Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/sO0O-O7oun3Qqse7YI5R1KF_NYY.roa
File:                     sO0O-O7oun3Qqse7YI5R1KF_NYY.roa (raw, json)
Hash identifier:          PIMHeA6CBOhBnSZgLX18cuyrKxfH96oJY+N3tZv4WZw=
Subject key identifier:   B0:ED:0E:F8:EE:E8:BA:7D:D0:AA:C7:BB:60:8E:51:D4:A1:7F:35:86
Certificate issuer:       /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial:       97
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/sO0O-O7oun3Qqse7YI5R1KF_NYY.roa
Signing time:             Thu 24 Jul 2025 00:46:50 +0000
ROA not before:           Thu 24 Jul 2025 00:46:50 +0000
ROA not after:            Wed 15 Jul 2026 01:30:01 +0000
asID:                     4694
IP address blocks:        202.230.24.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 Aug 2025 01:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 151 (0x97)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
        Validity
            Not Before: Jul 24 00:46:50 2025 GMT
            Not After : Jul 15 01:30:01 2026 GMT
        Subject: CN=B0ED0EF8EEE8BA7DD0AAC7BB608E51D4A17F3586
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:2b:7b:cc:d2:1f:07:70:c1:54:2e:ac:85:f3:
                    e0:20:59:da:fd:7e:12:7d:50:0a:04:38:1d:3a:15:
                    a6:71:2d:74:df:0c:b2:43:65:c3:fc:ba:fa:37:c2:
                    21:72:4f:73:a9:0f:49:70:d7:6c:30:27:dc:53:85:
                    27:8a:5c:77:3b:94:9b:69:6b:f7:a3:1f:53:1c:fb:
                    fe:87:b7:8e:c9:49:97:47:1a:0d:62:5e:e0:cf:c4:
                    ed:96:f5:98:5f:9d:a7:a8:70:f8:0e:45:a9:8d:5e:
                    72:b0:68:89:5b:72:ad:00:cc:04:59:a8:49:15:2f:
                    a2:76:13:50:67:95:70:e7:3a:44:61:4b:c5:bd:73:
                    fc:40:01:98:d2:b3:9c:7c:19:54:3c:66:ec:ea:ab:
                    27:75:1a:04:96:f9:7e:6c:9b:22:3a:6e:b8:d5:69:
                    cd:e9:22:ca:e0:a3:c5:28:da:f3:5d:65:d5:09:fd:
                    3f:a5:30:1b:0f:bd:37:ab:46:8a:a6:a6:cf:d0:38:
                    7e:58:0d:45:ee:e2:2d:c0:7e:ed:9f:02:86:bf:93:
                    b2:02:09:b9:45:a7:97:ea:63:06:4a:5e:91:87:63:
                    d0:fe:33:63:74:17:57:22:46:c7:77:2d:c6:6b:64:
                    ac:9e:ae:4f:77:5a:af:d4:c6:53:c7:11:5e:26:f1:
                    2c:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:ED:0E:F8:EE:E8:BA:7D:D0:AA:C7:BB:60:8E:51:D4:A1:7F:35:86
            X509v3 Authority Key Identifier:
                keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/sO0O-O7oun3Qqse7YI5R1KF_NYY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.230.24.0/21

