Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/sCo982QNxFc_iY7V4XGJIgfJiag.roa
File:                     sCo982QNxFc_iY7V4XGJIgfJiag.roa (raw, json)
Hash identifier:          Cb+REUIi3EQpTA5GAK7R2Kvfs/G0iaBm3M7v1it+9Zw=
Subject key identifier:   B0:2A:3D:F3:64:0D:C4:57:3F:89:8E:D5:E1:71:89:22:07:C9:89:A8
Certificate issuer:       /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial:       B1
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/sCo982QNxFc_iY7V4XGJIgfJiag.roa
Signing time:             Thu 24 Jul 2025 01:04:26 +0000
ROA not before:           Thu 24 Jul 2025 01:04:26 +0000
ROA not after:            Wed 15 Jul 2026 01:30:01 +0000
asID:                     4694
IP address blocks:        210.129.188.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 Aug 2025 00:57:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 177 (0xb1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
        Validity
            Not Before: Jul 24 01:04:26 2025 GMT
            Not After : Jul 15 01:30:01 2026 GMT
        Subject: CN=B02A3DF3640DC4573F898ED5E171892207C989A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:55:7d:b2:aa:1e:5b:bd:f3:a3:86:58:4f:c2:
                    44:6e:fa:15:77:86:6a:9f:14:8d:33:ab:e2:6b:61:
                    10:7c:3b:f8:cd:00:67:13:f2:bd:ae:9c:11:65:80:
                    a5:95:35:7c:bb:67:75:41:02:86:14:80:46:16:0d:
                    5d:c4:56:48:f6:29:37:6f:fe:03:f0:06:7d:55:0a:
                    0e:e9:bd:63:f9:cd:84:b7:1b:79:41:e1:1c:90:99:
                    9a:c5:60:25:a0:fe:cd:86:76:7b:7b:a4:cd:cb:78:
                    a8:00:74:bd:ed:48:be:a4:4e:5b:45:c6:db:cb:1f:
                    4e:f7:cb:48:14:d4:27:e1:9e:0a:8b:18:12:e8:58:
                    db:6a:ad:e4:b8:e3:34:26:ba:6d:1c:d4:4e:96:e3:
                    16:f7:30:9e:d1:50:16:83:de:c5:9b:d4:c9:e2:d1:
                    e2:e2:e3:a7:a4:b2:76:a9:43:95:b3:42:8b:0e:d9:
                    4a:91:98:49:3f:3b:ef:a3:58:71:87:cf:f5:f2:89:
                    62:8a:be:e2:6f:70:f9:80:35:6c:9e:6a:ce:99:65:
                    6a:86:fa:15:8e:40:bb:92:14:ff:39:49:18:63:fe:
                    57:cf:63:20:07:0d:de:02:7e:58:93:05:99:e3:91:
                    5e:aa:42:f0:e2:77:cc:7e:5e:fa:b9:ec:a6:a9:3e:
                    79:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:2A:3D:F3:64:0D:C4:57:3F:89:8E:D5:E1:71:89:22:07:C9:89:A8
            X509v3 Authority Key Identifier:
                keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/sCo982QNxFc_iY7V4XGJIgfJiag.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.129.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         83:27:9d:5b:b4:c6:fc:d7:8f:ff:97:61:dc:5e:12:ab:ca:01:
         4a:6e:ee:ab:01:e3:9d:a0:71:87:f0:65:64:6c:e3:09:dd:83:
         0c:e4:5a:ce:ea:b9:da:a6:da:22:df:47:90:c4:97:8d:57:0d:
         3b:b4:07:de:fc:97:6f:76:ef:db:3d:5a:3b:cb:63:f8:25:14:
         ad:67:fe:5f:ad:67:7d:66:2b:3b:6b:ba:18:d1:0f:3b:ea:12:
         05:30:4c:29:b7:56:5e:fe:e9:0b:70:7f:b4:d2:c3:d7:aa:18:
         2e:99:96:43:0b:5d:72:08:43:8b:37:fb:d4:db:fd:f9:0a:18:
         f7:57:99:cd:f8:47:67:9f:4b:fc:e4:97:4b:67:34:89:53:cd:
         35:0d:9d:f3:5b:94:22:48:76:8f:26:87:25:d5:ee:02:32:b6:
         cf:57:dc:6d:0d:ad:15:15:63:9f:c7:bc:26:d2:b2:ca:ac:e3:
         ba:61:87:8e:a7:30:0d:a5:98:4c:6c:c4:56:40:de:76:72:f8:
         a3:45:d3:99:6c:d2:2a:c1:df:73:27:f9:d4:4c:15:3c:bb:ee:
         19:70:c7:0a:c9:0d:7e:4f:92:c7:9d:4c:09:a8:7b:32:d7:e9:
         fe:31:f6:84:bf:a1:42:d8:8f:c6:4b:64:87:6b:aa:c3:68:a0:
         f9:19:18:de
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgICALEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTkw
QTgyMjg4RDJFMjNEQkZBODc2MzhGM0VCOEI5OTVFMTg5N0U5NTAeFw0yNTA3MjQw
MTA0MjZaFw0yNjA3MTUwMTMwMDFaMDMxMTAvBgNVBAMTKEIwMkEzREYzNjQwREM0
NTczRjg5OEVENUUxNzE4OTIyMDdDOTg5QTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDCVX2yqh5bvfOjhlhPwkRu+hV3hmqfFI0zq+JrYRB8O/jNAGcT
8r2unBFlgKWVNXy7Z3VBAoYUgEYWDV3EVkj2KTdv/gPwBn1VCg7pvWP5zYS3G3lB
4RyQmZrFYCWg/s2Gdnt7pM3LeKgAdL3tSL6kTltFxtvLH073y0gU1CfhngqLGBLo
WNtqreS44zQmum0c1E6W4xb3MJ7RUBaD3sWb1Mni0eLi46eksnapQ5WzQosO2UqR
mEk/O++jWHGHz/XyiWKKvuJvcPmANWyeas6ZZWqG+hWOQLuSFP85SRhj/lfPYyAH
Dd4CfliTBZnjkV6qQvDid8x+Xvq57KapPnmHAgMBAAGjggIoMIICJDAdBgNVHQ4E
FgQUsCo982QNxFc/iY7V4XGJIgfJiagwHwYDVR0jBBgwFoAUWQqCKI0uI9v6h2OP
Pri5leGJfpUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzIwMDgzL1dRcUNLSTB1STl2NmgyT1BQcmk1bGVHSmZwVS5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1dRcUNLSTB1STl2NmgyT1BQcmk1
bGVHSmZwVS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8yMDA4My9zQ285ODJRTnhGY19pWTdWNFhHSklnZkppYWcu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQC0oG8MA0GCSqGSIb3DQEBCwUAA4IBAQCDJ51btMb814//l2HcXhKr
ygFKbu6rAeOdoHGH8GVkbOMJ3YMM5FrO6rnaptoi30eQxJeNVw07tAfe/Jdvdu/b
PVo7y2P4JRStZ/5frWd9Zis7a7oY0Q876hIFMEwpt1Ze/ukLcH+00sPXqhgumZZD
C11yCEOLN/vU2/35Chj3V5nN+Ednn0v85JdLZzSJU801DZ3zW5QiSHaPJocl1e4C
MrbPV9xtDa0VFWOfx7wm0rLKrOO6YYeOpzANpZhMbMRWQN52cvijRdOZbNIqwd9z
J/nUTBU8u+4ZcMcKyQ1+T5LHnUwJqHsy1+n+MfaEv6FC2I/GS2SHa6rDaKD5GRje
-----END CERTIFICATE-----
Generated at Wed Jul 30 03:03:09 2025 by rpki-client