Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/-3A-mVGI_yU2zMapCthWdyWd8HA.roa
File:                     -3A-mVGI_yU2zMapCthWdyWd8HA.roa (raw, json)
Hash identifier:          Xt8wb/YeOP+Mnx0T18mhjNb8MuBZj/Ng1j3FqhtRARw=
Subject key identifier:   FB:70:3E:99:51:88:FF:25:36:CC:C6:A9:0A:D8:56:77:25:9D:F0:70
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0ED0
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-3A-mVGI_yU2zMapCthWdyWd8HA.roa
Signing time:             Tue 10 Jun 2025 11:09:09 +0000
ROA not before:           Tue 10 Jun 2025 11:09:09 +0000
ROA not after:            Sat 23 May 2026 09:51:00 +0000
asID:                     9605
IP address blocks:        183.75.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3792 (0xed0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun 10 11:09:09 2025 GMT
            Not After : May 23 09:51:00 2026 GMT
        Subject: CN=FB703E995188FF2536CCC6A90AD85677259DF070
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:a7:6c:45:20:e2:07:aa:78:25:9f:36:41:9c:
                    97:77:80:66:d7:69:17:41:61:5e:25:df:01:4f:7e:
                    02:22:c7:c5:7e:7b:72:3b:f4:4b:66:2d:cb:00:93:
                    0a:4c:11:cc:cf:d4:97:a6:0b:c3:21:0d:ea:5b:09:
                    7a:74:06:eb:7d:44:85:52:dd:7f:6f:2e:a2:48:8e:
                    8e:d1:23:b8:12:a0:5e:ae:ab:cc:ae:5a:4a:7d:69:
                    52:bb:1f:bc:ed:73:c1:d1:62:e3:79:9e:ee:2b:ca:
                    d0:71:a4:10:24:70:af:7c:b5:62:ab:6c:d5:35:67:
                    4e:b5:0d:8a:1d:a4:cd:2a:b8:d8:e9:f0:ae:a6:a1:
                    8a:73:1e:09:43:67:f1:86:4f:21:e5:bb:48:de:9f:
                    4e:c3:f4:38:88:b8:a9:fd:b3:08:2d:d8:d4:e7:15:
                    93:c4:1e:91:e4:fd:60:ed:11:7c:d1:76:a4:a2:ef:
                    32:90:26:6d:de:d3:5a:3a:9c:d6:94:f7:ae:04:42:
                    f1:7e:55:17:00:8f:c1:25:6a:71:81:66:db:e1:0d:
                    93:07:95:59:cc:53:35:3a:6c:b6:af:00:e4:35:e4:
                    af:1d:84:1c:b7:91:ea:b1:8e:35:8b:7e:da:df:ca:
                    e0:6c:5c:fa:85:e1:f3:e9:23:fc:df:a7:0e:37:6b:
                    02:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:70:3E:99:51:88:FF:25:36:CC:C6:A9:0A:D8:56:77:25:9D:F0:70
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-3A-mVGI_yU2zMapCthWdyWd8HA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.75.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         55:79:e4:05:a5:a0:d4:f1:03:fb:57:fc:6f:d1:54:70:90:b6:
         e8:8d:ed:a8:08:38:f7:17:49:71:65:07:12:4c:cf:93:03:d2:
         02:5e:63:ae:bd:f2:9e:af:c4:db:c1:c1:65:cb:ab:ea:50:bd:
         94:43:83:b6:e2:da:52:c3:2d:15:67:6f:e1:44:17:90:ff:1f:
         ad:f8:99:46:de:19:6a:68:54:04:c2:6f:d9:ef:46:cb:8f:a9:
         51:61:88:e1:aa:7c:db:49:29:26:b0:0a:8f:2b:15:e0:7d:39:
         e8:26:d4:86:8a:d5:19:4e:37:0b:e2:96:ab:f1:73:7c:e7:37:
         48:0b:43:65:9b:10:da:91:a6:ed:28:77:97:26:2d:95:32:70:
         45:3c:25:2d:49:e7:f0:4c:d6:dd:8e:f9:7d:d1:f7:53:41:65:
         c2:56:e9:3e:fc:f2:92:6a:e1:e0:ca:3b:3a:61:22:9f:02:85:
         8a:03:eb:8e:e6:90:a2:e5:9a:18:b8:d5:19:70:7c:3e:f1:51:
         d3:14:94:20:cf:43:88:13:4f:ca:7c:8b:c1:1b:09:09:9e:fa:
         05:e1:50:59:e9:bf:78:31:58:0e:76:63:25:41:c6:9b:fa:49:
         ad:9a:55:fb:a7:12:a2:29:37:d0:0f:16:31:3d:31:85:8b:60:
         59:69:b5:e3
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICDtAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx
MTA5MDlaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKEZCNzAzRTk5NTE4OEZG
MjUzNkNDQzZBOTBBRDg1Njc3MjU5REYwNzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDRp2xFIOIHqnglnzZBnJd3gGbXaRdBYV4l3wFPfgIix8V+e3I7
9EtmLcsAkwpMEczP1JemC8MhDepbCXp0But9RIVS3X9vLqJIjo7RI7gSoF6uq8yu
Wkp9aVK7H7ztc8HRYuN5nu4rytBxpBAkcK98tWKrbNU1Z061DYodpM0quNjp8K6m
oYpzHglDZ/GGTyHlu0jen07D9DiIuKn9swgt2NTnFZPEHpHk/WDtEXzRdqSi7zKQ
Jm3e01o6nNaU964EQvF+VRcAj8ElanGBZtvhDZMHlVnMUzU6bLavAOQ15K8dhBy3
keqxjjWLftrfyuBsXPqF4fPpI/zfpw43awKLAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQU+3A+mVGI/yU2zMapCthWdyWd8HAwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5Ly0zQS1tVkdJX3lVMnpNYXBDdGhXZHlXZDhIQS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAa3SwAwDQYJKoZIhvcNAQELBQADggEBAFV55AWloNTxA/tX/G/RVHCQtuiN
7agIOPcXSXFlBxJMz5MD0gJeY6698p6vxNvBwWXLq+pQvZRDg7bi2lLDLRVnb+FE
F5D/H634mUbeGWpoVATCb9nvRsuPqVFhiOGqfNtJKSawCo8rFeB9Oegm1IaK1RlO
Nwvilqvxc3znN0gLQ2WbENqRpu0od5cmLZUycEU8JS1J5/BM1t2O+X3R91NBZcJW
6T788pJq4eDKOzphIp8ChYoD647mkKLlmhi41RlwfD7xUdMUlCDPQ4gTT8p8i8Eb
CQme+gXhUFnpv3gxWA52YyVBxpv6Sa2aVfunEqIpN9APFjE9MYWLYFlpteM=
-----END CERTIFICATE-----
Generated at Thu Jul 3 18:42:45 2025 by rpki-client