Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/446/x_w_Pg3m3Z6zt07FwaLcrqfZD8I.roa
File:                     x_w_Pg3m3Z6zt07FwaLcrqfZD8I.roa (raw, json)
Hash identifier:          eESA5sO1qqCL2Wr6iilSE4L1SEzlohcgslhXpmH2seg=
Subject key identifier:   C7:FC:3F:3E:0D:E6:DD:9E:B3:B7:4E:C5:C1:A2:DC:AE:A7:D9:0F:C2
Certificate issuer:       /CN=93E00C1B18C6955EA04130329544B1F09BFCBFCA
Certificate serial:       39
Authority key identifier: 93:E0:0C:1B:18:C6:95:5E:A0:41:30:32:95:44:B1:F0:9B:FC:BF:CA
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/k-AMGxjGlV6gQTAylUSx8Jv8v8o.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/446/x_w_Pg3m3Z6zt07FwaLcrqfZD8I.roa
Signing time:             Tue 01 Jul 2025 01:31:28 +0000
ROA not before:           Tue 01 Jul 2025 01:31:28 +0000
ROA not after:            Mon 15 Jun 2026 01:30:02 +0000
asID:                     9997
IP address blocks:        218.226.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/446/k-AMGxjGlV6gQTAylUSx8Jv8v8o.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/446/k-AMGxjGlV6gQTAylUSx8Jv8v8o.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/k-AMGxjGlV6gQTAylUSx8Jv8v8o.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 57 (0x39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93E00C1B18C6955EA04130329544B1F09BFCBFCA
        Validity
            Not Before: Jul  1 01:31:28 2025 GMT
            Not After : Jun 15 01:30:02 2026 GMT
        Subject: CN=C7FC3F3E0DE6DD9EB3B74EC5C1A2DCAEA7D90FC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:07:04:85:49:bf:99:26:52:4f:ca:50:44:0a:
                    88:e8:79:7f:25:bc:23:90:80:e9:7f:70:0a:2f:8c:
                    63:10:93:f9:30:41:64:87:9b:73:36:35:0d:05:72:
                    60:b2:c9:88:99:1e:fe:e6:a9:9e:08:0c:f4:29:97:
                    7a:0e:45:43:eb:0e:0d:bb:7d:0f:2c:74:ed:84:2a:
                    35:23:e0:e1:2a:c6:eb:67:25:3c:80:44:c6:85:2b:
                    74:d5:f1:23:5d:5c:88:30:16:4b:a2:84:1c:6a:0f:
                    48:5d:99:fe:0d:a8:b2:27:da:74:12:5a:b0:40:06:
                    a2:11:0d:dc:27:76:b4:df:ca:19:19:e8:85:29:72:
                    2e:6f:22:9e:41:42:27:29:47:a9:0b:aa:d9:bd:a9:
                    85:c9:fd:ae:26:2e:b0:71:a1:32:58:f0:28:3d:05:
                    9a:e1:c4:c3:e7:bb:6b:c4:ad:30:e1:9e:14:83:87:
                    ca:b6:9f:b1:0a:f9:28:b7:36:82:cb:ff:46:2b:45:
                    36:ed:77:32:96:8b:70:87:dd:f3:d3:61:aa:a9:e2:
                    45:58:db:ae:fa:66:9e:e0:51:a4:41:29:b9:61:7b:
                    ee:38:22:06:98:f5:e0:b0:da:1c:fd:e6:c3:44:1a:
                    c6:1b:ad:54:95:c8:5a:4a:b8:80:4a:eb:ef:71:29:
                    70:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:FC:3F:3E:0D:E6:DD:9E:B3:B7:4E:C5:C1:A2:DC:AE:A7:D9:0F:C2
            X509v3 Authority Key Identifier:
                keyid:93:E0:0C:1B:18:C6:95:5E:A0:41:30:32:95:44:B1:F0:9B:FC:BF:CA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/446/k-AMGxjGlV6gQTAylUSx8Jv8v8o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/k-AMGxjGlV6gQTAylUSx8Jv8v8o.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/446/x_w_Pg3m3Z6zt07FwaLcrqfZD8I.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.226.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         3e:b7:2c:19:25:cf:bf:45:81:62:73:de:b9:db:9b:d4:26:bf:
         90:31:2f:47:26:09:f6:a0:bb:ed:c4:f6:17:51:23:14:83:f0:
         c9:35:ae:26:10:56:3b:03:84:a9:3b:39:4e:e0:40:6e:18:91:
         59:68:f8:b7:e2:ae:c5:11:18:09:aa:1b:19:38:60:e8:b5:c4:
         6a:2e:6d:ee:66:66:6d:31:16:a1:7e:b3:fb:ca:57:9f:32:25:
         2d:5d:ce:f3:53:bf:cb:c8:15:71:db:e1:7d:39:41:bc:e3:a2:
         eb:0b:a1:60:a7:7f:34:6f:15:a3:da:bb:b4:22:aa:a6:11:e3:
         dd:4d:88:ce:09:35:6d:99:61:97:11:06:a8:ae:45:22:29:72:
         68:1a:46:25:0b:fb:4e:df:9b:ab:9e:9e:2f:2c:ea:0d:45:00:
         88:4e:81:08:2e:9d:0b:5d:f6:cf:37:14:db:51:96:2d:ba:02:
         bd:41:b6:12:62:eb:76:1e:fd:52:89:4c:47:7b:17:b5:65:b7:
         b9:6c:7c:2d:3b:35:ee:b5:fa:25:a6:26:50:ee:7c:c5:b7:a1:
         39:17:1b:2f:46:3b:79:b3:94:a6:0c:4f:5d:f2:a1:33:8a:35:
         cb:5e:ab:4c:a5:e1:37:2e:02:00:ad:5c:24:85:36:bc:75:3e:
         84:cf:c7:40
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgIBOTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5M0Uw
MEMxQjE4QzY5NTVFQTA0MTMwMzI5NTQ0QjFGMDlCRkNCRkNBMB4XDTI1MDcwMTAx
MzEyOFoXDTI2MDYxNTAxMzAwMlowMzExMC8GA1UEAxMoQzdGQzNGM0UwREU2REQ5
RUIzQjc0RUM1QzFBMkRDQUVBN0Q5MEZDMjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANIHBIVJv5kmUk/KUEQKiOh5fyW8I5CA6X9wCi+MYxCT+TBBZIeb
czY1DQVyYLLJiJke/uapnggM9CmXeg5FQ+sODbt9Dyx07YQqNSPg4SrG62clPIBE
xoUrdNXxI11ciDAWS6KEHGoPSF2Z/g2osifadBJasEAGohEN3Cd2tN/KGRnohSly
Lm8inkFCJylHqQuq2b2phcn9riYusHGhMljwKD0FmuHEw+e7a8StMOGeFIOHyraf
sQr5KLc2gsv/RitFNu13MpaLcIfd89NhqqniRVjbrvpmnuBRpEEpuWF77jgiBpj1
4LDaHP3mw0QaxhutVJXIWkq4gErr73EpcKECAwEAAaOCAiMwggIfMB0GA1UdDgQW
BBTH/D8+DebdnrO3TsXBotyup9kPwjAfBgNVHSMEGDAWgBST4AwbGMaVXqBBMDKV
RLHwm/y/yjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNDQ2L2stQU1HeGpHbFY2Z1FUQXlsVVN4OEp2OHY4by5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2stQU1HeGpHbFY2Z1FUQXlsVVN4OEp2
OHY4by5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC80NDYveF93X1BnM20zWjZ6dDA3RndhTGNycWZaRDhJLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEw
BQMDANriMA0GCSqGSIb3DQEBCwUAA4IBAQA+tywZJc+/RYFic96525vUJr+QMS9H
Jgn2oLvtxPYXUSMUg/DJNa4mEFY7A4SpOzlO4EBuGJFZaPi34q7FERgJqhsZOGDo
tcRqLm3uZmZtMRahfrP7ylefMiUtXc7zU7/LyBVx2+F9OUG846LrC6Fgp380bxWj
2ru0IqqmEePdTYjOCTVtmWGXEQaorkUiKXJoGkYlC/tO35urnp4vLOoNRQCIToEI
Lp0LXfbPNxTbUZYtugK9QbYSYut2Hv1SiUxHexe1Zbe5bHwtOzXutfolpiZQ7nzF
t6E5FxsvRjt5s5SmDE9d8qEzijXLXqtMpeE3LgIArVwkhTa8dT6Ez8dA
-----END CERTIFICATE-----
Generated at Fri Jul 4 23:14:35 2025 by rpki-client