Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/Fj0P7pj5Z0XkgxPqPgIIPdAhDQg.roa
File:                     Fj0P7pj5Z0XkgxPqPgIIPdAhDQg.roa (raw, json)
Hash identifier:          igNeByBoVsyJ6V2qULxurPOxbxagZZIUyRqJIuMqXLM=
Subject key identifier:   16:3D:0F:EE:98:F9:67:45:E4:83:13:EA:3E:02:08:3D:D0:21:0D:08
Certificate issuer:       /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial:       0100
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/Fj0P7pj5Z0XkgxPqPgIIPdAhDQg.roa
Signing time:             Thu 24 Jul 2025 02:05:30 +0000
ROA not before:           Thu 24 Jul 2025 02:05:30 +0000
ROA not after:            Wed 15 Jul 2026 01:30:01 +0000
asID:                     4694
IP address blocks:        211.120.38.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 Aug 2025 00:57:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 256 (0x100)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
        Validity
            Not Before: Jul 24 02:05:30 2025 GMT
            Not After : Jul 15 01:30:01 2026 GMT
        Subject: CN=163D0FEE98F96745E48313EA3E02083DD0210D08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f0:07:7d:db:c4:a3:d5:cd:c5:39:66:dc:0a:
                    d4:cb:ef:44:1c:b1:a5:fa:01:9b:41:ea:3c:4c:e6:
                    3b:98:8f:07:01:8d:c8:da:98:c3:69:de:b7:c5:7d:
                    32:90:41:06:17:ec:dc:de:2c:14:1c:80:41:dd:30:
                    cb:63:9c:a0:c9:f1:d0:c5:c1:cd:9b:da:46:50:7c:
                    d0:c3:84:6e:33:21:fd:cd:92:ad:26:96:86:99:f6:
                    5f:4e:87:73:ce:39:4a:69:27:b3:46:a5:6b:7b:a9:
                    4b:79:6a:8f:1c:e6:3c:e6:76:d6:1f:ad:69:3b:8e:
                    a9:f9:3d:95:6c:e6:9d:26:17:31:22:5d:36:cd:63:
                    12:db:22:50:23:cf:f6:11:d8:b3:15:e3:ce:b4:83:
                    17:34:09:fa:52:db:ac:ae:af:c8:94:8e:17:7c:5f:
                    40:00:64:55:1b:86:d5:7c:5d:8f:d7:bd:c6:74:ae:
                    34:b9:3a:a4:b5:5c:ad:a1:b5:bd:90:49:9b:52:47:
                    eb:c7:98:6d:b6:d0:f8:dc:3c:65:b1:55:2d:bb:fd:
                    86:2a:52:9b:c6:24:2f:c8:a3:e2:53:53:0b:b5:fe:
                    7a:ce:fb:b6:5d:4f:68:d4:be:8e:54:18:13:62:1a:
                    53:8d:5f:e1:b7:31:36:a5:41:cd:43:52:bf:34:a7:
                    72:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:3D:0F:EE:98:F9:67:45:E4:83:13:EA:3E:02:08:3D:D0:21:0D:08
            X509v3 Authority Key Identifier:
                keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/Fj0P7pj5Z0XkgxPqPgIIPdAhDQg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.120.38.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c4:9b:46:4b:89:e6:38:a6:e9:78:8c:e4:6f:48:b4:45:e1:35:
