Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1164/PSs_iPdv0kB0TeFZmmj4fb85VF0.roa
File:                     PSs_iPdv0kB0TeFZmmj4fb85VF0.roa (raw, json)
Hash identifier:          0W2n2b/omfEsy+JDCEJZ434/12q+gkCQTcWppdFIZUY=
Subject key identifier:   3D:2B:3F:88:F7:6F:D2:40:74:4D:E1:59:9A:68:F8:7D:BF:39:54:5D
Certificate issuer:       /CN=12301D400962DD987A3C7B83A3366287D47F86FD
Certificate serial:       02
Authority key identifier: 12:30:1D:40:09:62:DD:98:7A:3C:7B:83:A3:36:62:87:D4:7F:86:FD
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EjAdQAli3Zh6PHuDozZih9R_hv0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1164/PSs_iPdv0kB0TeFZmmj4fb85VF0.roa
Signing time:             Mon 07 Jul 2025 04:19:02 +0000
ROA not before:           Mon 07 Jul 2025 04:19:02 +0000
ROA not after:            Tue 07 Jul 2026 04:03:54 +0000
asID:                     15830
IP address blocks:        150.3.116.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1164/EjAdQAli3Zh6PHuDozZih9R_hv0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1164/EjAdQAli3Zh6PHuDozZih9R_hv0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EjAdQAli3Zh6PHuDozZih9R_hv0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Jul 2025 07:04:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12301D400962DD987A3C7B83A3366287D47F86FD
        Validity
            Not Before: Jul  7 04:19:02 2025 GMT
            Not After : Jul  7 04:03:54 2026 GMT
        Subject: CN=3D2B3F88F76FD240744DE1599A68F87DBF39545D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:34:58:6a:33:0c:b5:f8:5e:e4:b4:8f:52:4f:
                    a3:50:6b:b9:d8:32:49:ab:bc:4d:f7:6e:a7:1b:87:
                    50:fb:a8:0f:b8:2c:bc:9a:98:f8:3f:c5:e1:6a:b7:
                    8b:74:59:48:92:89:85:eb:57:8c:ee:44:d3:99:b6:
                    77:d6:c3:8e:aa:81:2c:c9:0d:ab:ad:4a:eb:5a:2d:
                    c4:a1:97:35:51:71:da:a8:8a:a9:e3:86:e6:8d:1f:
                    4b:10:8d:59:db:8f:84:27:04:c7:87:b3:42:62:4c:
                    b5:1f:3d:aa:08:3f:27:ba:fe:05:a3:b4:d5:63:61:
                    5f:3a:23:28:66:04:28:6a:e3:a8:21:27:b3:4a:2e:
                    9f:4a:9e:f9:9a:be:cd:80:0b:1f:ba:e5:e7:ee:f5:
                    36:35:16:b9:e0:26:12:e0:f8:02:d5:1e:f1:6a:c6:
                    04:57:80:99:19:57:39:17:97:b6:cd:e9:6b:1b:00:
                    7c:43:e9:b2:98:07:34:3f:24:c2:22:fd:f5:9d:67:
                    13:1b:48:7e:8b:9e:10:b9:06:cc:06:0f:35:4a:bf:
                    ea:3f:b1:01:41:4f:5a:7c:1d:b4:d7:23:ee:74:97:
                    b6:4d:43:7c:52:73:c3:03:98:d8:e8:47:2b:b9:9f:
                    5a:1f:94:49:7a:03:a9:8e:9b:0d:84:ae:94:35:1c:
                    2a:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:2B:3F:88:F7:6F:D2:40:74:4D:E1:59:9A:68:F8:7D:BF:39:54:5D
            X509v3 Authority Key Identifier:
                keyid:12:30:1D:40:09:62:DD:98:7A:3C:7B:83:A3:36:62:87:D4:7F:86:FD

