Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/CzfXJlOu163tPLtP-J5py0TP3_U.roa
File:                     CzfXJlOu163tPLtP-J5py0TP3_U.roa (raw, json)
Hash identifier:          vPARzz+Z7OvMKgTcrUXDkpG5x94AzV4z3hl+vF5Gzt0=
Subject key identifier:   0B:37:D7:26:53:AE:D7:AD:ED:3C:BB:4F:F8:9E:69:CB:44:CF:DF:F5
Certificate issuer:       /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial:       C0
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/CzfXJlOu163tPLtP-J5py0TP3_U.roa
Signing time:             Thu 24 Jul 2025 01:09:54 +0000
ROA not before:           Thu 24 Jul 2025 01:09:54 +0000
ROA not after:            Wed 15 Jul 2026 01:30:01 +0000
asID:                     4694
IP address blocks:        210.152.29.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 Aug 2025 00:57:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 192 (0xc0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
        Validity
            Not Before: Jul 24 01:09:54 2025 GMT
            Not After : Jul 15 01:30:01 2026 GMT
        Subject: CN=0B37D72653AED7ADED3CBB4FF89E69CB44CFDFF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:64:f9:5b:e5:e2:07:1a:c9:a6:7a:87:8e:4f:
                    48:b7:bb:66:e1:ff:58:f6:42:1d:f7:80:2b:1c:86:
                    3c:6d:21:81:30:80:94:65:7a:ab:5e:48:eb:b5:72:
                    d6:a2:92:96:ea:77:5a:ec:fc:15:c8:fd:59:3b:d8:
                    e2:7e:f8:99:b8:79:33:21:df:17:aa:43:4b:fd:37:
                    d2:e9:a3:6d:66:59:ae:c0:b1:35:30:e2:d3:90:6f:
                    85:75:03:66:2a:65:dc:c6:77:61:c8:c0:bf:31:76:
                    f4:2b:6c:2f:62:90:27:bf:e7:03:04:3c:19:1e:c8:
                    51:b8:7f:e4:4b:de:b9:82:58:db:f9:ca:93:27:84:
                    65:25:e1:a4:3d:b8:83:04:fd:3b:1e:b4:b9:3d:d4:
                    10:00:06:fd:07:9e:8b:75:89:89:0c:4e:40:f4:6c:
                    81:49:83:69:37:d7:7f:90:2f:a4:30:99:4a:7c:7c:
                    c1:f4:1b:e2:44:5d:ff:09:d8:0e:40:e1:d8:5d:9b:
                    0d:d4:2a:21:48:3c:c0:6f:f8:a8:37:f1:04:be:ba:
                    83:4d:50:84:01:ad:fd:a8:13:14:12:71:3e:6c:56:
                    3a:c8:02:c7:39:27:a3:17:8c:43:36:57:2a:05:43:
                    3f:6a:cf:18:19:3f:ad:17:a5:46:07:b7:17:1a:99:
                    5b:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:37:D7:26:53:AE:D7:AD:ED:3C:BB:4F:F8:9E:69:CB:44:CF:DF:F5
            X509v3 Authority Key Identifier:
                keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/CzfXJlOu163tPLtP-J5py0TP3_U.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.152.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:93:45:b5:dd:3d:d6:ef:76:ff:89:ee:86:25:87:72:6e:4a:
         ef:27:40:c6:5e:e7:81:de:38:45:5b:6f:1c:47:bb:2e:16:8c:
         12:8a:7a:fa:9d:1b:74:2a:0b:e9:ce:44:8e:64:74:dd:76:c1:
         0f:3a:bd:7c:31:58:23:fe:82:e5:3c:b6:8a:02:9c:16:09:06:
         8e:f0:83:32:f9:c0:23:cc:49:0e:cb:d7:96:81:07:cb:b4:c4:
         12:63:f3:6e:06:89:8a:c4:98:46:49:33:15:c1:71:cc:01:4c:
         7e:60:29:03:9c:a5:dc:d4:ee:90:dd:37:73:df:02:a9:58:45:
         5e:9a:25:e7:d0:c9:aa:3b:de:a9:94:e9:d5:6d:1e:83:85:53:
         ab:9b:54:b9:da:9b:d4:7b:93:4d:95:49:9c:d9:0e:1d:0f:6d:
         5e:3c:7c:65:d4:85:1b:60:92:73:10:e5:56:2f:06:7f:4d:e7:
         b9:b5:a4:fd:31:96:e0:ea:5f:2c:e8:b2:4c:78:d1:e1:39:35:
         bb:b2:03:8e:f8:39:7e:86:21:2b:6b:8c:45:63:98:fb:56:17:
         eb:b8:6a:91:ce:de:3a:44:41:28:4d:ae:30:5c:84:7a:b7:6e:
         95:e4:e4:48:bf:33:2f:1a:fe:f3:41:6c:b4:9f:f5:0f:3e:a3:
         b4:6b:bc:a4
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgICAMAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTkw
QTgyMjg4RDJFMjNEQkZBODc2MzhGM0VCOEI5OTVFMTg5N0U5NTAeFw0yNTA3MjQw
MTA5NTRaFw0yNjA3MTUwMTMwMDFaMDMxMTAvBgNVBAMTKDBCMzdENzI2NTNBRUQ3
QURFRDNDQkI0RkY4OUU2OUNCNDRDRkRGRjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDAZPlb5eIHGsmmeoeOT0i3u2bh/1j2Qh33gCschjxtIYEwgJRl
eqteSOu1ctaikpbqd1rs/BXI/Vk72OJ++Jm4eTMh3xeqQ0v9N9Lpo21mWa7AsTUw
4tOQb4V1A2YqZdzGd2HIwL8xdvQrbC9ikCe/5wMEPBkeyFG4f+RL3rmCWNv5ypMn
hGUl4aQ9uIME/TsetLk91BAABv0Hnot1iYkMTkD0bIFJg2k313+QL6QwmUp8fMH0
G+JEXf8J2A5A4dhdmw3UKiFIPMBv+Kg38QS+uoNNUIQBrf2oExQScT5sVjrIAsc5
J6MXjEM2VyoFQz9qzxgZP60XpUYHtxcamVtpAgMBAAGjggIoMIICJDAdBgNVHQ4E
FgQUCzfXJlOu163tPLtP+J5py0TP3/UwHwYDVR0jBBgwFoAUWQqCKI0uI9v6h2OP
Pri5leGJfpUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzIwMDgzL1dRcUNLSTB1STl2NmgyT1BQcmk1bGVHSmZwVS5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1dRcUNLSTB1STl2NmgyT1BQcmk1
bGVHSmZwVS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8yMDA4My9DemZYSmxPdTE2M3RQTHRQLUo1cHkwVFAzX1Uu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQA0pgdMA0GCSqGSIb3DQEBCwUAA4IBAQCQk0W13T3W73b/ie6GJYdy
bkrvJ0DGXueB3jhFW28cR7suFowSinr6nRt0KgvpzkSOZHTddsEPOr18MVgj/oLl
PLaKApwWCQaO8IMy+cAjzEkOy9eWgQfLtMQSY/NuBomKxJhGSTMVwXHMAUx+YCkD
nKXc1O6Q3Tdz3wKpWEVemiXn0MmqO96plOnVbR6DhVOrm1S52pvUe5NNlUmc2Q4d
D21ePHxl1IUbYJJzEOVWLwZ/Tee5taT9MZbg6l8s6LJMeNHhOTW7sgOO+Dl+hiEr
a4xFY5j7VhfruGqRzt46REEoTa4wXIR6t26V5ORIvzMvGv7zQWy0n/UPPqO0a7yk
-----END CERTIFICATE-----
Generated at Wed Jul 30 03:05:27 2025 by rpki-client