Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/50/aeAsKQNLDoEml-tjTsiOK8HtFK0.roa
File:                     aeAsKQNLDoEml-tjTsiOK8HtFK0.roa (raw, json)
Hash identifier:          cLXIRqIVzAENjfyzT2cE3WngaooeBTgqKfNqxyEOuKU=
Subject key identifier:   69:E0:2C:29:03:4B:0E:81:26:97:EB:63:4E:C8:8E:2B:C1:ED:14:AD
Certificate issuer:       /CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
Certificate serial:       9B
Authority key identifier: 1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/aeAsKQNLDoEml-tjTsiOK8HtFK0.roa
Signing time:             Sat 01 Mar 2025 01:32:02 +0000
ROA not before:           Sat 01 Mar 2025 01:32:02 +0000
ROA not after:            Sun 15 Feb 2026 01:30:03 +0000
asID:                     4685
IP address blocks:        203.112.0.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 155 (0x9b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
        Validity
            Not Before: Mar  1 01:32:02 2025 GMT
            Not After : Feb 15 01:30:03 2026 GMT
        Subject: CN=69E02C29034B0E812697EB634EC88E2BC1ED14AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:5a:99:67:c5:85:c3:4b:fc:c4:9d:1d:3f:79:
                    63:ec:44:10:65:45:68:b7:38:79:d3:14:8f:de:b3:
                    52:c1:54:3a:78:3c:9c:7b:7f:fd:15:91:ae:6f:24:
                    60:0e:d9:68:01:fb:11:b8:fe:12:58:de:c9:d9:bb:
                    74:4a:27:db:0d:71:e9:c5:50:f2:cd:d9:b3:58:67:
                    cb:c8:67:5d:80:ac:00:cc:5c:a9:3e:2e:ff:3f:2a:
                    31:17:77:3e:72:f3:ae:85:c5:b3:40:e8:aa:f2:eb:
                    df:ad:4b:32:92:9b:a1:85:80:34:5b:aa:24:26:f4:
                    63:c5:8e:a5:4f:ce:dd:75:06:fc:4a:ba:f9:de:1a:
                    f8:65:70:2f:78:e7:9d:17:9d:75:0e:6e:3d:21:2a:
                    a5:aa:21:95:1f:b2:74:60:05:a6:cb:ba:f9:d3:0b:
                    d6:21:61:c1:18:39:44:0c:06:f4:31:fe:38:76:18:
                    d9:ca:93:a4:a1:09:06:63:a8:8b:17:a9:c8:81:7b:
                    8a:b2:4c:5d:6f:0d:42:7d:79:e1:2b:ad:25:fd:4d:
                    66:60:c3:90:e1:a5:cf:cd:08:fd:fe:85:59:b4:e4:
                    d0:d7:34:04:98:21:6c:7a:85:f3:a7:c6:89:1a:40:
                    3b:e0:31:52:ca:4a:b6:9b:5e:d1:93:c8:cd:d6:e1:
                    e3:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:E0:2C:29:03:4B:0E:81:26:97:EB:63:4E:C8:8E:2B:C1:ED:14:AD
            X509v3 Authority Key Identifier:
                keyid:1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/aeAsKQNLDoEml-tjTsiOK8HtFK0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.112.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         08:1e:89:bd:9c:15:c1:56:85:5d:1d:a7:52:2a:e7:a2:a8:a8:
         1b:e7:52:6e:dc:31:05:4f:32:a4:3d:42:8d:42:84:57:b8:6d:
         7e:19:e9:11:f9:24:91:6a:38:79:99:8e:50:f4:c9:3d:8e:23:
         1a:3f:ee:8c:ca:1d:c1:76:36:08:47:d1:69:01:82:fd:fe:9c:
         3b:a7:5f:fb:1e:8d:fc:1a:1d:51:92:1d:68:0a:c1:34:a5:92:
         2f:96:3b:5a:2a:f8:2b:88:97:dd:08:f4:be:06:54:c8:26:3a:
         d1:5f:5c:c7:18:09:ce:3a:de:ed:3d:97:20:12:88:0b:a2:35:
         eb:23:ae:20:11:1c:15:b5:a7:a3:33:43:4a:04:2f:8e:3d:46:
         47:8d:4e:a1:1e:a4:c0:91:32:8d:22:11:ec:f6:35:00:00:aa:
         52:1a:cd:45:60:bc:ac:f0:c0:4f:00:dc:50:f7:c0:de:e2:8d:
         15:64:77:28:04:ef:8d:8d:9d:7d:18:44:26:30:f3:a3:b3:e1:
         1f:21:80:9c:a9:67:d9:52:85:6a:4d:4f:5b:6c:e1:02:ca:3b:
         e4:b8:1e:f6:97:74:ea:47:8f:e6:81:7c:16:52:7f:ba:13:08:
         45:f0:76:27:fc:9c:b9:3c:4c:c3:27:3e:fa:96:66:79:8a:d0:
         be:ef:ac:30
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgICAJswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMUJF
M0FCMEY4REIyNjVBQkIyMjg3RTc1MTUxRTdGNUE5M0IyQzczNjAeFw0yNTAzMDEw
MTMyMDJaFw0yNjAyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDY5RTAyQzI5MDM0QjBF
ODEyNjk3RUI2MzRFQzg4RTJCQzFFRDE0QUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCfWplnxYXDS/zEnR0/eWPsRBBlRWi3OHnTFI/es1LBVDp4PJx7
f/0Vka5vJGAO2WgB+xG4/hJY3snZu3RKJ9sNcenFUPLN2bNYZ8vIZ12ArADMXKk+
Lv8/KjEXdz5y866FxbNA6Kry69+tSzKSm6GFgDRbqiQm9GPFjqVPzt11BvxKuvne
GvhlcC94550XnXUObj0hKqWqIZUfsnRgBabLuvnTC9YhYcEYOUQMBvQx/jh2GNnK
k6ShCQZjqIsXqciBe4qyTF1vDUJ9eeErrSX9TWZgw5Dhpc/NCP3+hVm05NDXNASY
IWx6hfOnxokaQDvgMVLKSrabXtGTyM3W4eM7AgMBAAGjggIiMIICHjAdBgNVHQ4E
FgQUaeAsKQNLDoEml+tjTsiOK8HtFK0wHwYDVR0jBBgwFoAUG+OrD42yZauyKH51
FR5/WpOyxzYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBgNVHR8EXjBcMFqg
WKBWhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzUwL0ctT3JENDJ5WmF1eUtINTFGUjVfV3BPeXh6WS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0ctT3JENDJ5WmF1eUtINTFGUjVfV3BP
eXh6WS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG6BggrBgEFBQcBCwSBrTCBqjBgBggr
BgEFBQcwC4ZUcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC81MC9hZUFzS1FOTERvRW1sLXRqVHNpT0s4SHRGSzAucm9hMEYG
CCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJk
cC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQFy3AAMA0GCSqGSIb3DQEBCwUAA4IBAQAIHom9nBXBVoVdHadSKueiqKgb51Ju
3DEFTzKkPUKNQoRXuG1+GekR+SSRajh5mY5Q9Mk9jiMaP+6Myh3BdjYIR9FpAYL9
/pw7p1/7Ho38Gh1Rkh1oCsE0pZIvljtaKvgriJfdCPS+BlTIJjrRX1zHGAnOOt7t
PZcgEogLojXrI64gERwVtaejM0NKBC+OPUZHjU6hHqTAkTKNIhHs9jUAAKpSGs1F
YLys8MBPANxQ98De4o0VZHcoBO+NjZ19GEQmMPOjs+EfIYCcqWfZUoVqTU9bbOEC
yjvkuB72l3TqR4/mgXwWUn+6EwhF8HYn/Jy5PEzDJz76lmZ5itC+76ww
-----END CERTIFICATE-----
Generated at Sun Apr 6 09:11:21 2025 by rpki-client