Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/WgzDtJSV346yiLL3Saso8mkCq9U.roa
File:                     WgzDtJSV346yiLL3Saso8mkCq9U.roa (raw, json)
Hash identifier:          lVZ/GOqvbmqB/mJH9rc7VPsskyPJFpG7xE/Q/V+M+74=
Subject key identifier:   5A:0C:C3:B4:94:95:DF:8E:B2:88:B2:F7:49:AB:28:F2:69:02:AB:D5
Certificate issuer:       /CN=06FA662194FCF1EB983AB44CC913004180770D18
Certificate serial:       7B
Authority key identifier: 06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/WgzDtJSV346yiLL3Saso8mkCq9U.roa
Signing time:             Tue 01 Jul 2025 01:37:19 +0000
ROA not before:           Tue 01 Jul 2025 01:37:19 +0000
ROA not after:            Mon 15 Jun 2026 01:30:02 +0000
asID:                     2514
IP address blocks:        202.229.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123 (0x7b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06FA662194FCF1EB983AB44CC913004180770D18
        Validity
            Not Before: Jul  1 01:37:19 2025 GMT
            Not After : Jun 15 01:30:02 2026 GMT
        Subject: CN=5A0CC3B49495DF8EB288B2F749AB28F26902ABD5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:00:77:21:f8:a2:03:33:1f:9b:dd:c1:1c:8a:
                    f2:1d:8c:dc:50:f1:38:f6:19:14:5e:a8:bc:de:83:
                    76:03:6c:48:64:e2:95:cc:c5:2b:9a:18:1b:f1:91:
                    8a:e2:ce:73:62:d3:0c:f0:50:c4:ac:4e:0e:37:d0:
                    fe:59:5b:6c:0d:c3:82:97:c7:9d:e3:14:e9:42:85:
                    b8:92:2a:66:c5:ba:38:79:b0:1c:24:ff:fd:07:d0:
                    05:82:95:79:a6:df:55:1c:e1:76:0c:95:1b:9f:2b:
                    a1:8a:d5:44:17:99:bb:ca:34:a7:eb:a7:fc:29:93:
                    22:86:80:86:ba:5a:c1:2f:2e:6e:48:47:8a:7c:fb:
                    87:26:d1:d2:12:78:76:f2:ca:47:77:d2:91:f1:6d:
                    00:a3:eb:50:a8:6a:2b:b5:ee:02:42:44:b8:7a:91:
                    df:0f:41:ce:b6:f8:3e:97:ff:a1:3b:61:c0:7e:20:
                    f7:a2:8f:b3:6b:52:91:1e:24:f4:59:1c:d5:f2:5e:
                    a7:93:ec:e8:cf:2a:ad:05:87:97:d5:3e:d0:63:57:
                    95:55:9c:af:16:ac:cd:f4:98:2d:56:d4:ac:89:e3:
                    5b:b0:d4:c7:f8:bc:00:50:78:16:a2:bd:df:ae:a1:
                    d4:c2:6c:14:1d:4b:79:78:03:3c:f7:31:a1:4e:13:
                    39:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:0C:C3:B4:94:95:DF:8E:B2:88:B2:F7:49:AB:28:F2:69:02:AB:D5
            X509v3 Authority Key Identifier:
                keyid:06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/WgzDtJSV346yiLL3Saso8mkCq9U.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.229.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         a1:fe:37:23:17:86:95:97:bf:6b:6c:49:fc:ba:cb:49:28:13:
         99:76:32:24:87:3d:89:51:51:a9:7e:b5:17:76:aa:60:1f:13:
         2c:c4:09:66:87:17:ef:02:ff:a7:cb:fa:9a:90:bb:68:19:ca:
         d8:67:47:97:68:57:d5:9f:9b:e8:92:bb:17:a8:8b:20:8e:54:
         18:f6:e5:5b:74:31:b7:6c:83:73:56:bf:58:08:37:dc:a5:0f:
         28:41:e0:4f:4e:b0:69:ed:cc:22:d0:ca:bf:89:36:f3:03:74:
         60:ed:77:e0:54:c0:49:69:b0:7c:f7:3d:2d:4a:8d:e3:93:80:
         44:e1:13:34:de:8b:cc:ed:14:d6:3b:e4:fb:91:b8:bf:a1:cd:
         92:c7:eb:45:95:9f:6e:09:2c:4f:58:60:3a:41:65:aa:83:9d:
         6a:4a:e7:a7:54:73:ee:95:dd:18:c7:15:df:ec:b2:a9:45:0d:
         33:9d:06:53:9f:3a:4a:24:60:dd:ce:b5:e5:f8:e4:10:bd:6e:
         a7:1e:31:a7:0c:4a:51:2b:15:42:45:c4:bd:c7:fb:dc:ec:3e:
         50:bd:fd:37:93:71:3a:4f:a5:5e:fc:d4:ab:81:40:6b:ab:ea:
         0e:7c:bf:32:92:5d:2d:b3:b1:d6:e9:53:e7:e1:0e:45:20:eb:
         49:63:a4:14
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgIBezANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygwNkZB
NjYyMTk0RkNGMUVCOTgzQUI0NENDOTEzMDA0MTgwNzcwRDE4MB4XDTI1MDcwMTAx
MzcxOVoXDTI2MDYxNTAxMzAwMlowMzExMC8GA1UEAxMoNUEwQ0MzQjQ5NDk1REY4
RUIyODhCMkY3NDlBQjI4RjI2OTAyQUJENTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMAAdyH4ogMzH5vdwRyK8h2M3FDxOPYZFF6ovN6DdgNsSGTilczF
K5oYG/GRiuLOc2LTDPBQxKxODjfQ/llbbA3DgpfHneMU6UKFuJIqZsW6OHmwHCT/
/QfQBYKVeabfVRzhdgyVG58roYrVRBeZu8o0p+un/CmTIoaAhrpawS8ubkhHinz7
hybR0hJ4dvLKR3fSkfFtAKPrUKhqK7XuAkJEuHqR3w9Bzrb4Ppf/oTthwH4g96KP
s2tSkR4k9Fkc1fJep5Ps6M8qrQWHl9U+0GNXlVWcrxaszfSYLVbUrInjW7DUx/i8
AFB4FqK9366h1MJsFB1LeXgDPPcxoU4TOfcCAwEAAaOCAiEwggIdMB0GA1UdDgQW
BBRaDMO0lJXfjrKIsvdJqyjyaQKr1TAfBgNVHSMEGDAWgBQG+mYhlPzx65g6tEzJ
EwBBgHcNGDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGUGA1UdHwReMFwwWqBY
oFaGVHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjkvQnZwbUlaVDg4ZXVZT3JSTXlSTUFRWUIzRFJnLmNybDBtBggrBgEF
BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p
Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvQnZwbUlaVDg4ZXVZT3JSTXlSTUFRWUIz
RFJnLmNlcjAOBgNVHQ8BAf8EBAMCB4AwgboGCCsGAQUFBwELBIGtMIGqMGAGCCsG
AQUFBzALhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzI5L1dnekR0SlNWMzQ2eWlMTDNTYXNvOG1rQ3E5VS5yb2EwRgYI
KwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRw
L2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwDK5TANBgkqhkiG9w0BAQsFAAOCAQEAof43IxeGlZe/a2xJ/LrLSSgTmXYyJIc9
iVFRqX61F3aqYB8TLMQJZocX7wL/p8v6mpC7aBnK2GdHl2hX1Z+b6JK7F6iLII5U
GPblW3Qxt2yDc1a/WAg33KUPKEHgT06wae3MItDKv4k28wN0YO134FTASWmwfPc9
LUqN45OAROETNN6LzO0U1jvk+5G4v6HNksfrRZWfbgksT1hgOkFlqoOdakrnp1Rz
7pXdGMcV3+yyqUUNM50GU586SiRg3c615fjkEL1upx4xpwxKUSsVQkXEvcf73Ow+
UL39N5NxOk+lXvzUq4FAa6vqDny/MpJdLbOx1ulT5+EORSDrSWOkFA==
-----END CERTIFICATE-----
Generated at Sat Jul 5 08:40:59 2025 by rpki-client