Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/307/pYW23rIMViDW33W3eia9bS7kV2A.roa
File:                     pYW23rIMViDW33W3eia9bS7kV2A.roa (raw, json)
Hash identifier:          888T9Yw0oIiD6x0bWUMXSEF57vL/sWsflVRcqn63Q94=
Subject key identifier:   A5:85:B6:DE:B2:0C:56:20:D6:DF:75:B7:7A:26:BD:6D:2E:E4:57:60
Certificate issuer:       /CN=6D1ED16D8C6D3BA40BF42CB3A29652ADAB76D061
Certificate serial:       51
Authority key identifier: 6D:1E:D1:6D:8C:6D:3B:A4:0B:F4:2C:B3:A2:96:52:AD:AB:76:D0:61
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/bR7RbYxtO6QL9CyzopZSrat20GE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/pYW23rIMViDW33W3eia9bS7kV2A.roa
Signing time:             Wed 01 Oct 2025 01:32:14 +0000
ROA not before:           Wed 01 Oct 2025 01:32:14 +0000
ROA not after:            Tue 15 Sep 2026 01:30:02 +0000
asID:                     23783
IP address blocks:        219.124.100.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/bR7RbYxtO6QL9CyzopZSrat20GE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/bR7RbYxtO6QL9CyzopZSrat20GE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/bR7RbYxtO6QL9CyzopZSrat20GE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Oct 2025 20:03:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 81 (0x51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D1ED16D8C6D3BA40BF42CB3A29652ADAB76D061
        Validity
            Not Before: Oct  1 01:32:14 2025 GMT
            Not After : Sep 15 01:30:02 2026 GMT
        Subject: CN=A585B6DEB20C5620D6DF75B77A26BD6D2EE45760
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e4:72:6a:b8:0e:3f:26:ee:e2:8a:cf:13:d8:
                    2a:3d:df:b2:30:a7:2a:6a:85:75:81:f2:b5:6a:ba:
                    0f:11:f8:84:a4:4d:01:40:9b:bb:1f:36:8b:da:a5:
                    e2:04:92:83:47:ec:29:4f:cd:01:e7:0f:e0:92:21:
                    80:f4:51:80:14:83:ec:6b:0a:df:9d:6a:c6:20:97:
                    a8:23:11:32:29:7a:4a:b3:04:7e:41:3b:4a:e2:d4:
                    1c:d3:a7:63:49:21:65:c1:8b:c9:18:89:eb:78:9d:
                    ff:50:1c:bf:57:e2:35:04:fa:0a:67:f3:bb:83:d1:
                    4a:4e:d2:21:9f:bd:ca:16:30:5f:39:39:e9:7f:f7:
                    ff:57:0d:89:81:87:b8:f1:e8:79:78:30:3e:07:c0:
                    10:61:0b:e8:4c:6a:97:cc:20:0a:c2:07:18:26:49:
                    92:36:86:d6:41:19:6d:a2:3d:6f:a8:8b:ab:a7:7e:
                    8d:da:0e:0c:88:81:fa:48:db:ee:db:7e:52:b1:94:
                    32:16:c3:e1:c9:32:1b:76:21:ff:a7:34:b5:ae:9e:
                    ff:af:79:5e:98:e5:0c:7f:65:a3:7f:d9:12:24:21:
                    3f:50:22:7e:e7:bc:cb:f2:6b:3c:b8:ee:3e:b5:ca:
                    80:28:78:e4:11:72:60:27:cb:a6:47:83:db:d0:d7:
                    86:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:85:B6:DE:B2:0C:56:20:D6:DF:75:B7:7A:26:BD:6D:2E:E4:57:60
            X509v3 Authority Key Identifier:
                keyid:6D:1E:D1:6D:8C:6D:3B:A4:0B:F4:2C:B3:A2:96:52:AD:AB:76:D0:61

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/bR7RbYxtO6QL9CyzopZSrat20GE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/bR7RbYxtO6QL9CyzopZSrat20GE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/pYW23rIMViDW33W3eia9bS7kV2A.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.124.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         40:e0:49:0f:00:86:eb:7e:8d:49:78:14:88:57:4f:a9:21:23:
         22:11:6b:8c:84:42:bb:f9:cc:85:24:de:3d:d0:64:b6:42:e1:
         a7:e8:ea:b5:83:51:b1:e4:05:4c:66:8c:cc:15:9a:06:0d:f2:
         52:95:5b:bc:b1:98:47:d0:f7:ed:f1:85:3e:27:79:99:f5:0a:
         76:92:a4:68:91:a4:eb:5e:40:22:a0:87:ea:90:26:7c:f8:ba:
         0e:28:10:6f:6c:64:d5:e5:d1:25:a2:ea:c2:0d:1e:48:9c:9e:
         34:d6:a4:3a:30:61:a8:73:18:0b:25:5f:c0:66:e2:c4:89:a5:
         92:1b:49:b0:87:da:13:49:20:14:80:53:2a:77:2f:d6:4e:23:
         18:69:4c:c6:3b:51:bb:c9:e8:46:00:84:de:d2:4a:3a:41:a2:
         7b:99:c7:11:d8:2a:2f:c5:bc:ef:b8:e1:2f:36:cc:83:82:04:
         f7:6d:58:4e:7c:35:83:9d:84:f4:8e:1d:4d:04:80:91:0d:d3:
         ef:5f:92:ce:93:0f:fe:2d:7e:05:45:7a:1c:3b:bd:bb:41:84:
         58:82:82:3c:3d:07:46:58:d2:47:8c:0e:cb:3c:8f:d5:32:a5:
         d8:93:13:42:61:67:2b:e3:1a:ff:46:84:92:c5:7d:a2:c4:3a:
         16:b0:b7:b9
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBUTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2RDFF
RDE2RDhDNkQzQkE0MEJGNDJDQjNBMjk2NTJBREFCNzZEMDYxMB4XDTI1MTAwMTAx
MzIxNFoXDTI2MDkxNTAxMzAwMlowMzExMC8GA1UEAxMoQTU4NUI2REVCMjBDNTYy
MEQ2REY3NUI3N0EyNkJENkQyRUU0NTc2MDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAL3kcmq4Dj8m7uKKzxPYKj3fsjCnKmqFdYHytWq6DxH4hKRNAUCb
ux82i9ql4gSSg0fsKU/NAecP4JIhgPRRgBSD7GsK351qxiCXqCMRMil6SrMEfkE7
SuLUHNOnY0khZcGLyRiJ63id/1Acv1fiNQT6Cmfzu4PRSk7SIZ+9yhYwXzk56X/3
/1cNiYGHuPHoeXgwPgfAEGEL6Exql8wgCsIHGCZJkjaG1kEZbaI9b6iLq6d+jdoO
DIiB+kjb7tt+UrGUMhbD4ckyG3Yh/6c0ta6e/695XpjlDH9lo3/ZEiQhP1Aifue8
y/JrPLjuPrXKgCh45BFyYCfLpkeD29DXhskCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBSlhbbesgxWINbfdbd6Jr1tLuRXYDAfBgNVHSMEGDAWgBRtHtFtjG07pAv0LLOi
llKtq3bQYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzA3L2JSN1JiWXh0TzZRTDlDeXpvcFpTcmF0MjBHRS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2JSN1JiWXh0TzZRTDlDeXpvcFpTcmF0
MjBHRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8zMDcvcFlXMjNySU1WaURXMzNXM2VpYTliUzdrVjJBLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAtt8ZDANBgkqhkiG9w0BAQsFAAOCAQEAQOBJDwCG636NSXgUiFdPqSEjIhFr
jIRCu/nMhSTePdBktkLhp+jqtYNRseQFTGaMzBWaBg3yUpVbvLGYR9D37fGFPid5
mfUKdpKkaJGk615AIqCH6pAmfPi6DigQb2xk1eXRJaLqwg0eSJyeNNakOjBhqHMY
CyVfwGbixImlkhtJsIfaE0kgFIBTKncv1k4jGGlMxjtRu8noRgCE3tJKOkGie5nH
EdgqL8W877jhLzbMg4IE921YTnw1g52E9I4dTQSAkQ3T71+SzpMP/i1+BUV6HDu9
u0GEWIKCPD0HRljSR4wOyzyP1TKl2JMTQmFnK+Ma/0aEksV9osQ6FrC3uQ==
-----END CERTIFICATE-----
Generated at Wed Oct 8 21:28:26 2025 by rpki-client