Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/6UIHd31-B4-P60mnLlhxhdss_h4.roa
File:                     6UIHd31-B4-P60mnLlhxhdss_h4.roa (raw, json)
Hash identifier:          YrwqhGiouxpzZ9FDpmKmHKwLt9pTp44Dah6IB9tuwKU=
Subject key identifier:   E9:42:07:77:7D:7E:07:8F:8F:EB:49:A7:2E:58:71:85:DB:2C:FE:1E
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       01CD
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/6UIHd31-B4-P60mnLlhxhdss_h4.roa
Signing time:             Tue 01 Jul 2025 01:42:24 +0000
ROA not before:           Tue 01 Jul 2025 01:42:24 +0000
ROA not after:            Mon 15 Jun 2026 01:30:02 +0000
asID:                     2497
IP address blocks:        61.211.96.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 461 (0x1cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Jul  1 01:42:24 2025 GMT
            Not After : Jun 15 01:30:02 2026 GMT
        Subject: CN=E94207777D7E078F8FEB49A72E587185DB2CFE1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:25:5e:d4:8b:33:d0:1f:9c:ef:90:85:49:14:
                    1b:f2:ac:0c:1d:b6:57:98:28:d1:23:82:ca:6d:75:
                    29:6a:2b:f3:92:be:18:e1:50:28:94:aa:68:b4:1b:
                    f5:84:98:f3:1d:80:17:ab:f0:85:b7:be:fb:b4:91:
                    62:ae:73:e6:99:7c:e1:40:77:99:e6:f8:2c:23:ef:
                    ce:a5:40:0c:ce:48:3b:82:a0:b5:6d:0b:41:6b:5a:
                    b6:92:81:7b:24:02:b9:ca:b5:b8:92:44:18:1e:38:
                    66:d2:06:c7:28:b2:15:3e:0a:88:11:1e:e3:6a:a7:
                    e2:96:14:7c:a2:88:4e:e6:63:37:12:f2:ca:0d:82:
                    7d:1c:21:da:44:07:af:39:4e:00:f8:18:87:5e:b8:
                    30:f5:90:d4:53:04:b0:77:77:24:03:fe:8c:d9:7e:
                    2d:2f:bc:96:94:1d:d6:13:db:b4:c0:6f:a5:18:33:
                    f0:38:b8:53:99:30:cc:82:de:95:11:84:47:0c:85:
                    7c:1a:1a:a3:47:e0:f2:bd:70:40:84:2e:66:d9:f7:
                    fd:ea:17:78:26:6b:7e:8c:5e:21:6f:46:1e:54:08:
                    5c:ba:63:d5:6d:5f:ae:98:59:9a:72:98:48:37:31:
                    29:8c:39:b0:64:84:c2:94:1e:8f:62:d9:78:9d:ae:
                    1b:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:42:07:77:7D:7E:07:8F:8F:EB:49:A7:2E:58:71:85:DB:2C:FE:1E
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/6UIHd31-B4-P60mnLlhxhdss_h4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.211.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         83:52:39:20:32:33:40:cb:b1:38:d2:8d:af:8c:dd:5b:55:4d:
         1c:0b:53:22:cf:2c:72:d2:ef:d8:35:56:e6:02:6a:99:e2:b5:
         94:06:af:0e:31:6b:28:f0:4d:7a:26:58:92:13:bc:78:4d:78:
