Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/9PhbeRI0Z9NY4vIERJvsEBn37mI.roa
File:                     9PhbeRI0Z9NY4vIERJvsEBn37mI.roa (raw, json)
Hash identifier:          I40K9qHxAmyQrsQ8/d4H1sgUlhB7I0h7VZ5VMER21/0=
Subject key identifier:   F4:F8:5B:79:12:34:67:D3:58:E2:F2:04:44:9B:EC:10:19:F7:EE:62
Certificate issuer:       /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial:       75
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/9PhbeRI0Z9NY4vIERJvsEBn37mI.roa
Signing time:             Thu 17 Jul 2025 01:08:54 +0000
ROA not before:           Thu 17 Jul 2025 01:08:54 +0000
ROA not after:            Wed 15 Jul 2026 01:30:01 +0000
asID:                     4694
IP address blocks:        202.234.132.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 Aug 2025 01:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117 (0x75)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
        Validity
            Not Before: Jul 17 01:08:54 2025 GMT
            Not After : Jul 15 01:30:01 2026 GMT
        Subject: CN=F4F85B79123467D358E2F204449BEC1019F7EE62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:c1:4f:00:2f:a6:f7:47:d3:29:6d:38:3d:bc:
                    77:98:de:46:06:ac:06:9f:fd:be:ad:3c:39:77:a8:
                    6d:88:26:f8:9f:03:05:ad:d4:62:a5:b8:60:fb:1d:
                    fb:77:04:e7:f5:a3:2a:5a:f4:10:22:aa:7b:94:5b:
                    ee:bd:be:8d:83:8a:eb:04:4c:7e:b0:82:a2:79:ee:
                    d2:c9:1e:ae:2b:21:81:aa:c8:31:5a:93:ab:0a:46:
                    3f:55:11:86:75:e3:a8:66:02:10:6c:dd:5d:ca:19:
                    58:c1:20:ab:d6:09:e0:52:49:e5:dc:23:a4:5f:8d:
                    d1:8d:86:dc:ba:fa:1d:95:4d:f8:81:8d:c0:9d:2f:
                    b1:4f:2f:18:27:ec:61:80:fa:13:26:a6:b6:6f:cc:
                    4e:6e:95:c0:73:be:2a:55:f9:eb:2a:de:96:e4:ae:
                    ba:af:d6:51:bc:09:88:ca:4b:ca:e4:c0:70:cc:2c:
                    a4:de:91:27:17:90:88:8b:cd:25:76:61:97:cf:f4:
                    e6:79:56:2d:be:d9:b6:18:68:5b:00:71:f0:1c:c1:
                    1f:23:a8:12:4b:59:6b:fa:31:3b:90:09:36:ef:8f:
                    98:c9:5e:9c:05:2c:10:f2:b3:7d:d3:7e:1c:53:21:
                    1c:02:d3:f6:b0:34:bf:97:c4:f5:02:e9:58:61:50:
                    65:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:F8:5B:79:12:34:67:D3:58:E2:F2:04:44:9B:EC:10:19:F7:EE:62
            X509v3 Authority Key Identifier:
                keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/9PhbeRI0Z9NY4vIERJvsEBn37mI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.234.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0a:bb:f4:b4:e9:85:c3:ea:14:6d:7c:cc:3e:37:b3:8d:45:cf:
