Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/526/zqWdGo6GaTMa3vXStutITbCwv_U.roa
File:                     zqWdGo6GaTMa3vXStutITbCwv_U.roa (raw, json)
Hash identifier:          s+dZpTrXLIkJjMdX0WDar1DAen3XP51772n9wuyJgLQ=
Subject key identifier:   CE:A5:9D:1A:8E:86:69:33:1A:DE:F5:D2:B6:EB:48:4D:B0:B0:BF:F5
Certificate issuer:       /CN=8C8722AD1453F1CB13E99D73F77C06C0B0A008F7
Certificate serial:       04
Authority key identifier: 8C:87:22:AD:14:53:F1:CB:13:E9:9D:73:F7:7C:06:C0:B0:A0:08:F7
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jIcirRRT8csT6Z1z93wGwLCgCPc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/526/zqWdGo6GaTMa3vXStutITbCwv_U.roa
Signing time:             Fri 26 Sep 2025 04:50:04 +0000
ROA not before:           Fri 26 Sep 2025 04:50:04 +0000
ROA not after:            Sat 26 Sep 2026 04:32:34 +0000
asID:                     55393
IP address blocks:        119.15.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/526/jIcirRRT8csT6Z1z93wGwLCgCPc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/526/jIcirRRT8csT6Z1z93wGwLCgCPc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jIcirRRT8csT6Z1z93wGwLCgCPc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Oct 2025 18:08:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C8722AD1453F1CB13E99D73F77C06C0B0A008F7
        Validity
            Not Before: Sep 26 04:50:04 2025 GMT
            Not After : Sep 26 04:32:34 2026 GMT
        Subject: CN=CEA59D1A8E8669331ADEF5D2B6EB484DB0B0BFF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:37:a4:27:d8:e3:30:39:20:fc:1f:2a:36:5f:
                    0c:0e:3a:ae:99:84:3f:b9:1d:3c:0a:20:56:55:ff:
                    fe:28:32:80:16:60:e3:e2:e6:0a:d8:91:ff:10:21:
                    a2:a8:cb:22:bf:16:b8:c4:5c:d1:ff:b8:32:3e:35:
                    7e:f2:e5:5f:f9:88:b0:99:4d:8a:42:f5:18:fb:ec:
                    79:fd:30:d9:bd:96:32:af:b4:5f:de:99:2a:8e:5a:
                    ba:09:a0:ca:58:1c:d5:55:d3:98:55:d2:97:69:d4:
                    67:e9:13:54:f9:3a:5c:8f:7f:93:10:74:85:5b:a8:
                    48:44:7a:44:bf:98:2d:0f:8d:b5:2d:6f:86:02:d5:
                    f8:69:9a:04:88:f7:24:77:ae:30:a3:17:6d:94:3f:
                    8e:b6:46:e6:cc:b6:11:f5:f4:e9:10:8d:37:3b:31:
                    9d:5e:c8:04:0a:7f:bf:87:b4:3a:a7:8c:39:a4:1d:
                    89:c8:ec:a4:84:84:a9:a0:cc:eb:4a:c6:92:8b:5c:
                    f0:1a:0d:fc:a7:85:de:8e:5e:6a:ac:a1:96:c9:ec:
                    33:f5:1e:6b:8e:d8:49:da:28:39:73:5d:dd:2c:9c:
                    45:91:d5:ed:66:59:da:c6:c4:4b:84:15:81:13:8d:
                    fe:47:7c:85:3b:fa:97:36:74:d6:86:12:74:83:47:
                    f4:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:A5:9D:1A:8E:86:69:33:1A:DE:F5:D2:B6:EB:48:4D:B0:B0:BF:F5
            X509v3 Authority Key Identifier:
                keyid:8C:87:22:AD:14:53:F1:CB:13:E9:9D:73:F7:7C:06:C0:B0:A0:08:F7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/526/jIcirRRT8csT6Z1z93wGwLCgCPc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jIcirRRT8csT6Z1z93wGwLCgCPc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/526/zqWdGo6GaTMa3vXStutITbCwv_U.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.15.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:89:7c:a4:18:4c:7a:ef:c7:f7:d0:d8:17:eb:e3:3b:85:c8:
         a2:67:18:a8:4b:68:89:6d:c4:cf:c5:6c:a0:c0:0d:89:14:c2:
         93:74:79:2b:08:3a:cf:b5:d3:cd:c9:29:0b:09:07:60:8d:c6:
         d7:04:ca:79:2a:07:3a:24:d8:ba:0c:79:2a:b1:b0:d6:49:7b:
         85:8e:41:2c:60:2d:eb:1b:6d:b5:a0:93:7a:fb:fe:f9:1b:4d:
         e6:8d:cd:27:02:e6:79:ee:88:a4:ee:b9:9d:22:6b:b6:e2:e9:
         2d:2c:e9:44:f5:1c:92:dc:d7:69:c6:e4:99:21:8c:dd:aa:7a:
         2d:65:8a:9c:24:da:15:3f:1f:49:da:47:17:85:42:6d:0e:87:
         19:93:c3:3c:63:06:ca:47:df:0d:e0:ee:60:bd:7e:fa:2b:23:
         10:79:89:6c:42:47:23:2e:59:fc:d8:27:e8:b4:d4:b9:f2:52:
         34:b7:dd:03:26:b3:ff:5f:03:de:9b:20:fa:e2:75:88:3b:8f:
         e8:6a:61:3d:89:db:25:a8:98:cc:7b:bd:8e:cb:cd:67:0c:01:
         4d:bc:fd:c0:fa:45:95:d9:39:2a:c5:d1:d0:0a:3e:32:e1:6c:
         8d:20:c2:21:a0:d2:8e:1a:0c:ed:23:a9:f1:ce:18:d8:4c:90:
         4f:b7:fb:2e
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBBDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4Qzg3
MjJBRDE0NTNGMUNCMTNFOTlENzNGNzdDMDZDMEIwQTAwOEY3MB4XDTI1MDkyNjA0
NTAwNFoXDTI2MDkyNjA0MzIzNFowMzExMC8GA1UEAxMoQ0VBNTlEMUE4RTg2Njkz
MzFBREVGNUQyQjZFQjQ4NERCMEIwQkZGNTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKE3pCfY4zA5IPwfKjZfDA46rpmEP7kdPAogVlX//igygBZg4+Lm
CtiR/xAhoqjLIr8WuMRc0f+4Mj41fvLlX/mIsJlNikL1GPvsef0w2b2WMq+0X96Z
Ko5augmgylgc1VXTmFXSl2nUZ+kTVPk6XI9/kxB0hVuoSER6RL+YLQ+NtS1vhgLV
+GmaBIj3JHeuMKMXbZQ/jrZG5sy2EfX06RCNNzsxnV7IBAp/v4e0OqeMOaQdicjs
pISEqaDM60rGkotc8BoN/KeF3o5eaqyhlsnsM/Uea47YSdooOXNd3SycRZHV7WZZ
2sbES4QVgRON/kd8hTv6lzZ01oYSdINH9D8CAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBTOpZ0ajoZpMxre9dK260hNsLC/9TAfBgNVHSMEGDAWgBSMhyKtFFPxyxPpnXP3
fAbAsKAI9zAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNTI2L2pJY2lyUlJUOGNzVDZaMXo5M3dHd0xDZ0NQYy5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2pJY2lyUlJUOGNzVDZaMXo5M3dHd0xD
Z0NQYy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC81MjYvenFXZEdvNkdhVE1hM3ZYU3R1dElUYkN3dl9VLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAHcPcjANBgkqhkiG9w0BAQsFAAOCAQEArYl8pBhMeu/H99DYF+vjO4XIomcY
qEtoiW3Ez8VsoMANiRTCk3R5Kwg6z7XTzckpCwkHYI3G1wTKeSoHOiTYugx5KrGw
1kl7hY5BLGAt6xtttaCTevv++RtN5o3NJwLmee6IpO65nSJrtuLpLSzpRPUcktzX
acbkmSGM3ap6LWWKnCTaFT8fSdpHF4VCbQ6HGZPDPGMGykffDeDuYL1++isjEHmJ
bEJHIy5Z/Ngn6LTUufJSNLfdAyaz/18D3psg+uJ1iDuP6GphPYnbJaiYzHu9jsvN
ZwwBTbz9wPpFldk5KsXR0Ao+MuFsjSDCIaDSjhoM7SOp8c4Y2EyQT7f7Lg==
-----END CERTIFICATE-----
Generated at Wed Oct 8 19:34:41 2025 by rpki-client