Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/jqGwlB1t4n2ZvkaU3-tSl-MgXdE.roa
File:                     jqGwlB1t4n2ZvkaU3-tSl-MgXdE.roa (raw, json)
Hash identifier:          FKj1gefNCtulmFO4JCRBsK88HzAxXe3ErxW6hoTbNtI=
Subject key identifier:   8E:A1:B0:94:1D:6D:E2:7D:99:BE:46:94:DF:EB:52:97:E3:20:5D:D1
Certificate issuer:       /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial:       BD
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/jqGwlB1t4n2ZvkaU3-tSl-MgXdE.roa
Signing time:             Thu 24 Jul 2025 01:09:52 +0000
ROA not before:           Thu 24 Jul 2025 01:09:52 +0000
ROA not after:            Wed 15 Jul 2026 01:30:01 +0000
asID:                     4694
IP address blocks:        210.140.248.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 Aug 2025 01:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 189 (0xbd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
        Validity
            Not Before: Jul 24 01:09:52 2025 GMT
            Not After : Jul 15 01:30:01 2026 GMT
        Subject: CN=8EA1B0941D6DE27D99BE4694DFEB5297E3205DD1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d2:5b:31:14:50:17:ef:f2:12:1f:ed:da:09:
                    2c:fc:dc:ff:aa:db:bc:0e:47:c3:e6:92:d0:14:5b:
                    0e:b0:4e:cc:0c:2f:af:10:eb:f1:db:f4:88:f4:83:
                    49:59:04:cf:fd:8c:13:e1:57:ab:e2:15:e2:37:7f:
                    4a:de:18:70:64:bc:fe:20:22:73:88:1a:1d:65:43:
                    dd:e2:d6:1d:a6:1a:28:a2:d2:75:21:fb:2a:75:c6:
                    01:46:ef:03:ad:a6:7f:ef:78:6b:fe:55:df:79:96:
                    c1:ee:26:32:0b:c6:cb:40:70:a6:26:26:d3:f0:18:
                    cb:4c:7a:ef:51:bc:84:80:07:78:29:06:5a:7d:1a:
                    2e:4a:1a:94:0a:82:8d:31:4a:e7:8c:ba:bc:ea:c2:
                    ca:79:e8:22:04:60:c6:5a:a4:ed:43:0e:ab:2f:0d:
                    e1:46:c7:df:f4:78:a7:7c:b2:6e:7e:72:a8:3d:6f:
                    24:be:e9:8c:f0:86:97:14:b4:f4:42:f0:38:2f:a9:
                    6e:77:81:bf:bc:ef:c5:b5:53:5e:db:e0:c0:ba:01:
                    61:47:f7:ad:43:87:da:54:e2:ed:c1:ad:07:db:37:
                    49:47:ea:a9:ff:da:44:a8:9b:0b:a3:2f:4a:89:9f:
                    9c:c1:51:c8:18:b3:08:6b:4c:ff:c7:14:74:22:ee:
                    61:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:A1:B0:94:1D:6D:E2:7D:99:BE:46:94:DF:EB:52:97:E3:20:5D:D1
            X509v3 Authority Key Identifier:
                keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/jqGwlB1t4n2ZvkaU3-tSl-MgXdE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.140.248.0/21

