Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/PQCHa1vx8gRbQTGB-20SUWt-SS0.roa
File:                     PQCHa1vx8gRbQTGB-20SUWt-SS0.roa (raw, json)
Hash identifier:          DnTn5Uc7JcM6XraneFQ1LdkYwQbpMY9HWPXL9XTIa5k=
Subject key identifier:   3D:00:87:6B:5B:F1:F2:04:5B:41:31:81:FB:6D:12:51:6B:7E:49:2D
Certificate issuer:       /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial:       BA
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/PQCHa1vx8gRbQTGB-20SUWt-SS0.roa
Signing time:             Thu 24 Jul 2025 01:09:50 +0000
ROA not before:           Thu 24 Jul 2025 01:09:50 +0000
ROA not after:            Wed 15 Jul 2026 01:30:01 +0000
asID:                     4694
IP address blocks:        210.140.240.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 Aug 2025 01:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 186 (0xba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
        Validity
            Not Before: Jul 24 01:09:50 2025 GMT
            Not After : Jul 15 01:30:01 2026 GMT
        Subject: CN=3D00876B5BF1F2045B413181FB6D12516B7E492D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:37:b1:cd:d7:3d:22:37:ec:6a:b9:5f:a8:b6:
                    e0:57:dd:ce:5c:b7:83:a5:4a:9c:ef:cf:60:a7:92:
                    53:58:8f:05:d4:c3:96:53:ba:51:6e:9f:d8:c5:ab:
                    48:73:ec:bb:d3:58:e8:72:e3:32:25:07:f1:f1:d1:
                    48:c5:2e:c9:69:bd:89:14:0e:9d:aa:51:c3:3f:29:
                    ac:8f:a9:be:b5:ef:b9:28:a2:6c:2c:ac:1e:27:28:
                    a9:51:22:9a:53:17:a4:a5:2b:53:a7:ba:28:77:4b:
                    88:d6:7d:9b:2c:e3:a9:b9:0c:3e:0e:d2:32:0d:5b:
                    74:d4:9f:2a:38:66:ac:cd:1d:a9:14:6e:74:0b:10:
                    40:50:f0:f9:49:86:7e:72:8a:69:f8:3d:8e:a9:5d:
                    38:64:6e:19:c1:c4:8f:1a:97:24:d5:39:0e:7e:a1:
                    6e:04:5c:97:67:d9:50:86:40:56:66:4e:5a:38:2c:
                    fd:24:55:c9:75:30:40:e8:82:66:26:20:11:3c:aa:
                    6a:52:d7:d2:e5:b9:1e:39:a5:c6:a9:6d:b8:7c:99:
                    8c:57:f0:fd:f2:ae:44:ac:11:a0:13:a7:09:68:5d:
                    b8:0c:70:f6:c5:e9:b5:9c:c8:e5:c2:ba:c1:25:6d:
                    57:98:4c:db:e0:ca:d3:bd:62:19:e7:dc:0a:fe:d4:
                    bf:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:00:87:6B:5B:F1:F2:04:5B:41:31:81:FB:6D:12:51:6B:7E:49:2D
            X509v3 Authority Key Identifier:
                keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/PQCHa1vx8gRbQTGB-20SUWt-SS0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.140.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         85:50:6d:1e:74:43:90:06:e3:6d:e8:33:44:c8:54:46:d1:4f:
         08:c1:cd:c3:fa:24:33:ba:80:31:e1:f1:fb:a1:95:d1:a7:2b:
         78:7c:e5:b7:fe:be:26:4e:9c:82:3a:6d:46:59:f6:f2:64:2f:
         4c:fd:17:52:d3:7a:e4:df:aa:e8:12:b4:89:fc:e4:cd:2f:a2:
         82:ec:e1:e2:8a:6e:89:57:c9:f4:d3:97:92:d6:01:59:33:df:
         84:e2:af:bc:b8:59:0f:34:f4:9c:83:a3:08:79:02:98:e3:c9:
         40:bb:43:44:59:28:dd:c0:5d:39:30:65:ba:0f:a2:dc:1a:65:
         e6:4c:84:16:93:76:64:51:13:93:3e:02:1f:2a:6a:c7:d1:0e:
         4e:46:e5:3c:32:09:d4:c8:3c:02:b8:45:23:6c:22:aa:a9:c3:
         5f:a3:33:54:71:32:72:11:9b:51:03:e2:c1:f2:dc:8d:bc:bb:
         90:1d:c8:28:dc:23:91:d2:cd:3d:28:76:d4:39:50:8c:3a:e0:
         a0:ff:10:93:a7:46:3a:86:49:d4:e2:11:75:6b:5e:20:1b:4d:
         58:dc:12:a4:bf:14:35:8a:07:6e:e1:d6:21:5b:49:7c:16:4b:
         dc:ea:87:d6:5d:e2:1e:59:6a:d9:83:3f:23:a0:14:5b:2a:3a:
         42:cd:34:52
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgICALowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTkw
QTgyMjg4RDJFMjNEQkZBODc2MzhGM0VCOEI5OTVFMTg5N0U5NTAeFw0yNTA3MjQw
MTA5NTBaFw0yNjA3MTUwMTMwMDFaMDMxMTAvBgNVBAMTKDNEMDA4NzZCNUJGMUYy
MDQ1QjQxMzE4MUZCNkQxMjUxNkI3RTQ5MkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCyN7HN1z0iN+xquV+otuBX3c5ct4OlSpzvz2CnklNYjwXUw5ZT
ulFun9jFq0hz7LvTWOhy4zIlB/Hx0UjFLslpvYkUDp2qUcM/KayPqb6177koomws
rB4nKKlRIppTF6SlK1Onuih3S4jWfZss46m5DD4O0jINW3TUnyo4ZqzNHakUbnQL
EEBQ8PlJhn5yimn4PY6pXThkbhnBxI8alyTVOQ5+oW4EXJdn2VCGQFZmTlo4LP0k
Vcl1MEDogmYmIBE8qmpS19LluR45pcapbbh8mYxX8P3yrkSsEaATpwloXbgMcPbF
6bWcyOXCusElbVeYTNvgytO9Yhnn3Ar+1L+BAgMBAAGjggIoMIICJDAdBgNVHQ4E
FgQUPQCHa1vx8gRbQTGB+20SUWt+SS0wHwYDVR0jBBgwFoAUWQqCKI0uI9v6h2OP
Pri5leGJfpUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzIwMDgzL1dRcUNLSTB1STl2NmgyT1BQcmk1bGVHSmZwVS5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1dRcUNLSTB1STl2NmgyT1BQcmk1
bGVHSmZwVS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8yMDA4My9QUUNIYTF2eDhnUmJRVEdCLTIwU1VXdC1TUzAu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQC0ozwMA0GCSqGSIb3DQEBCwUAA4IBAQCFUG0edEOQBuNt6DNEyFRG
0U8Iwc3D+iQzuoAx4fH7oZXRpyt4fOW3/r4mTpyCOm1GWfbyZC9M/RdS03rk36ro
ErSJ/OTNL6KC7OHiim6JV8n005eS1gFZM9+E4q+8uFkPNPScg6MIeQKY48lAu0NE
WSjdwF05MGW6D6LcGmXmTIQWk3ZkUROTPgIfKmrH0Q5ORuU8MgnUyDwCuEUjbCKq
qcNfozNUcTJyEZtRA+LB8tyNvLuQHcgo3COR0s09KHbUOVCMOuCg/xCTp0Y6hknU
4hF1a14gG01Y3BKkvxQ1igdu4dYhW0l8Fkvc6ofWXeIeWWrZgz8joBRbKjpCzTRS
-----END CERTIFICATE-----
Generated at Wed Jul 30 03:08:15 2025 by rpki-client