         ea:e0:d0:cc:68:ae:da:ac:38:4c:30:5f:0b:4e:77:b6:3c:c7:
         3b:4d:f0:9c:db:c0:16:8e:e2:69:09:1a:37:0e:64:a8:8c:3a:
         e1:94:27:d7:c4:7a:b8:ec:d9:7c:4c:da:21:90:d3:91:9f:34:
         d1:8d:99:92:c5:72:9f:4f:6c:de:1e:a3:b8:39:51:2b:85:74:
         de:de:49:4e:dd:af:ca:65:af:7b:60:ad:50:38:f6:6d:80:1c:
         a8:63:d2:9a:08:6c:06:85:85:c9:05:47:fd:02:a6:3c:93:5d:
         14:76:0c:21:f5:7d:43:8d:74:21:6e:16:f5:75:37:d9:84:5b:
         49:67:43:0e:0a:b4:f4:c4:2a:d8:1b:30:aa:1c:16:6c:33:5d:
         c8:22:00:b6:02:ac:25:d5:50:f0:bf:50:dc:a6:22:72:7d:ad:
         e1:d7:df:da:24:d7:04:d2:db:f1:c2:53:f7:09:fe:09:5f:37:
         9d:0e:89:8c:99:7c:b9:bc:a6:9e:fe:fb:8c:9f:19:72:60:d4:
         ef:36:c2:3c
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgICAc0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjk4
M0NGRDVGOENBRkEwMDY4RDJFQkEyNUVEMEY3MDEyNDRCMTJGOTAeFw0yNTA3MDEw
MTQyMjRaFw0yNjA2MTUwMTMwMDJaMDMxMTAvBgNVBAMTKEU5NDIwNzc3N0Q3RTA3
OEY4RkVCNDlBNzJFNTg3MTg1REIyQ0ZFMUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDgJV7UizPQH5zvkIVJFBvyrAwdtleYKNEjgsptdSlqK/OSvhjh
UCiUqmi0G/WEmPMdgBer8IW3vvu0kWKuc+aZfOFAd5nm+Cwj786lQAzOSDuCoLVt
C0FrWraSgXskArnKtbiSRBgeOGbSBscoshU+CogRHuNqp+KWFHyiiE7mYzcS8soN
gn0cIdpEB685TgD4GIdeuDD1kNRTBLB3dyQD/ozZfi0vvJaUHdYT27TAb6UYM/A4
uFOZMMyC3pURhEcMhXwaGqNH4PK9cECELmbZ9/3qF3gma36MXiFvRh5UCFy6Y9Vt
X66YWZpymEg3MSmMObBkhMKUHo9i2XidrhttAgMBAAGjggIgMIICHDAdBgNVHQ4E
FgQU6UIHd31+B4+P60mnLlhxhdss/h4wHwYDVR0jBBgwFoAUKYPP1fjK+gBo0uui
XtD3ASRLEvkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBkBgNVHR8EXTBbMFmg
V6BVhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzYvS1lQUDFmakstZ0JvMHV1aVh0RDNBU1JMRXZrLmNybDBtBggrBgEF
BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p
Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvS1lQUDFmakstZ0JvMHV1aVh0RDNBU1JM
RXZrLmNlcjAOBgNVHQ8BAf8EBAMCB4AwgbkGCCsGAQUFBwELBIGsMIGpMF8GCCsG
AQUFBzALhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzYvNlVJSGQzMS1CNC1QNjBtbkxsaHhoZHNzX2g0LnJvYTBGBggr
BgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3JyZHAv
YXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
BT3TYDANBgkqhkiG9w0BAQsFAAOCAQEAg1I5IDIzQMuxONKNr4zdW1VNHAtTIs8s
ctLv2DVW5gJqmeK1lAavDjFrKPBNeiZYkhO8eE146uDQzGiu2qw4TDBfC053tjzH
O03wnNvAFo7iaQkaNw5kqIw64ZQn18R6uOzZfEzaIZDTkZ800Y2ZksVyn09s3h6j
uDlRK4V03t5JTt2vymWve2CtUDj2bYAcqGPSmghsBoWFyQVH/QKmPJNdFHYMIfV9
Q410IW4W9XU32YRbSWdDDgq09MQq2BswqhwWbDNdyCIAtgKsJdVQ8L9Q3KYicn2t
4dff2iTXBNLb8cJT9wn+CV83nQ6JjJl8ubymnv77jJ8ZcmDU7zbCPA==
-----END CERTIFICATE-----
Generated at Thu Jul 3 18:45:27 2025 by rpki-client