Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/9FJeQltQs9p5zNr1LM3PK8L8P1U.roa
File:                     9FJeQltQs9p5zNr1LM3PK8L8P1U.roa (raw, json)
Hash identifier:          qEfWKYDnymo/j+fPl6VnfX8pR+WRFEM8drRyufgxdZA=
Subject key identifier:   F4:52:5E:42:5B:50:B3:DA:79:CC:DA:F5:2C:CD:CF:2B:C2:FC:3F:55
Certificate issuer:       /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial:       9F
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/9FJeQltQs9p5zNr1LM3PK8L8P1U.roa
Signing time:             Thu 24 Jul 2025 00:46:54 +0000
ROA not before:           Thu 24 Jul 2025 00:46:54 +0000
ROA not after:            Wed 15 Jul 2026 01:30:01 +0000
asID:                     4694
IP address blocks:        202.230.224.0/19 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 Aug 2025 01:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 159 (0x9f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
        Validity
            Not Before: Jul 24 00:46:54 2025 GMT
            Not After : Jul 15 01:30:01 2026 GMT
        Subject: CN=F4525E425B50B3DA79CCDAF52CCDCF2BC2FC3F55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:87:14:b7:fa:06:2c:35:e4:e6:64:9d:41:e7:
                    d1:a0:30:0f:cc:8e:f5:73:00:79:c3:74:e6:13:fe:
                    c1:af:8e:95:7e:f9:39:01:a1:fc:41:ea:a0:ae:94:
                    ee:55:91:dd:c1:2a:55:c2:c8:a0:c9:98:6e:fe:62:
                    5d:bf:af:2d:b6:17:d8:b1:1b:96:bd:ed:28:56:78:
                    fb:c5:2b:38:25:a3:01:4b:a4:f4:59:09:cb:f4:dc:
                    8f:c6:5e:ae:fa:7c:69:2a:2d:44:70:e1:4a:35:7a:
                    64:b7:28:5c:57:6f:3c:29:ea:57:dc:ab:7d:24:e6:
                    af:a9:16:a8:71:aa:2f:61:b5:10:98:84:3e:45:a2:
                    97:2a:5a:21:dc:a2:e5:17:2f:d4:fc:d1:4a:e2:1f:
                    4f:66:5e:40:2c:5e:08:ba:31:bd:0f:c2:27:a8:16:
                    ad:82:22:97:01:78:99:d8:6d:c2:27:bb:f6:e3:35:
                    de:4e:a2:20:95:5a:63:6b:32:1f:15:59:5c:41:5c:
                    4b:bd:01:b7:52:25:53:4b:97:d8:fe:89:f0:45:31:
                    f4:98:66:3a:b1:3c:c9:e2:d5:90:df:34:22:8f:3b:
                    92:54:88:08:64:8e:aa:5a:c8:ff:15:47:00:78:59:
                    62:77:fd:e2:6b:77:7d:05:e1:79:a0:93:f4:4d:e3:
                    47:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:52:5E:42:5B:50:B3:DA:79:CC:DA:F5:2C:CD:CF:2B:C2:FC:3F:55
            X509v3 Authority Key Identifier:
                keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/9FJeQltQs9p5zNr1LM3PK8L8P1U.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.230.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         15:2b:38:62:a4:38:90:62:81:7e:72:92:b7:f4:e2:a1:7c:74:
         94:3d:aa:a5:1e:7c:a6:29:e1:5c:81:ab:af:7f:df:49:20:a7:
         f1:33:42:b4:ec:2d:68:6d:bb:dc:79:36:af:79:c6:98:fd:9e:
         cf:5e:b0:54:99:4e:24:2d:d9:5a:0a:7d:4d:34:c5:62:37:84:
         70:df:26:56:bb:58:a7:25:45:31:c8:3e:09:ef:4e:68:9b:e2:
         ed:b2:82:30:6f:a3:c3:60:c3:b1:18:3e:36:58:5b:8d:d3:28:
         1b:e8:ff:59:a6:47:85:b2:f7:e3:6f:c7:38:5a:bb:00:93:5b:
         43:69:9c:cf:2b:24:21:4c:4c:25:45:ba:a2:9d:24:b3:bb:42:
         ab:1a:47:a4:9e:46:5a:e7:0b:3e:fc:48:90:db:e2:c4:b6:92:
         18:8f:25:cc:b6:c5:25:aa:bf:0b:e2:f4:53:b3:9e:cf:66:f9:
         ab:df:60:e0:3d:ed:a2:d9:2e:e5:c1:64:77:7d:a8:e6:ad:89:
         e8:84:b5:44:dd:71:da:1e:65:ed:a2:85:b2:8b:b2:23:ac:4e:
         cf:a5:30:95:ad:79:d6:d3:67:37:09:c3:af:48:09:38:5f:fd:
         8c:ed:e2:5c:7a:c6:9a:fc:1c:f5:4e:a0:65:cf:37:72:69:84:
         6f:6a:9c:c7
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgICAJ8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTkw
QTgyMjg4RDJFMjNEQkZBODc2MzhGM0VCOEI5OTVFMTg5N0U5NTAeFw0yNTA3MjQw
MDQ2NTRaFw0yNjA3MTUwMTMwMDFaMDMxMTAvBgNVBAMTKEY0NTI1RTQyNUI1MEIz
REE3OUNDREFGNTJDQ0RDRjJCQzJGQzNGNTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDNhxS3+gYsNeTmZJ1B59GgMA/MjvVzAHnDdOYT/sGvjpV++TkB
ofxB6qCulO5Vkd3BKlXCyKDJmG7+Yl2/ry22F9ixG5a97ShWePvFKzglowFLpPRZ
Ccv03I/GXq76fGkqLURw4Uo1emS3KFxXbzwp6lfcq30k5q+pFqhxqi9htRCYhD5F
opcqWiHcouUXL9T80UriH09mXkAsXgi6Mb0PwieoFq2CIpcBeJnYbcInu/bjNd5O
oiCVWmNrMh8VWVxBXEu9AbdSJVNLl9j+ifBFMfSYZjqxPMni1ZDfNCKPO5JUiAhk
jqpayP8VRwB4WWJ3/eJrd30F4Xmgk/RN40cVAgMBAAGjggIoMIICJDAdBgNVHQ4E
FgQU9FJeQltQs9p5zNr1LM3PK8L8P1UwHwYDVR0jBBgwFoAUWQqCKI0uI9v6h2OP
Pri5leGJfpUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzIwMDgzL1dRcUNLSTB1STl2NmgyT1BQcmk1bGVHSmZwVS5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1dRcUNLSTB1STl2NmgyT1BQcmk1
bGVHSmZwVS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8yMDA4My85RkplUWx0UXM5cDV6TnIxTE0zUEs4TDhQMVUu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQFyubgMA0GCSqGSIb3DQEBCwUAA4IBAQAVKzhipDiQYoF+cpK39OKh
fHSUPaqlHnymKeFcgauvf99JIKfxM0K07C1obbvceTavecaY/Z7PXrBUmU4kLdla
Cn1NNMViN4Rw3yZWu1inJUUxyD4J705om+LtsoIwb6PDYMOxGD42WFuN0ygb6P9Z
pkeFsvfjb8c4WrsAk1tDaZzPKyQhTEwlRbqinSSzu0KrGkeknkZa5ws+/EiQ2+LE
tpIYjyXMtsUlqr8L4vRTs57PZvmr32DgPe2i2S7lwWR3fajmrYnohLVE3XHaHmXt
ooWyi7IjrE7PpTCVrXnW02c3CcOvSAk4X/2M7eJcesaa/Bz1TqBlzzdyaYRvapzH
-----END CERTIFICATE-----
Generated at Wed Jul 30 03:08:55 2025 by rpki-client