Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/573/yRslL42OrEG4wOocLeHugfdI5BM.roa
File:                     yRslL42OrEG4wOocLeHugfdI5BM.roa (raw, json)
Hash identifier:          jeXJjoXurOcXAlphxRZAZ+q4l7fzMqsWwHH+toAhSAI=
Subject key identifier:   C9:1B:25:2F:8D:8E:AC:41:B8:C0:EA:1C:2D:E1:EE:81:F7:48:E4:13
Certificate issuer:       /CN=C814D85BD48360A65D9D4144EC6D20752C1EDC7D
Certificate serial:       7F
Authority key identifier: C8:14:D8:5B:D4:83:60:A6:5D:9D:41:44:EC:6D:20:75:2C:1E:DC:7D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yBTYW9SDYKZdnUFE7G0gdSwe3H0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/yRslL42OrEG4wOocLeHugfdI5BM.roa
Signing time:             Mon 01 Sep 2025 01:30:27 +0000
ROA not before:           Mon 01 Sep 2025 01:30:27 +0000
ROA not after:            Sat 15 Aug 2026 01:30:02 +0000
asID:                     131896
IP address blocks:        103.198.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/yBTYW9SDYKZdnUFE7G0gdSwe3H0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/yBTYW9SDYKZdnUFE7G0gdSwe3H0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yBTYW9SDYKZdnUFE7G0gdSwe3H0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 16 Oct 2025 02:50:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 127 (0x7f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C814D85BD48360A65D9D4144EC6D20752C1EDC7D
        Validity
            Not Before: Sep  1 01:30:27 2025 GMT
            Not After : Aug 15 01:30:02 2026 GMT
        Subject: CN=C91B252F8D8EAC41B8C0EA1C2DE1EE81F748E413
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:2f:2a:2f:14:82:d1:4e:75:b5:bf:ef:cd:40:
                    40:c3:cc:17:6d:d8:3a:6e:75:ce:eb:1a:5b:91:af:
                    94:53:f4:8a:c3:1c:ed:67:3b:d5:34:03:14:e1:fe:
                    16:c4:dd:9c:61:01:91:46:75:e0:67:97:4c:13:1a:
                    ff:60:99:c7:da:63:47:e5:cd:80:16:9c:03:82:0a:
                    10:a1:60:28:a2:f5:fd:69:28:3d:5c:d4:76:34:b9:
                    f7:be:21:5c:6f:98:78:56:8f:b3:14:77:11:48:4a:
                    2d:22:5a:be:f8:68:bd:8e:c1:cf:ab:57:e8:6a:59:
                    d9:cb:39:25:27:5c:3c:17:5d:5b:06:de:f7:e4:30:
                    a2:2d:6b:7e:51:39:44:25:73:f3:57:04:0a:93:ea:
                    af:68:c2:9e:ac:fa:3f:18:05:e6:63:40:05:78:e6:
                    35:6a:91:d2:99:15:3f:b7:5d:62:ad:e3:37:8e:32:
                    fc:29:3a:e3:dc:25:e7:e5:1b:46:9e:79:09:21:bf:
                    8e:39:d8:02:6e:06:68:c0:b6:11:2c:b2:2b:97:09:
                    29:af:4d:9d:39:ef:0c:ea:61:21:9b:89:a9:08:f2:
                    53:04:04:d3:d6:7f:5b:9b:1b:cf:15:aa:2f:9d:7d:
                    03:9a:7a:b4:9e:36:20:db:8d:41:5a:24:34:2c:97:
                    13:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:1B:25:2F:8D:8E:AC:41:B8:C0:EA:1C:2D:E1:EE:81:F7:48:E4:13
            X509v3 Authority Key Identifier:
