Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/0aZy6GtSgPQttWIpJOEhBvDGMPk.roa
File:                     0aZy6GtSgPQttWIpJOEhBvDGMPk.roa (raw, json)
Hash identifier:          tm9RA4FxFs9buUvu/fQToXl9hWGy006PPdLihHuLIPw=
Subject key identifier:   D1:A6:72:E8:6B:52:80:F4:2D:B5:62:29:24:E1:21:06:F0:C6:30:F9
Certificate issuer:       /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial:       8A
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/0aZy6GtSgPQttWIpJOEhBvDGMPk.roa
Signing time:             Thu 17 Jul 2025 01:31:24 +0000
ROA not before:           Thu 17 Jul 2025 01:31:24 +0000
ROA not after:            Wed 15 Jul 2026 01:30:01 +0000
asID:                     4694
IP address blocks:        210.152.160.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 Aug 2025 00:57:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 138 (0x8a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
        Validity
            Not Before: Jul 17 01:31:24 2025 GMT
            Not After : Jul 15 01:30:01 2026 GMT
        Subject: CN=D1A672E86B5280F42DB5622924E12106F0C630F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:93:12:4b:40:ee:99:61:49:dd:3b:a9:59:34:
                    d8:b9:30:3e:fc:57:a2:0a:48:e5:b0:3a:8c:99:b3:
                    82:2d:2b:1a:0d:75:a6:1c:4c:62:fb:46:bf:85:d9:
                    24:4b:dc:2a:32:74:59:b6:9e:e1:60:57:8e:36:4b:
                    8f:7b:af:62:29:5c:41:1b:e9:6a:d4:38:48:62:e4:
                    69:c6:8d:2f:45:b7:69:d3:cf:55:f9:a2:00:13:72:
                    69:f1:97:4d:87:6f:82:81:12:37:1c:b0:b7:54:3e:
                    f7:3a:15:66:1c:2c:e6:88:68:b7:eb:0b:4e:57:bb:
                    47:c1:a9:32:20:90:b3:7a:88:d8:30:d0:04:5b:c0:
                    92:7f:18:90:b7:e7:88:6e:78:1d:40:af:80:3f:17:
                    b5:f1:d1:5b:33:2c:e7:19:4d:af:e1:87:92:04:d7:
                    55:76:e1:c5:3c:90:2f:4d:2d:b6:16:4b:cd:4f:3e:
                    4c:99:a8:30:f1:8c:fc:5e:b9:02:18:ab:43:6b:21:
                    88:89:62:65:3a:b0:62:12:ba:f4:02:4a:cf:d5:0a:
                    e2:77:ce:50:60:92:d7:a8:ce:c5:25:a4:2f:a1:5b:
                    48:79:fa:5b:09:05:41:4b:a4:63:e3:5a:3d:02:e8:
                    93:03:b3:bb:cb:d0:41:fe:14:b4:39:fc:9a:14:59:
                    fc:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:A6:72:E8:6B:52:80:F4:2D:B5:62:29:24:E1:21:06:F0:C6:30:F9
            X509v3 Authority Key Identifier:
                keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/0aZy6GtSgPQttWIpJOEhBvDGMPk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.152.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         81:e4:53:38:72:12:77:79:5f:47:c4:60:a3:37:3b:5e:68:05:
         34:c6:d5:19:13:73:13:e7:bd:c8:54:3c:34:ce:31:44:94:77:
         b6:82:47:5f:c5:d4:cf:f9:83:81:78:fe:59:38:35:46:13:20:
         bc:1d:9d:ae:67:ae:45:bb:42:22:db:f3:f8:3e:d8:51:cf:a4:
         3d:bc:c6:96:fa:52:17:5e:0f:9b:59:dd:7c:15:db:40:cc:01:
         b2:0e:87:21:23:20:c2:fd:1c:6f:30:a0:51:a1:c2:50:6c:08:
         8d:44:a7:33:d8:f7:14:a7:55:00:27:82:30:cd:61:96:fd:4d:
         bf:1e:e4:2b:3c:c1:1d:eb:26:bd:25:d2:ae:46:3b:df:ea:12:
         96:7f:56:bc:41:0d:c6:28:9e:a1:9b:4a:80:cd:68:b5:fe:9e:
         4e:55:1f:c1:85:2b:63:cc:46:8e:3e:39:7f:5a:38:15:5c:43:
         33:cb:e5:7a:6d:b7:e2:ee:2d:c0:24:5a:54:02:42:1d:2c:6f:
         e5:61:b0:e1:d0:60:b2:0e:e0:ab:e9:82:21:03:08:aa:b9:02:
         3d:9a:14:07:b2:73:55:45:2c:86:f5:ac:69:1b:d1:1c:cb:c5:
         df:a3:b1:9f:c0:73:51:69:68:c3:bb:ce:00:19:8b:38:f4:33:
         93:a6:3a:94
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgICAIowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTkw
QTgyMjg4RDJFMjNEQkZBODc2MzhGM0VCOEI5OTVFMTg5N0U5NTAeFw0yNTA3MTcw
MTMxMjRaFw0yNjA3MTUwMTMwMDFaMDMxMTAvBgNVBAMTKEQxQTY3MkU4NkI1Mjgw
RjQyREI1NjIyOTI0RTEyMTA2RjBDNjMwRjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDKkxJLQO6ZYUndO6lZNNi5MD78V6IKSOWwOoyZs4ItKxoNdaYc
TGL7Rr+F2SRL3CoydFm2nuFgV442S497r2IpXEEb6WrUOEhi5GnGjS9Ft2nTz1X5
ogATcmnxl02Hb4KBEjccsLdUPvc6FWYcLOaIaLfrC05Xu0fBqTIgkLN6iNgw0ARb
wJJ/GJC354hueB1Ar4A/F7Xx0VszLOcZTa/hh5IE11V24cU8kC9NLbYWS81PPkyZ
qDDxjPxeuQIYq0NrIYiJYmU6sGISuvQCSs/VCuJ3zlBgkteozsUlpC+hW0h5+lsJ
BUFLpGPjWj0C6JMDs7vL0EH+FLQ5/JoUWfynAgMBAAGjggIoMIICJDAdBgNVHQ4E
FgQU0aZy6GtSgPQttWIpJOEhBvDGMPkwHwYDVR0jBBgwFoAUWQqCKI0uI9v6h2OP
Pri5leGJfpUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzIwMDgzL1dRcUNLSTB1STl2NmgyT1BQcmk1bGVHSmZwVS5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1dRcUNLSTB1STl2NmgyT1BQcmk1
bGVHSmZwVS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8yMDA4My8wYVp5Nkd0U2dQUXR0V0lwSk9FaEJ2REdNUGsu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQE0pigMA0GCSqGSIb3DQEBCwUAA4IBAQCB5FM4chJ3eV9HxGCjNzte
aAU0xtUZE3MT573IVDw0zjFElHe2gkdfxdTP+YOBeP5ZODVGEyC8HZ2uZ65Fu0Ii
2/P4PthRz6Q9vMaW+lIXXg+bWd18FdtAzAGyDochIyDC/RxvMKBRocJQbAiNRKcz
2PcUp1UAJ4IwzWGW/U2/HuQrPMEd6ya9JdKuRjvf6hKWf1a8QQ3GKJ6hm0qAzWi1
/p5OVR/BhStjzEaOPjl/WjgVXEMzy+V6bbfi7i3AJFpUAkIdLG/lYbDh0GCyDuCr
6YIhAwiquQI9mhQHsnNVRSyG9axpG9Ecy8Xfo7GfwHNRaWjDu84AGYs49DOTpjqU
-----END CERTIFICATE-----
Generated at Wed Jul 30 03:05:25 2025 by rpki-client