Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/9slfu-Irq3BChNztNgxY4KMXHLI.roa
File:                     9slfu-Irq3BChNztNgxY4KMXHLI.roa (raw, json)
Hash identifier:          +danGIEdLzVzIMJ2ah4p33JRWdrqJKWUD8++Ew6UJ60=
Subject key identifier:   F6:C9:5F:BB:E2:2B:AB:70:42:84:DC:ED:36:0C:58:E0:A3:17:1C:B2
Certificate issuer:       /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial:       D4
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/9slfu-Irq3BChNztNgxY4KMXHLI.roa
Signing time:             Thu 24 Jul 2025 01:44:30 +0000
ROA not before:           Thu 24 Jul 2025 01:44:30 +0000
ROA not after:            Wed 15 Jul 2026 01:30:01 +0000
asID:                     4694
IP address blocks:        210.171.122.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 Aug 2025 01:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 212 (0xd4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
        Validity
            Not Before: Jul 24 01:44:30 2025 GMT
            Not After : Jul 15 01:30:01 2026 GMT
        Subject: CN=F6C95FBBE22BAB704284DCED360C58E0A3171CB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:dc:f5:98:d1:04:24:79:69:e3:57:b2:c4:c1:
                    d6:ff:f8:a8:b1:bb:0c:56:fb:60:c3:d3:f0:ee:e5:
                    46:87:31:c6:23:fa:13:c0:cc:46:9c:31:68:a1:f6:
                    2d:c4:da:2a:07:e2:34:bd:84:3a:d0:fd:a6:1d:f9:
                    1f:d5:81:ba:6f:cf:5e:96:cb:55:5d:e8:ca:3a:a5:
                    16:c1:3b:b9:9b:53:eb:24:cb:42:89:35:a6:2e:a7:
                    81:2b:2a:d8:e6:e6:1b:84:be:d1:47:ab:e4:fa:3f:
                    f7:92:2f:d8:4a:54:e3:45:9b:2a:cc:4c:60:a5:97:
                    48:2c:20:18:9a:9d:2e:8b:5d:10:3a:1d:76:3e:2e:
                    07:9c:89:eb:18:fb:60:5d:ec:44:9f:b2:b8:d9:97:
                    24:e2:8f:8b:30:f1:b6:c6:2c:cc:5d:c9:c1:2a:eb:
                    4d:d4:bd:57:22:c5:2f:54:19:76:ba:4f:8c:b0:60:
                    27:0b:b3:e0:2e:77:fa:63:5a:d3:87:e9:64:82:c9:
                    23:c0:a7:70:ed:37:8c:01:54:b4:5a:e9:da:9f:31:
                    1b:55:b0:00:97:4c:74:2e:a8:02:72:d8:08:1e:53:
                    2e:57:0e:27:10:2f:c1:3a:2c:ae:a8:3b:a6:49:af:
                    a0:ce:ec:ef:de:82:38:d3:70:90:29:c0:a4:aa:0a:
                    b3:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:C9:5F:BB:E2:2B:AB:70:42:84:DC:ED:36:0C:58:E0:A3:17:1C:B2
            X509v3 Authority Key Identifier:
                keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/9slfu-Irq3BChNztNgxY4KMXHLI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.171.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:2d:da:19:e7:e4:c0:1c:70:fe:9a:a5:a4:42:aa:82:f7:74:
         70:13:bb:6d:c9:5e:5e:99:a0:24:a3:8c:f4:fe:63:df:90:f4:
         59:b3:df:e8:05:39:17:cf:bb:6b:32:44:11:1e:89:1e:4e:79:
         1e:e1:74:c7:bc:99:2a:84:ca:fd:e0:da:33:ee:83:40:3a:21:
         28:da:23:42:a8:e8:bc:73:e9:8f:6e:34:11:4f:26:81:1e:f0:
         2d:70:3a:61:d4:12:24:86:9f:59:e0:6d:30:02:2b:63:07:67:
         2b:f8:f9:8f:da:01:f6:8b:13:3c:62:09:ba:bb:0f:7d:7b:75:
         43:fa:11:4d:2b:ae:e1:58:c1:d8:ae:5b:17:48:0d:ec:75:48:
         cf:53:44:b7:e3:5c:b2:be:21:df:7e:12:47:78:f7:09:cb:e9:
         73:81:95:eb:26:51:30:8c:5f:88:12:1d:85:cd:52:ef:41:28:
         51:40:c4:99:33:f5:d1:a8:5e:03:86:f9:94:a6:38:f2:d9:86:
         4c:25:38:8e:86:4d:4e:44:39:5b:96:6d:8c:0b:9e:61:78:eb:
         56:36:a9:6f:60:7b:d2:e5:dd:87:b8:37:56:bc:b7:2f:22:21:
         b4:db:33:3b:aa:70:94:9d:96:07:d8:5b:bc:49:15:0d:10:51:
         c8:b0:85:2c
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgICANQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTkw
QTgyMjg4RDJFMjNEQkZBODc2MzhGM0VCOEI5OTVFMTg5N0U5NTAeFw0yNTA3MjQw
MTQ0MzBaFw0yNjA3MTUwMTMwMDFaMDMxMTAvBgNVBAMTKEY2Qzk1RkJCRTIyQkFC
NzA0Mjg0RENFRDM2MEM1OEUwQTMxNzFDQjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDM3PWY0QQkeWnjV7LEwdb/+KixuwxW+2DD0/Du5UaHMcYj+hPA
zEacMWih9i3E2ioH4jS9hDrQ/aYd+R/Vgbpvz16Wy1Vd6Mo6pRbBO7mbU+sky0KJ
NaYup4ErKtjm5huEvtFHq+T6P/eSL9hKVONFmyrMTGCll0gsIBianS6LXRA6HXY+
LgeciesY+2Bd7ESfsrjZlyTij4sw8bbGLMxdycEq603UvVcixS9UGXa6T4ywYCcL
s+Aud/pjWtOH6WSCySPAp3DtN4wBVLRa6dqfMRtVsACXTHQuqAJy2AgeUy5XDicQ
L8E6LK6oO6ZJr6DO7O/egjjTcJApwKSqCrMhAgMBAAGjggIoMIICJDAdBgNVHQ4E
FgQU9slfu+Irq3BChNztNgxY4KMXHLIwHwYDVR0jBBgwFoAUWQqCKI0uI9v6h2OP
Pri5leGJfpUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzIwMDgzL1dRcUNLSTB1STl2NmgyT1BQcmk1bGVHSmZwVS5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1dRcUNLSTB1STl2NmgyT1BQcmk1
bGVHSmZwVS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8yMDA4My85c2xmdS1JcnEzQkNoTnp0Tmd4WTRLTVhITEku
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQA0qt6MA0GCSqGSIb3DQEBCwUAA4IBAQBWLdoZ5+TAHHD+mqWkQqqC
93RwE7ttyV5emaAko4z0/mPfkPRZs9/oBTkXz7trMkQRHokeTnke4XTHvJkqhMr9
4Noz7oNAOiEo2iNCqOi8c+mPbjQRTyaBHvAtcDph1BIkhp9Z4G0wAitjB2cr+PmP
2gH2ixM8Ygm6uw99e3VD+hFNK67hWMHYrlsXSA3sdUjPU0S341yyviHffhJHePcJ
y+lzgZXrJlEwjF+IEh2FzVLvQShRQMSZM/XRqF4DhvmUpjjy2YZMJTiOhk1ORDlb
lm2MC55heOtWNqlvYHvS5d2HuDdWvLcvIiG02zM7qnCUnZYH2Fu8SRUNEFHIsIUs
-----END CERTIFICATE-----
Generated at Wed Jul 30 03:11:05 2025 by rpki-client