Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/MEe35Uvjy0gcP3YXSvZldUXkmCE.roa
File:                     MEe35Uvjy0gcP3YXSvZldUXkmCE.roa (raw, json)
Hash identifier:          AUWLBtHmwY8sn8Bryd5p86T4S5WGbl68CWZPElLHfec=
Subject key identifier:   30:47:B7:E5:4B:E3:CB:48:1C:3F:76:17:4A:F6:65:75:45:E4:98:21
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       01E1
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/MEe35Uvjy0gcP3YXSvZldUXkmCE.roa
Signing time:             Wed 23 Jul 2025 07:06:09 +0000
ROA not before:           Wed 23 Jul 2025 07:06:09 +0000
ROA not after:            Wed 15 Jul 2026 01:30:01 +0000
asID:                     2497
IP address blocks:        202.32.204.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 01 Aug 2025 18:12:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 481 (0x1e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Jul 23 07:06:09 2025 GMT
            Not After : Jul 15 01:30:01 2026 GMT
        Subject: CN=3047B7E54BE3CB481C3F76174AF6657545E49821
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f5:cb:e4:3e:8b:04:c8:b9:97:8e:5e:97:35:
                    01:aa:56:f4:7f:37:05:f5:15:c7:30:65:08:7a:f8:
                    92:01:f3:91:f0:91:3a:01:fb:ec:a6:04:3a:29:79:
                    75:56:e3:05:1f:1d:21:a3:54:4c:1e:3f:68:cb:83:
                    12:1c:ff:17:57:10:31:ea:0b:99:81:5f:51:44:62:
                    a9:3e:84:c4:5e:cd:18:0d:10:09:00:b4:4d:6b:f5:
                    86:c7:09:5e:cf:7a:0e:ce:60:b7:a1:e2:1a:05:af:
                    16:1b:c4:04:4a:7c:8a:73:a7:a8:35:f8:92:ff:18:
                    ce:42:8e:64:56:82:11:df:be:7b:93:4b:74:6a:b9:
                    d4:04:4b:61:44:82:13:a4:1e:fe:22:d7:16:11:8e:
                    b0:a9:5a:55:b7:bb:e6:a4:94:97:4c:e2:49:2e:30:
                    69:25:24:4a:20:47:3d:f6:e2:d7:9b:3c:7b:26:29:
                    36:09:55:c6:56:95:3d:1a:22:56:06:4e:6b:55:6c:
                    f4:29:39:4e:c6:54:c2:ad:a3:5d:10:02:80:9d:91:
                    70:36:95:a8:f3:52:38:de:8c:05:e4:13:7f:5d:48:
                    07:47:d2:31:b7:df:da:3d:d2:9c:36:46:3c:32:ca:
                    1d:ea:7f:ba:a0:ed:90:45:35:63:29:1d:ab:a4:c9:
                    8e:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:47:B7:E5:4B:E3:CB:48:1C:3F:76:17:4A:F6:65:75:45:E4:98:21
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/MEe35Uvjy0gcP3YXSvZldUXkmCE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.32.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:95:71:85:55:cd:bc:d9:bc:b2:d6:f7:ea:25:18:3d:d6:f4:
         ee:8c:9a:7d:6a:67:a9:70:62:98:1c:19:91:1a:79:6b:eb:41:
         ec:d9:e8:4f:47:6b:38:70:3b:f0:99:2f:f4:39:1b:a3:4d:e6:
         0d:31:15:a3:05:b7:51:fd:93:f9:0e:63:af:bb:c1:ca:e6:2c:
         79:e1:ba:f0:83:50:42:22:d8:1f:62:45:3a:92:74:4f:38:a6:
         30:bb:37:7e:08:e0:a2:2a:cd:34:d6:01:a6:ba:58:bb:4f:8e:
         3e:2f:0b:19:4b:47:4c:7f:9c:04:a8:8e:c6:42:a4:4d:c2:2b:
         be:bf:b4:b1:a2:84:dc:e2:76:5d:d5:6b:54:9f:cb:fd:82:da:
         07:67:d0:1c:6a:2d:44:35:74:94:e1:bc:6c:bf:dc:88:d8:73:
         4d:7e:c1:7f:1e:78:77:f1:ed:5a:64:7d:5a:99:4d:43:5e:35:
         fb:9e:e1:d2:cb:33:7b:27:22:7d:6a:e9:d8:f8:f4:89:49:1f:
         8b:23:09:c8:dd:4b:59:99:83:42:2e:f1:b6:4d:ba:2e:5d:e3:
         71:40:68:e4:06:1f:53:59:62:a3:65:2e:02:99:4b:e0:2c:75:
         1e:c1:4e:a2:5d:3a:83:8d:9c:a1:21:6e:b0:a1:af:9c:5e:8b:
         33:fa:03:e1
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgICAeEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjk4
M0NGRDVGOENBRkEwMDY4RDJFQkEyNUVEMEY3MDEyNDRCMTJGOTAeFw0yNTA3MjMw
NzA2MDlaFw0yNjA3MTUwMTMwMDFaMDMxMTAvBgNVBAMTKDMwNDdCN0U1NEJFM0NC
NDgxQzNGNzYxNzRBRjY2NTc1NDVFNDk4MjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC19cvkPosEyLmXjl6XNQGqVvR/NwX1FccwZQh6+JIB85HwkToB
++ymBDopeXVW4wUfHSGjVEweP2jLgxIc/xdXEDHqC5mBX1FEYqk+hMRezRgNEAkA
tE1r9YbHCV7Peg7OYLeh4hoFrxYbxARKfIpzp6g1+JL/GM5CjmRWghHfvnuTS3Rq
udQES2FEghOkHv4i1xYRjrCpWlW3u+aklJdM4kkuMGklJEogRz324tebPHsmKTYJ
VcZWlT0aIlYGTmtVbPQpOU7GVMKto10QAoCdkXA2lajzUjjejAXkE39dSAdH0jG3
39o90pw2Rjwyyh3qf7qg7ZBFNWMpHaukyY5JAgMBAAGjggIgMIICHDAdBgNVHQ4E
FgQUMEe35Uvjy0gcP3YXSvZldUXkmCEwHwYDVR0jBBgwFoAUKYPP1fjK+gBo0uui
XtD3ASRLEvkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBkBgNVHR8EXTBbMFmg
V6BVhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzYvS1lQUDFmakstZ0JvMHV1aVh0RDNBU1JMRXZrLmNybDBtBggrBgEF
BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p
Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvS1lQUDFmakstZ0JvMHV1aVh0RDNBU1JM
RXZrLmNlcjAOBgNVHQ8BAf8EBAMCB4AwgbkGCCsGAQUFBwELBIGsMIGpMF8GCCsG
AQUFBzALhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzYvTUVlMzVVdmp5MGdjUDNZWFN2WmxkVVhrbUNFLnJvYTBGBggr
BgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3JyZHAv
YXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
AMogzDANBgkqhkiG9w0BAQsFAAOCAQEAF5VxhVXNvNm8stb36iUYPdb07oyafWpn
qXBimBwZkRp5a+tB7NnoT0drOHA78Jkv9Dkbo03mDTEVowW3Uf2T+Q5jr7vByuYs
eeG68INQQiLYH2JFOpJ0TzimMLs3fgjgoirNNNYBprpYu0+OPi8LGUtHTH+cBKiO
xkKkTcIrvr+0saKE3OJ2XdVrVJ/L/YLaB2fQHGotRDV0lOG8bL/ciNhzTX7Bfx54
d/HtWmR9WplNQ141+57h0sszeycifWrp2Pj0iUkfiyMJyN1LWZmDQi7xtk26Ll3j
cUBo5AYfU1lio2UuAplL4Cx1HsFOol06g42coSFusKGvnF6LM/oD4Q==
-----END CERTIFICATE-----
Generated at Fri Jul 25 19:40:32 2025 by rpki-client