         55:e6:3f:55:58:9d:cd:1b:55:8a:d9:eb:81:1d:3e:b3:87:02:
         57:05:5b:a0:69:29:8b:b7:0b:ab:2b:fc:04:7d:ce:d7:11:d2:
         c5:ca:49:1c:4d:4b:0c:37:31:79:b3:1a:a4:a6:9f:51:c7:e8:
         c4:84:93:71:5a:af:b8:d4:74:9e:6f:9f:6e:a6:af:5f:33:17:
         d0:4a:ce:c1:cf:0f:b4:5c:dd:9c:24:ad:b2:2a:d5:aa:1f:75:
         2b:28:cc:6f:55:bf:53:d4:47:65:21:a4:02:49:cc:be:4e:ba:
         04:ef:a9:89:69:ae:9b:67:40:dd:3e:14:6b:5d:76:87:ce:59:
         db:d4:7e:d8:53:1c:83:53:59:4c:ea:1e:e5:39:a1:99:14:60:
         34:49:d0:42:e4:e9:ef:4f:42:74:9c:ed:d3:c0:66:07:84:f8:
         c6:dc:ea:cb:ee:d0:a2:78:95:4d:32:db:72:e5:ce:ab:c3:3a:
         c6:44:a4:09:32:37:b5:61:81:e2:13:c2:42:5c:c7:14:29:51:
         be:71:a8:43:7f:b1:e2:a8:9d:79:27:39:b3:fe:4d:b7:a5:98:
         0c:4b:69:8f:e0:b4:48:8c:24:10:55:a7:00:ea:8e:98:46:03:
         56:16:35:e1
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIBdTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1OTBB
ODIyODhEMkUyM0RCRkE4NzYzOEYzRUI4Qjk5NUUxODk3RTk1MB4XDTI1MDcxNzAx
MDg1NFoXDTI2MDcxNTAxMzAwMVowMzExMC8GA1UEAxMoRjRGODVCNzkxMjM0NjdE
MzU4RTJGMjA0NDQ5QkVDMTAxOUY3RUU2MjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANfBTwAvpvdH0yltOD28d5jeRgasBp/9vq08OXeobYgm+J8DBa3U
YqW4YPsd+3cE5/WjKlr0ECKqe5Rb7r2+jYOK6wRMfrCConnu0skerishgarIMVqT
qwpGP1URhnXjqGYCEGzdXcoZWMEgq9YJ4FJJ5dwjpF+N0Y2G3Lr6HZVN+IGNwJ0v
sU8vGCfsYYD6Eyamtm/MTm6VwHO+KlX56yreluSuuq/WUbwJiMpLyuTAcMwspN6R
JxeQiIvNJXZhl8/05nlWLb7ZthhoWwBx8BzBHyOoEktZa/oxO5AJNu+PmMlenAUs
EPKzfdN+HFMhHALT9rA0v5fE9QLpWGFQZR0CAwEAAaOCAigwggIkMB0GA1UdDgQW
BBT0+Ft5EjRn01ji8gREm+wQGffuYjAfBgNVHSMEGDAWgBRZCoIojS4j2/qHY48+
uLmV4Yl+lTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAwODMvV1FxQ0tJMHVJOXY2aDJPUFByaTVsZUdKZnBVLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvV1FxQ0tJMHVJOXY2aDJPUFByaTVs
ZUdKZnBVLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzIwMDgzLzlQaGJlUkkwWjlOWTR2SUVSSnZzRUJuMzdtSS5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBALK6oQwDQYJKoZIhvcNAQELBQADggEBAAq79LTphcPqFG18zD43s41F
z1XmP1VYnc0bVYrZ64EdPrOHAlcFW6BpKYu3C6sr/AR9ztcR0sXKSRxNSww3MXmz
GqSmn1HH6MSEk3Far7jUdJ5vn26mr18zF9BKzsHPD7Rc3ZwkrbIq1aofdSsozG9V
v1PUR2UhpAJJzL5OugTvqYlprptnQN0+FGtddofOWdvUfthTHINTWUzqHuU5oZkU
YDRJ0ELk6e9PQnSc7dPAZgeE+Mbc6svu0KJ4lU0y23LlzqvDOsZEpAkyN7VhgeIT
wkJcxxQpUb5xqEN/seKonXknObP+TbelmAxLaY/gtEiMJBBVpwDqjphGA1YWNeE=
-----END CERTIFICATE-----
Generated at Wed Jul 30 03:08:18 2025 by rpki-client