         16:7a:2b:d7:20:22:1d:d7:87:af:33:c3:30:84:b7:75:1c:1f:
         5e:cf:a8:86:c3:10:91:a1:14:5c:4c:7b:ef:44:3d:e4:ce:10:
         f1:d1:92:ab:30:83:d4:07:33:20:7c:91:e0:b4:91:d2:00:1c:
         d9:50:57:8d:2f:6b:73:34:b7:65:15:53:dd:33:e9:35:28:b8:
         90:f1:1b:4e:2a:64:8d:6c:fa:a0:cb:88:fd:64:6e:5c:34:fe:
         9b:d8:eb:d5:42:2f:a8:12:81:ba:d6:cb:aa:36:3a:33:bf:f0:
         b7:09:04:2d:fb:bf:87:e8:5e:3e:3e:06:99:36:33:fe:12:72:
         9f:b8:62:38:92:34:74:1e:bf:dc:a6:79:25:a8:ef:7e:ae:26:
         26:b6:56:89:2a:c5:b4:09:71:5e:91:bd:15:1a:5e:68:e7:0a:
         8b:ee:dc:8e:48:d3:59:d1:09:3b:ef:55:28:3d:25:38:89:17:
         ab:4b:9d:09:e0:c5:32:82:23:ef:7b:5c:29:15:f2:0d:60:a8:
         d4:06:75:0d:07:57:89:1e:c9:11:c7:3a:04:be:b5:13:22:f8:
         ba:4e:b1:5e:ae:70:61:76:b0:55:56:36:69:72:8c:9b:7d:e3:
         ae:75:9d:4b
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgICAQAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTkw
QTgyMjg4RDJFMjNEQkZBODc2MzhGM0VCOEI5OTVFMTg5N0U5NTAeFw0yNTA3MjQw
MjA1MzBaFw0yNjA3MTUwMTMwMDFaMDMxMTAvBgNVBAMTKDE2M0QwRkVFOThGOTY3
NDVFNDgzMTNFQTNFMDIwODNERDAyMTBEMDgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC08Ad928Sj1c3FOWbcCtTL70QcsaX6AZtB6jxM5juYjwcBjcja
mMNp3rfFfTKQQQYX7NzeLBQcgEHdMMtjnKDJ8dDFwc2b2kZQfNDDhG4zIf3Nkq0m
loaZ9l9Oh3POOUppJ7NGpWt7qUt5ao8c5jzmdtYfrWk7jqn5PZVs5p0mFzEiXTbN
YxLbIlAjz/YR2LMV4860gxc0CfpS26yur8iUjhd8X0AAZFUbhtV8XY/XvcZ0rjS5
OqS1XK2htb2QSZtSR+vHmG220PjcPGWxVS27/YYqUpvGJC/Io+JTUwu1/nrO+7Zd
T2jUvo5UGBNiGlONX+G3MTalQc1DUr80p3JdAgMBAAGjggIoMIICJDAdBgNVHQ4E
FgQUFj0P7pj5Z0XkgxPqPgIIPdAhDQgwHwYDVR0jBBgwFoAUWQqCKI0uI9v6h2OP
Pri5leGJfpUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzIwMDgzL1dRcUNLSTB1STl2NmgyT1BQcmk1bGVHSmZwVS5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1dRcUNLSTB1STl2NmgyT1BQcmk1
bGVHSmZwVS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8yMDA4My9GajBQN3BqNVowWGtneFBxUGdJSVBkQWhEUWcu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQB03gmMA0GCSqGSIb3DQEBCwUAA4IBAQDEm0ZLieY4pul4jORvSLRF
4TUWeivXICId14evM8MwhLd1HB9ez6iGwxCRoRRcTHvvRD3kzhDx0ZKrMIPUBzMg
fJHgtJHSABzZUFeNL2tzNLdlFVPdM+k1KLiQ8RtOKmSNbPqgy4j9ZG5cNP6b2OvV
Qi+oEoG61suqNjozv/C3CQQt+7+H6F4+PgaZNjP+EnKfuGI4kjR0Hr/cpnklqO9+
riYmtlaJKsW0CXFekb0VGl5o5wqL7tyOSNNZ0Qk771UoPSU4iRerS50J4MUygiPv
e1wpFfINYKjUBnUNB1eJHskRxzoEvrUTIvi6TrFernBhdrBVVjZpcoybfeOudZ1L
-----END CERTIFICATE-----
Generated at Wed Jul 30 03:05:28 2025 by rpki-client