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1164/EjAdQAli3Zh6PHuDozZih9R_hv0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EjAdQAli3Zh6PHuDozZih9R_hv0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1164/PSs_iPdv0kB0TeFZmmj4fb85VF0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.3.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         88:22:4c:10:b1:35:da:c2:bf:f0:b0:19:4a:2e:e8:60:46:52:
         6a:ec:e8:f0:be:4a:d4:99:ac:bd:1f:01:c8:09:81:0b:ee:23:
         c4:90:aa:b2:04:4c:04:83:ee:39:c3:1a:42:a0:2f:3d:ae:43:
         64:52:eb:f8:62:dc:7f:8f:08:09:43:dd:4f:e3:68:81:cd:81:
         0f:74:77:53:a7:49:e1:46:ec:a4:fe:15:a8:0c:42:7c:94:9e:
         58:69:63:39:df:43:19:3f:1a:a6:71:55:de:ef:23:c3:c6:0c:
         99:d9:54:87:cb:2a:80:04:d2:3c:df:52:80:7a:f2:47:98:40:
         d1:47:77:94:ea:fc:52:38:d7:b8:22:7f:7b:e7:20:4e:37:b9:
         a8:4c:a0:7e:79:06:1d:01:20:76:bc:c6:39:9d:b7:53:5d:40:
         57:52:69:c1:fd:cf:9d:62:26:7d:f4:88:e6:01:0f:7b:20:7a:
         6d:63:ab:fa:15:f6:bc:59:c3:3e:01:df:fa:c2:8b:28:fa:9d:
         17:d8:09:a1:a3:b2:82:a1:1d:cc:e0:05:1b:c5:28:12:ce:43:
         7a:07:a0:b3:59:14:96:38:8b:93:42:86:9b:f7:0c:f1:1c:5b:
         ad:f2:da:ae:3b:91:0e:10:d4:61:d1:c5:04:16:1f:38:19:04:
         46:49:0d:ad
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgIBAjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxMjMw
MUQ0MDA5NjJERDk4N0EzQzdCODNBMzM2NjI4N0Q0N0Y4NkZEMB4XDTI1MDcwNzA0
MTkwMloXDTI2MDcwNzA0MDM1NFowMzExMC8GA1UEAxMoM0QyQjNGODhGNzZGRDI0
MDc0NERFMTU5OUE2OEY4N0RCRjM5NTQ1RDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKo0WGozDLX4XuS0j1JPo1BrudgySau8TfdupxuHUPuoD7gsvJqY
+D/F4Wq3i3RZSJKJhetXjO5E05m2d9bDjqqBLMkNq61K61otxKGXNVFx2qiKqeOG
5o0fSxCNWduPhCcEx4ezQmJMtR89qgg/J7r+BaO01WNhXzojKGYEKGrjqCEns0ou
n0qe+Zq+zYALH7rl5+71NjUWueAmEuD4AtUe8WrGBFeAmRlXOReXts3paxsAfEPp
spgHND8kwiL99Z1nExtIfoueELkGzAYPNUq/6j+xAUFPWnwdtNcj7nSXtk1DfFJz
wwOY2OhHK7mfWh+USXoDqY6bDYSulDUcKncCAwEAAaOCAiYwggIiMB0GA1UdDgQW
BBQ9Kz+I92/SQHRN4VmaaPh9vzlUXTAfBgNVHSMEGDAWgBQSMB1ACWLdmHo8e4Oj
NmKH1H+G/TAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa
oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMTE2NC9FakFkUUFsaTNaaDZQSHVEb3paaWg5Ul9odjAuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9FakFkUUFsaTNaaDZQSHVEb3paaWg5
Ul9odjAuY2VyMA4GA1UdDwEB/wQEAwIHgDCBvAYIKwYBBQUHAQsEga8wgawwYgYI
KwYBBQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTE2NC9QU3NfaVBkdjBrQjBUZUZabW1qNGZiODVWRjAucm9h
MEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAv
cnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA
ATAGAwQClgN0MA0GCSqGSIb3DQEBCwUAA4IBAQCIIkwQsTXawr/wsBlKLuhgRlJq
7OjwvkrUmay9HwHICYEL7iPEkKqyBEwEg+45wxpCoC89rkNkUuv4Ytx/jwgJQ91P
42iBzYEPdHdTp0nhRuyk/hWoDEJ8lJ5YaWM530MZPxqmcVXe7yPDxgyZ2VSHyyqA
BNI831KAevJHmEDRR3eU6vxSONe4In975yBON7moTKB+eQYdASB2vMY5nbdTXUBX
UmnB/c+dYiZ99IjmAQ97IHptY6v6Ffa8WcM+Ad/6woso+p0X2Amho7KCoR3M4AUb
xSgSzkN6B6CzWRSWOIuTQoab9wzxHFut8tquO5EOENRh0cUEFh84GQRGSQ2t
-----END CERTIFICATE-----
Generated at Mon Jul 21 09:09:44 2025 by rpki-client