    Signature Algorithm: sha256WithRSAEncryption
         4d:4f:8e:47:a7:cd:7d:5b:8e:81:57:38:d9:17:20:82:c5:15:
         fb:35:45:47:89:ee:36:a6:24:af:5c:8f:ab:9f:ae:71:9c:99:
         d9:c5:53:b2:55:71:d1:7c:b4:c5:67:18:75:be:66:d6:fc:a2:
         8f:57:49:af:2a:d9:5e:bc:0a:ba:18:5c:37:d0:92:10:20:65:
         64:b7:b1:cb:89:6d:8f:21:a2:e6:7e:e2:75:e8:42:4d:4a:15:
         f3:ea:4b:7e:46:6f:b1:c0:60:6e:8a:3c:33:bc:30:a9:ec:05:
         49:2a:3d:f4:18:75:54:12:44:eb:47:ee:f5:52:db:e1:95:10:
         4f:1c:7b:94:40:41:fc:bd:00:e6:ed:f9:6a:87:d2:ad:f2:9f:
         64:b3:8c:96:91:75:e0:c3:bd:8c:d0:12:88:91:39:2e:bc:0c:
         3a:ab:69:b6:d4:4b:9b:ce:42:b5:43:52:72:cc:10:e7:41:e6:
         88:2e:d5:1a:f3:87:aa:6b:c8:9b:64:2e:c1:89:9a:a7:6e:ba:
         e8:65:3e:8e:f4:93:4e:3b:54:21:c5:80:90:ce:ff:fe:71:59:
         75:fb:50:a4:1d:fc:43:77:aa:e6:4b:ea:dd:ee:e9:57:e2:a2:
         21:ee:8b:79:fd:43:d0:4c:b9:1c:34:46:04:59:74:09:c7:14:
         43:ce:ec:08
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgICAL0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTkw
QTgyMjg4RDJFMjNEQkZBODc2MzhGM0VCOEI5OTVFMTg5N0U5NTAeFw0yNTA3MjQw
MTA5NTJaFw0yNjA3MTUwMTMwMDFaMDMxMTAvBgNVBAMTKDhFQTFCMDk0MUQ2REUy
N0Q5OUJFNDY5NERGRUI1Mjk3RTMyMDVERDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC90lsxFFAX7/ISH+3aCSz83P+q27wOR8PmktAUWw6wTswML68Q
6/Hb9Ij0g0lZBM/9jBPhV6viFeI3f0reGHBkvP4gInOIGh1lQ93i1h2mGiii0nUh
+yp1xgFG7wOtpn/veGv+Vd95lsHuJjILxstAcKYmJtPwGMtMeu9RvISAB3gpBlp9
Gi5KGpQKgo0xSueMurzqwsp56CIEYMZapO1DDqsvDeFGx9/0eKd8sm5+cqg9byS+
6YzwhpcUtPRC8DgvqW53gb+878W1U17b4MC6AWFH961Dh9pU4u3BrQfbN0lH6qn/
2kSomwujL0qJn5zBUcgYswhrTP/HFHQi7mFFAgMBAAGjggIoMIICJDAdBgNVHQ4E
FgQUjqGwlB1t4n2ZvkaU3+tSl+MgXdEwHwYDVR0jBBgwFoAUWQqCKI0uI9v6h2OP
Pri5leGJfpUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzIwMDgzL1dRcUNLSTB1STl2NmgyT1BQcmk1bGVHSmZwVS5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1dRcUNLSTB1STl2NmgyT1BQcmk1
bGVHSmZwVS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8yMDA4My9qcUd3bEIxdDRuMlp2a2FVMy10U2wtTWdYZEUu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQD0oz4MA0GCSqGSIb3DQEBCwUAA4IBAQBNT45Hp819W46BVzjZFyCC
xRX7NUVHie42piSvXI+rn65xnJnZxVOyVXHRfLTFZxh1vmbW/KKPV0mvKtlevAq6
GFw30JIQIGVkt7HLiW2PIaLmfuJ16EJNShXz6kt+Rm+xwGBuijwzvDCp7AVJKj30
GHVUEkTrR+71UtvhlRBPHHuUQEH8vQDm7flqh9Kt8p9ks4yWkXXgw72M0BKIkTku
vAw6q2m21EubzkK1Q1JyzBDnQeaILtUa84eqa8ibZC7BiZqnbrroZT6O9JNOO1Qh
xYCQzv/+cVl1+1CkHfxDd6rmS+rd7ulX4qIh7ot5/UPQTLkcNEYEWXQJxxRDzuwI
-----END CERTIFICATE-----
Generated at Wed Jul 30 03:20:13 2025 by rpki-client