Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/Xr_O1k2aWzeiyjf1V3LyDwIESwM.roa
File:                     Xr_O1k2aWzeiyjf1V3LyDwIESwM.roa (raw, json)
Hash identifier:          XZ3jHlKIXYI66AFrhTxvBx1+mzJPjIQTPIc55hi1drI=
Subject key identifier:   5E:BF:CE:D6:4D:9A:5B:37:A2:CA:37:F5:57:72:F2:0F:02:04:4B:03
Certificate issuer:       /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial:       76
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/Xr_O1k2aWzeiyjf1V3LyDwIESwM.roa
Signing time:             Thu 17 Jul 2025 01:08:54 +0000
ROA not before:           Thu 17 Jul 2025 01:08:54 +0000
ROA not after:            Wed 15 Jul 2026 01:30:01 +0000
asID:                     4694
IP address blocks:        202.234.137.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 Aug 2025 01:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118 (0x76)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
        Validity
            Not Before: Jul 17 01:08:54 2025 GMT
            Not After : Jul 15 01:30:01 2026 GMT
        Subject: CN=5EBFCED64D9A5B37A2CA37F55772F20F02044B03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:87:0d:59:d4:36:8d:b0:25:3d:91:40:a4:af:
                    4a:34:29:0b:72:b6:e2:0c:3d:67:67:46:2a:f0:12:
                    32:ee:51:5d:31:01:80:84:20:03:8d:61:47:3c:7b:
                    c1:b3:5e:e9:79:b4:a1:94:71:f9:ee:eb:6e:52:5e:
                    b6:68:cc:5f:99:52:26:77:fb:6d:c7:38:ad:cd:2e:
                    0b:73:88:a8:03:f4:26:5f:55:8c:ee:03:ea:da:c3:
                    8e:73:5a:77:73:6e:6e:79:23:b1:c8:5c:5b:e8:f2:
                    23:5e:a7:ec:e0:0f:bb:2c:59:fa:13:b3:07:ae:7b:
                    74:a7:07:16:ea:84:27:92:5c:42:cb:35:43:dc:b7:
                    1a:f0:dd:66:6d:76:d7:8c:5a:d9:73:6b:fa:d4:59:
                    e3:72:89:74:49:0f:cb:1a:a2:2f:d3:41:47:e8:72:
                    61:2d:9d:b8:30:a7:72:d1:7c:10:f3:d6:94:86:81:
                    ca:e7:c5:d1:2d:b9:90:e3:78:7e:60:c2:2d:c1:a7:
                    93:5c:f9:aa:39:dc:3f:cb:a0:c6:72:8e:07:74:f3:
                    54:d4:38:97:e4:32:de:6a:14:8f:7e:49:ae:fc:52:
                    b2:22:b2:3a:72:cb:ee:1b:65:b7:4f:5e:d3:79:f1:
                    a0:f8:66:69:be:12:09:c5:02:4a:ab:11:8f:d0:49:
                    f1:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:BF:CE:D6:4D:9A:5B:37:A2:CA:37:F5:57:72:F2:0F:02:04:4B:03
            X509v3 Authority Key Identifier:
                keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/Xr_O1k2aWzeiyjf1V3LyDwIESwM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.234.137.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:46:8e:28:6f:1d:98:53:bd:11:15:50:d6:01:cd:01:50:8f:
         d6:bd:d3:8f:98:37:a4:18:7c:c4:34:1d:a2:c4:95:ab:8f:37:
         ef:ed:8c:2d:c5:9a:c4:b5:8e:51:26:60:ba:83:77:65:88:e1:
         09:09:10:ef:87:3e:0b:99:6f:cf:18:bc:a4:88:8e:a0:58:40:
         23:ae:fb:b8:b7:fc:9d:e9:8c:88:87:f5:be:19:3d:e5:36:62:
         7b:c3:ac:b6:a2:6f:8a:79:e6:5b:54:21:41:87:10:87:c9:5d:
         42:d0:dc:ee:14:72:30:40:15:53:07:a9:c2:fd:25:5b:81:c0:
         d4:0e:a3:c1:dd:bc:50:39:8f:da:ec:e2:40:30:46:48:c0:5a:
         dc:01:27:69:22:6a:d5:85:a9:37:78:70:66:4e:6f:2e:51:26:
         1d:23:32:15:13:df:e3:7f:9e:d6:2d:e3:f9:ce:47:7b:4b:84:
         60:df:cd:df:ba:77:45:87:fb:91:6a:11:52:30:a0:48:03:47:
         8a:74:87:62:6f:57:30:48:32:2e:4b:d1:27:86:3f:aa:ee:06:
         47:ec:ab:25:77:ec:78:3f:5c:6a:59:c8:6e:61:63:08:47:fe:
         5f:0c:7a:c7:93:32:25:75:58:54:4b:de:53:ea:9f:58:b3:58:
         a5:af:7b:ec
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIBdjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1OTBB
ODIyODhEMkUyM0RCRkE4NzYzOEYzRUI4Qjk5NUUxODk3RTk1MB4XDTI1MDcxNzAx
MDg1NFoXDTI2MDcxNTAxMzAwMVowMzExMC8GA1UEAxMoNUVCRkNFRDY0RDlBNUIz
N0EyQ0EzN0Y1NTc3MkYyMEYwMjA0NEIwMzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALqHDVnUNo2wJT2RQKSvSjQpC3K24gw9Z2dGKvASMu5RXTEBgIQg
A41hRzx7wbNe6Xm0oZRx+e7rblJetmjMX5lSJnf7bcc4rc0uC3OIqAP0Jl9VjO4D
6trDjnNad3NubnkjschcW+jyI16n7OAPuyxZ+hOzB657dKcHFuqEJ5JcQss1Q9y3
GvDdZm1214xa2XNr+tRZ43KJdEkPyxqiL9NBR+hyYS2duDCnctF8EPPWlIaByufF
0S25kON4fmDCLcGnk1z5qjncP8ugxnKOB3TzVNQ4l+Qy3moUj35JrvxSsiKyOnLL
7htlt09e03nxoPhmab4SCcUCSqsRj9BJ8fkCAwEAAaOCAigwggIkMB0GA1UdDgQW
BBRev87WTZpbN6LKN/VXcvIPAgRLAzAfBgNVHSMEGDAWgBRZCoIojS4j2/qHY48+
uLmV4Yl+lTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAwODMvV1FxQ0tJMHVJOXY2aDJPUFByaTVsZUdKZnBVLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvV1FxQ0tJMHVJOXY2aDJPUFByaTVs
ZUdKZnBVLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzIwMDgzL1hyX08xazJhV3plaXlqZjFWM0x5RHdJRVN3TS5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBADK6okwDQYJKoZIhvcNAQELBQADggEBAAFGjihvHZhTvREVUNYBzQFQ
j9a904+YN6QYfMQ0HaLElauPN+/tjC3FmsS1jlEmYLqDd2WI4QkJEO+HPguZb88Y
vKSIjqBYQCOu+7i3/J3pjIiH9b4ZPeU2YnvDrLaib4p55ltUIUGHEIfJXULQ3O4U
cjBAFVMHqcL9JVuBwNQOo8HdvFA5j9rs4kAwRkjAWtwBJ2kiatWFqTd4cGZOby5R
Jh0jMhUT3+N/ntYt4/nOR3tLhGDfzd+6d0WH+5FqEVIwoEgDR4p0h2JvVzBIMi5L
0SeGP6ruBkfsqyV37Hg/XGpZyG5hYwhH/l8MeseTMiV1WFRL3lPqn1izWKWve+w=
-----END CERTIFICATE-----
Generated at Wed Jul 30 03:06:47 2025 by rpki-client