Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/6adBuVxGz0J2Ii4GCVWjCVEFuN0.roa
File:                     6adBuVxGz0J2Ii4GCVWjCVEFuN0.roa (raw, json)
Hash identifier:          9ovE+PAHJfOHhMO1TNJzFeIB8BQ8HW88ATXR/9FAmXw=
Subject key identifier:   E9:A7:41:B9:5C:46:CF:42:76:22:2E:06:09:55:A3:09:51:05:B8:DD
Certificate issuer:       /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial:       CA
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/6adBuVxGz0J2Ii4GCVWjCVEFuN0.roa
Signing time:             Thu 24 Jul 2025 01:30:19 +0000
ROA not before:           Thu 24 Jul 2025 01:30:19 +0000
ROA not after:            Wed 15 Jul 2026 01:30:01 +0000
asID:                     4694
IP address blocks:        210.158.206.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 Aug 2025 01:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 202 (0xca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
        Validity
            Not Before: Jul 24 01:30:19 2025 GMT
            Not After : Jul 15 01:30:01 2026 GMT
        Subject: CN=E9A741B95C46CF4276222E060955A3095105B8DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:3b:d0:bb:e4:3b:0c:84:a0:a9:48:c8:96:22:
                    02:4d:e1:1a:a5:7f:30:ad:fa:19:fa:cc:85:1a:fc:
                    8c:72:9f:d8:6d:0e:01:00:20:b4:db:5a:ae:9e:61:
                    13:21:52:c3:0f:8b:ce:57:b3:f2:13:d8:3f:b9:75:
                    e4:bf:ea:c2:8e:19:da:ff:af:36:fb:38:13:56:96:
                    fd:5f:d1:7e:c7:e5:db:02:d8:05:26:c2:ba:74:47:
                    18:16:88:89:b2:2c:92:e0:cb:89:a9:d8:21:6e:4a:
                    58:19:32:a2:08:53:a6:d8:71:ed:c3:93:d2:25:e9:
                    5f:c9:89:af:45:b4:5a:de:d7:5e:e4:59:19:38:38:
                    95:89:07:20:06:9b:82:f1:b4:2f:40:51:f0:a4:e3:
                    0b:3c:e1:ba:74:33:68:44:0c:46:92:ea:7e:3a:66:
                    4f:a6:f0:24:14:f9:f6:ed:ed:3f:45:40:2c:a9:32:
                    f1:af:8e:99:a0:51:e8:00:fd:8f:e7:9a:5d:10:ad:
                    93:98:b3:1f:5e:77:d9:d8:57:8d:d9:19:1d:f0:ee:
                    1b:b7:7f:34:bf:5b:bd:25:d4:46:bc:81:60:ae:39:
                    83:4b:99:14:c6:c0:6f:c5:27:f3:48:21:ef:73:22:
                    f0:0a:71:ff:ee:55:a6:5c:14:39:3f:34:16:c5:da:
                    96:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:A7:41:B9:5C:46:CF:42:76:22:2E:06:09:55:A3:09:51:05:B8:DD
            X509v3 Authority Key Identifier:
                keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/6adBuVxGz0J2Ii4GCVWjCVEFuN0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.158.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:20:9d:50:8a:1f:47:25:fc:e2:a4:80:c8:83:3d:68:07:35:
         bd:7d:60:ca:39:56:71:2c:e8:66:94:6d:d3:c5:67:75:5a:20:
         d9:3e:8b:9a:8d:4b:16:1b:78:cf:e8:f4:27:8b:aa:7d:a5:92:
         09:96:5d:1c:0f:ba:73:b4:fd:a9:95:27:b0:a6:be:27:3b:05:
         89:22:04:9f:77:a7:11:81:31:0c:cb:f8:ab:6c:e1:c9:89:f5:
         c3:7d:b9:35:f4:4f:65:05:37:5d:ff:03:e8:fd:52:3d:34:50:
         cc:af:f5:3d:68:be:25:75:1a:a8:de:60:c9:50:9c:70:c8:e4:
         4d:0f:c9:ae:77:11:49:5e:2f:32:62:ce:33:b9:38:9f:32:bf:
         d2:87:3d:df:b1:6b:f8:80:8f:08:67:73:0f:8d:c3:1c:ac:b3:
         88:77:5b:a6:fd:06:6e:e6:1f:66:00:0a:6d:e4:32:dc:c9:89:
         e7:2f:93:71:ab:c1:e0:16:a0:a7:69:a9:5e:14:47:d3:47:9c:
         1c:7a:66:ae:29:6b:6b:e0:44:cf:0f:79:4a:34:51:2f:bc:23:
         97:ae:4c:4d:e4:9e:20:7d:bd:94:0a:c9:67:cc:12:a4:d4:c8:
         73:e4:5b:a3:9a:db:ed:cc:b1:97:42:fd:06:c6:52:29:d7:40:
         60:9c:76:57
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgICAMowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTkw
QTgyMjg4RDJFMjNEQkZBODc2MzhGM0VCOEI5OTVFMTg5N0U5NTAeFw0yNTA3MjQw
MTMwMTlaFw0yNjA3MTUwMTMwMDFaMDMxMTAvBgNVBAMTKEU5QTc0MUI5NUM0NkNG
NDI3NjIyMkUwNjA5NTVBMzA5NTEwNUI4REQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC5O9C75DsMhKCpSMiWIgJN4RqlfzCt+hn6zIUa/Ixyn9htDgEA
ILTbWq6eYRMhUsMPi85Xs/IT2D+5deS/6sKOGdr/rzb7OBNWlv1f0X7H5dsC2AUm
wrp0RxgWiImyLJLgy4mp2CFuSlgZMqIIU6bYce3Dk9Il6V/Jia9FtFre117kWRk4
OJWJByAGm4LxtC9AUfCk4ws84bp0M2hEDEaS6n46Zk+m8CQU+fbt7T9FQCypMvGv
jpmgUegA/Y/nml0QrZOYsx9ed9nYV43ZGR3w7hu3fzS/W70l1Ea8gWCuOYNLmRTG
wG/FJ/NIIe9zIvAKcf/uVaZcFDk/NBbF2pYPAgMBAAGjggIoMIICJDAdBgNVHQ4E
FgQU6adBuVxGz0J2Ii4GCVWjCVEFuN0wHwYDVR0jBBgwFoAUWQqCKI0uI9v6h2OP
Pri5leGJfpUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzIwMDgzL1dRcUNLSTB1STl2NmgyT1BQcmk1bGVHSmZwVS5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1dRcUNLSTB1STl2NmgyT1BQcmk1
bGVHSmZwVS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8yMDA4My82YWRCdVZ4R3owSjJJaTRHQ1ZXakNWRUZ1TjAu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQA0p7OMA0GCSqGSIb3DQEBCwUAA4IBAQArIJ1Qih9HJfzipIDIgz1o
BzW9fWDKOVZxLOhmlG3TxWd1WiDZPouajUsWG3jP6PQni6p9pZIJll0cD7pztP2p
lSewpr4nOwWJIgSfd6cRgTEMy/irbOHJifXDfbk19E9lBTdd/wPo/VI9NFDMr/U9
aL4ldRqo3mDJUJxwyORND8mudxFJXi8yYs4zuTifMr/Shz3fsWv4gI8IZ3MPjcMc
rLOId1um/QZu5h9mAApt5DLcyYnnL5Nxq8HgFqCnaaleFEfTR5wcemauKWtr4ETP
D3lKNFEvvCOXrkxN5J4gfb2UCslnzBKk1Mhz5FujmtvtzLGXQv0GxlIp10BgnHZX
-----END CERTIFICATE-----
Generated at Wed Jul 30 03:08:16 2025 by rpki-client