    Signature Algorithm: sha256WithRSAEncryption
         3d:f6:8e:b0:03:80:f9:7f:d5:ad:32:fa:20:43:7e:7c:04:7d:
         23:6f:08:8b:a0:8d:27:8b:7d:2e:59:be:93:24:ed:91:1b:26:
         9f:35:76:09:f1:e9:02:62:0b:20:f4:5e:21:e7:da:64:fd:24:
         fb:b9:26:08:a4:c9:27:21:0e:2a:e8:cf:fc:e8:fb:11:29:90:
         be:36:2b:c6:07:0a:bf:b1:c5:91:91:e3:90:3d:e5:d6:92:81:
         cc:f2:bf:ff:5a:af:8b:34:98:42:d9:f6:5e:d5:93:42:ec:a4:
         59:c2:53:e6:f6:b9:64:e1:52:85:4c:4c:cc:da:01:67:ee:ed:
         d3:1e:17:54:64:dd:34:7b:a7:2a:eb:73:22:ba:77:9d:55:40:
         e5:4f:17:71:bb:02:4a:bb:85:1d:79:d1:c1:d5:f1:42:39:96:
         ad:d6:b0:f3:58:d6:ed:02:40:23:86:d0:97:48:22:f2:57:94:
         f3:c3:4e:a0:bf:b4:51:ec:d1:f6:cd:3e:34:68:d9:16:a0:23:
         dc:8f:3a:7e:de:a1:09:9b:92:d9:b7:d1:d5:ef:27:4f:8a:55:
         f8:c0:63:a7:eb:76:35:03:b3:37:b0:b0:43:57:f8:86:c5:b7:
         0d:28:5c:d5:62:37:c2:87:90:cf:e8:0c:7e:28:a6:a3:1a:08:
         f2:c0:02:3e
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgICAJcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTkw
QTgyMjg4RDJFMjNEQkZBODc2MzhGM0VCOEI5OTVFMTg5N0U5NTAeFw0yNTA3MjQw
MDQ2NTBaFw0yNjA3MTUwMTMwMDFaMDMxMTAvBgNVBAMTKEIwRUQwRUY4RUVFOEJB
N0REMEFBQzdCQjYwOEU1MUQ0QTE3RjM1ODYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC4K3vM0h8HcMFULqyF8+AgWdr9fhJ9UAoEOB06FaZxLXTfDLJD
ZcP8uvo3wiFyT3OpD0lw12wwJ9xThSeKXHc7lJtpa/ejH1Mc+/6Ht47JSZdHGg1i
XuDPxO2W9ZhfnaeocPgORamNXnKwaIlbcq0AzARZqEkVL6J2E1BnlXDnOkRhS8W9
c/xAAZjSs5x8GVQ8Zuzqqyd1GgSW+X5smyI6brjVac3pIsrgo8Uo2vNdZdUJ/T+l
MBsPvTerRoqmps/QOH5YDUXu4i3Afu2fAoa/k7ICCblFp5fqYwZKXpGHY9D+M2N0
F1ciRsd3LcZrZKyerk93Wq/UxlPHEV4m8Sy9AgMBAAGjggIoMIICJDAdBgNVHQ4E
FgQUsO0O+O7oun3Qqse7YI5R1KF/NYYwHwYDVR0jBBgwFoAUWQqCKI0uI9v6h2OP
Pri5leGJfpUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzIwMDgzL1dRcUNLSTB1STl2NmgyT1BQcmk1bGVHSmZwVS5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1dRcUNLSTB1STl2NmgyT1BQcmk1
bGVHSmZwVS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8yMDA4My9zTzBPLU83b3VuM1Fxc2U3WUk1UjFLRl9OWVku
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQDyuYYMA0GCSqGSIb3DQEBCwUAA4IBAQA99o6wA4D5f9WtMvogQ358
BH0jbwiLoI0ni30uWb6TJO2RGyafNXYJ8ekCYgsg9F4h59pk/ST7uSYIpMknIQ4q
6M/86PsRKZC+NivGBwq/scWRkeOQPeXWkoHM8r//Wq+LNJhC2fZe1ZNC7KRZwlPm
9rlk4VKFTEzM2gFn7u3THhdUZN00e6cq63MiunedVUDlTxdxuwJKu4UdedHB1fFC
OZat1rDzWNbtAkAjhtCXSCLyV5Tzw06gv7RR7NH2zT40aNkWoCPcjzp+3qEJm5LZ
t9HV7ydPilX4wGOn63Y1A7M3sLBDV/iGxbcNKFzVYjfCh5DP6Ax+KKajGgjywAI+
-----END CERTIFICATE-----
Generated at Wed Jul 30 03:21:28 2025 by rpki-client