Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1203/tRORnVtjnu4HeRNdtQxZQtSovdQ.roa
File:                     tRORnVtjnu4HeRNdtQxZQtSovdQ.roa (raw, json)
Hash identifier:          BJuu6L7MIBtIuN1mt/ihiXiB8jN2kmoeczleuH+PeEY=
Subject key identifier:   B5:13:91:9D:5B:63:9E:EE:07:79:13:5D:B5:0C:59:42:D4:A8:BD:D4
Certificate issuer:       /CN=85A6C369C1A9C7A52C3E3805727A5FD31185A773
Certificate serial:       17
Authority key identifier: 85:A6:C3:69:C1:A9:C7:A5:2C:3E:38:05:72:7A:5F:D3:11:85:A7:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/habDacGpx6UsPjgFcnpf0xGFp3M.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1203/tRORnVtjnu4HeRNdtQxZQtSovdQ.roa
Signing time:             Thu 24 Jul 2025 02:35:06 +0000
ROA not before:           Thu 24 Jul 2025 02:35:06 +0000
ROA not after:            Wed 15 Jul 2026 01:30:01 +0000
asID:                     4694
IP address blocks:        154.34.64.0/18 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1203/habDacGpx6UsPjgFcnpf0xGFp3M.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1203/habDacGpx6UsPjgFcnpf0xGFp3M.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/habDacGpx6UsPjgFcnpf0xGFp3M.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yMD7hwR0w-hMq4NZfEaoYsR_iII.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yMD7hwR0w-hMq4NZfEaoYsR_iII.mft
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/yMD7hwR0w-hMq4NZfEaoYsR_iII.cer
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 05 Aug 2025 02:50:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 23 (0x17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85A6C369C1A9C7A52C3E3805727A5FD31185A773
        Validity
            Not Before: Jul 24 02:35:06 2025 GMT
            Not After : Jul 15 01:30:01 2026 GMT
        Subject: CN=B513919D5B639EEE0779135DB50C5942D4A8BDD4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:b6:d7:c5:e2:5f:87:60:a3:14:56:b6:18:8a:
                    c2:e0:c4:e2:af:9a:e2:c0:de:88:d2:6d:63:36:31:
                    81:58:fa:d2:0d:65:b6:93:35:0c:aa:f3:86:ef:91:
                    d2:c0:65:ef:c9:0e:01:1d:7c:d6:ac:c7:bb:3c:4e:
                    4d:60:89:a9:e9:4a:e2:98:ca:7f:c9:12:bc:64:a7:
                    cf:d8:cd:5d:2e:bb:5a:34:62:e2:0b:4b:6b:99:25:
                    5e:f1:b5:75:1f:22:44:1a:dc:83:c7:18:f7:3d:6c:
                    5e:6b:2d:db:67:7d:b6:12:ad:27:19:44:30:a7:eb:
                    06:e1:6f:93:46:91:be:b3:9e:8e:c6:90:69:43:94:
                    50:d7:90:e4:de:96:3f:10:19:03:16:5c:97:5c:be:
                    ce:51:55:8a:7c:0c:60:3c:8d:dc:a5:3e:4a:b1:4d:
                    4a:c4:1f:01:c1:71:18:19:1a:c0:b5:e4:02:84:9e:
                    d3:5f:80:bd:f9:66:fe:ec:8f:ce:37:a7:ad:11:e3:
                    f3:c5:43:e6:7c:15:55:18:28:75:61:b3:6e:b2:b4:
                    57:e3:de:fa:94:aa:7e:bb:a0:e4:5b:60:d7:ea:6f:
                    ef:fe:c7:87:79:c7:fc:67:fb:ed:2c:e6:24:e1:ee:
                    1e:03:04:9a:ad:72:64:21:fa:80:56:f3:cf:0c:27:
                    a5:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:13:91:9D:5B:63:9E:EE:07:79:13:5D:B5:0C:59:42:D4:A8:BD:D4
            X509v3 Authority Key Identifier:
                keyid:85:A6:C3:69:C1:A9:C7:A5:2C:3E:38:05:72:7A:5F:D3:11:85:A7:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1203/habDacGpx6UsPjgFcnpf0xGFp3M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/habDacGpx6UsPjgFcnpf0xGFp3M.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1203/tRORnVtjnu4HeRNdtQxZQtSovdQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.34.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         06:bd:ca:ee:37:8f:87:7d:d8:cd:6d:a9:1e:57:b1:a6:40:9d:
         89:57:f5:81:7f:aa:0b:2a:d0:b1:c1:33:f7:b2:7e:1c:7c:07:
         d2:1e:2e:06:58:ec:3c:c6:02:b4:d3:02:49:9e:c5:03:55:94:
         bb:7a:c2:4c:f9:53:8a:a5:9c:93:b2:11:71:c7:07:7e:b0:ba:
         e2:b0:dc:2d:be:45:c0:2e:ef:15:1e:db:1f:3f:d2:8f:8c:ee:
         84:1d:a2:79:e3:67:22:73:23:e9:2d:59:8c:5c:49:ad:54:ac:
         b7:8e:8b:d3:f3:9f:c1:bc:b4:ae:05:f2:56:92:ce:5d:4a:56:
         ff:bf:9f:ab:26:b0:e2:58:d8:48:ae:02:58:3c:5b:1f:1a:87:
         b8:31:a3:3c:5b:c1:75:42:6d:43:85:03:b0:d5:3e:35:84:7f:
         0c:47:97:2f:3d:52:b4:97:a9:2c:1a:13:0f:4e:5e:af:b2:1d:
         31:e0:94:14:10:db:1d:df:90:0a:85:0e:17:5e:89:b9:0b:c3:
         32:9e:ef:0b:64:45:27:b4:83:91:db:f7:c8:d5:10:e2:70:58:
         9b:3d:04:0e:0f:bd:e1:35:6f:1e:86:2e:74:f9:d8:ee:7d:96:
         8a:d2:cd:3c:b1:ff:65:86:b5:48:b6:a9:63:4e:21:f3:37:6a:
         e5:9f:e1:b5
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgIBFzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4NUE2
QzM2OUMxQTlDN0E1MkMzRTM4MDU3MjdBNUZEMzExODVBNzczMB4XDTI1MDcyNDAy
MzUwNloXDTI2MDcxNTAxMzAwMVowMzExMC8GA1UEAxMoQjUxMzkxOUQ1QjYzOUVF
RTA3NzkxMzVEQjUwQzU5NDJENEE4QkRENDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAPC218XiX4dgoxRWthiKwuDE4q+a4sDeiNJtYzYxgVj60g1ltpM1
DKrzhu+R0sBl78kOAR181qzHuzxOTWCJqelK4pjKf8kSvGSnz9jNXS67WjRi4gtL
a5klXvG1dR8iRBrcg8cY9z1sXmst22d9thKtJxlEMKfrBuFvk0aRvrOejsaQaUOU
UNeQ5N6WPxAZAxZcl1y+zlFVinwMYDyN3KU+SrFNSsQfAcFxGBkawLXkAoSe01+A
vflm/uyPzjenrRHj88VD5nwVVRgodWGzbrK0V+Pe+pSqfrug5Ftg1+pv7/7Hh3nH
/Gf77SzmJOHuHgMEmq1yZCH6gFbzzwwnpTUCAwEAAaOCAiYwggIiMB0GA1UdDgQW
BBS1E5GdW2Oe7gd5E121DFlC1Ki91DAfBgNVHSMEGDAWgBSFpsNpwanHpSw+OAVy
el/TEYWnczAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa
oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMTIwMy9oYWJEYWNHcHg2VXNQamdGY25wZjB4R0ZwM00uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9oYWJEYWNHcHg2VXNQamdGY25wZjB4
R0ZwM00uY2VyMA4GA1UdDwEB/wQEAwIHgDCBvAYIKwYBBQUHAQsEga8wgawwYgYI
KwYBBQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTIwMy90Uk9SblZ0am51NEhlUk5kdFF4WlF0U292ZFEucm9h
MEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAv
cnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA
ATAGAwQGmiJAMA0GCSqGSIb3DQEBCwUAA4IBAQAGvcruN4+HfdjNbakeV7GmQJ2J
V/WBf6oLKtCxwTP3sn4cfAfSHi4GWOw8xgK00wJJnsUDVZS7esJM+VOKpZyTshFx
xwd+sLrisNwtvkXALu8VHtsfP9KPjO6EHaJ542cicyPpLVmMXEmtVKy3jovT85/B
vLSuBfJWks5dSlb/v5+rJrDiWNhIrgJYPFsfGoe4MaM8W8F1Qm1DhQOw1T41hH8M
R5cvPVK0l6ksGhMPTl6vsh0x4JQUENsd35AKhQ4XXom5C8Mynu8LZEUntIOR2/fI
1RDicFibPQQOD73hNW8ehi50+djufZaK0s08sf9lhrVItqljTiHzN2rln+G1
-----END CERTIFICATE-----
Generated at Tue Jul 29 06:55:14 2025 by rpki-client