SyxIL5YP9xKZuiRGl8RCRxK/Xjr5ij/yeIcO
GlI9lJyPfcS3PR4xdeva2jYnS6sQp8LetY1tazoKf9EX831BXOerOBdVmO41TOqY
gc8UxyPtXMfY2Wmxtl4m+nZgTmr2r6r6dCFa8CTx9W8LIkqxUWlrsQNK48TizxT6
FtWwPlgNnZwts8bWVf7NU1JGdxnodrN9F1g9r3WU2VMCjKnhxpnmt8C/GtpR57E2
3S4nQy4zfoScB8kRW/39vB5KYfyOJgq9Ya44T6My3nWWANFqQkdNSA==
-----END CERTIFICATE-----
Generated at Sat Jul 5 06:10:59 2025 by rpki-client