                keyid:C8:14:D8:5B:D4:83:60:A6:5D:9D:41:44:EC:6D:20:75:2C:1E:DC:7D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/yBTYW9SDYKZdnUFE7G0gdSwe3H0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yBTYW9SDYKZdnUFE7G0gdSwe3H0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/yRslL42OrEG4wOocLeHugfdI5BM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.198.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:d4:46:e2:fe:77:e5:01:43:1c:ed:61:4d:a1:8b:f6:b8:47:
         e1:9a:b6:a2:7c:a1:86:8b:28:ce:42:9c:e0:d3:80:8c:2e:67:
         43:ee:d6:63:0c:17:4f:ca:32:53:0e:1a:b4:46:00:df:73:55:
         48:d4:52:14:54:d1:11:ea:45:60:e7:45:ae:6e:5c:d3:e8:a5:
         c9:ed:a2:44:f1:b6:ae:ad:fc:3b:70:4a:3c:ab:7a:f7:df:03:
         c4:55:a8:23:db:0d:46:aa:fe:4d:2c:03:9a:13:f5:2b:f9:4f:
         cf:6d:c0:72:db:f3:f6:7a:ef:be:11:3f:a5:46:9e:27:45:1a:
         66:55:35:4a:8f:b2:39:c2:8a:f0:b6:9e:db:1a:69:3b:ab:50:
         d1:fc:81:1d:c4:f7:79:bb:7c:1d:cb:37:5d:a7:aa:b8:34:bd:
         0e:66:9c:9f:8f:4d:f1:0e:86:40:dd:65:10:92:6c:98:5c:01:
         b1:2c:a5:c6:36:f8:5d:e4:b9:0b:a6:54:00:6a:71:d9:8e:4c:
         0a:90:d4:5c:ff:10:a4:34:f5:b3:97:1d:f0:f2:2d:df:ce:c0:
         02:fe:f8:80:af:8b:f9:63:20:9c:24:23:aa:b4:64:d8:92:b7:
         3c:d8:7e:ec:03:3d:41:e3:7e:3f:57:8c:fb:de:72:0d:2e:3e:
         85:0b:90:41
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBfzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDODE0
RDg1QkQ0ODM2MEE2NUQ5RDQxNDRFQzZEMjA3NTJDMUVEQzdEMB4XDTI1MDkwMTAx
MzAyN1oXDTI2MDgxNTAxMzAwMlowMzExMC8GA1UEAxMoQzkxQjI1MkY4RDhFQUM0
MUI4QzBFQTFDMkRFMUVFODFGNzQ4RTQxMzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMAvKi8UgtFOdbW/781AQMPMF23YOm51zusaW5GvlFP0isMc7Wc7
1TQDFOH+FsTdnGEBkUZ14GeXTBMa/2CZx9pjR+XNgBacA4IKEKFgKKL1/WkoPVzU
djS5974hXG+YeFaPsxR3EUhKLSJavvhovY7Bz6tX6GpZ2cs5JSdcPBddWwbe9+Qw
oi1rflE5RCVz81cECpPqr2jCnqz6PxgF5mNABXjmNWqR0pkVP7ddYq3jN44y/Ck6
49wl5+UbRp55CSG/jjnYAm4GaMC2ESyyK5cJKa9NnTnvDOphIZuJqQjyUwQE09Z/
W5sbzxWqL519A5p6tJ42INuNQVokNCyXE2MCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBTJGyUvjY6sQbjA6hwt4e6B90jkEzAfBgNVHSMEGDAWgBTIFNhb1INgpl2dQUTs
bSB1LB7cfTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNTczL3lCVFlXOVNEWUtaZG5VRkU3RzBnZFN3ZTNIMC5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3lCVFlXOVNEWUtaZG5VRkU3RzBnZFN3
ZTNIMC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC81NzMveVJzbEw0Mk9yRUc0d09vY0xlSHVnZmRJNUJNLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAGfGbDANBgkqhkiG9w0BAQsFAAOCAQEAD9RG4v535QFDHO1hTaGL9rhH4Zq2
onyhhosozkKc4NOAjC5nQ+7WYwwXT8oyUw4atEYA33NVSNRSFFTREepFYOdFrm5c
0+ilye2iRPG2rq38O3BKPKt6998DxFWoI9sNRqr+TSwDmhP1K/lPz23Actvz9nrv
vhE/pUaeJ0UaZlU1So+yOcKK8Lae2xppO6tQ0fyBHcT3ebt8Hcs3XaequDS9Dmac
n49N8Q6GQN1lEJJsmFwBsSylxjb4XeS5C6ZUAGpx2Y5MCpDUXP8QpDT1s5cd8PIt
387AAv74gK+L+WMgnCQjqrRk2JK3PNh+7AM9QeN+P1eM+95yDS4+hQuQQQ==
-----END CERTIFICATE-----
Generated at Thu Oct 9 05:44:17 2025 by rpki-client