Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/800/RXwo5D5uGBIp3Gs7b6dgh3Mn2Zc.roa
File:                     RXwo5D5uGBIp3Gs7b6dgh3Mn2Zc.roa (raw, json)
Hash identifier:          SksRLUen5JJAaB2Xqo6Goh2lkrw23g2uUxjxmwPnzDo=
Subject key identifier:   45:7C:28:E4:3E:6E:18:12:29:DC:6B:3B:6F:A7:60:87:73:27:D9:97
Certificate issuer:       /CN=084F88D837A2A2132EA8F6F8F2DB82C1C1E90A8B
Certificate serial:       35
Authority key identifier: 08:4F:88:D8:37:A2:A2:13:2E:A8:F6:F8:F2:DB:82:C1:C1:E9:0A:8B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CE-I2DeiohMuqPb48tuCwcHpCos.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/800/RXwo5D5uGBIp3Gs7b6dgh3Mn2Zc.roa
Signing time:             Wed 01 Oct 2025 01:31:56 +0000
ROA not before:           Wed 01 Oct 2025 01:31:56 +0000
ROA not after:            Tue 15 Sep 2026 01:30:02 +0000
asID:                     18278
IP address blocks:        123.0.64.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/800/CE-I2DeiohMuqPb48tuCwcHpCos.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/800/CE-I2DeiohMuqPb48tuCwcHpCos.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CE-I2DeiohMuqPb48tuCwcHpCos.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 16 Oct 2025 02:50:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 53 (0x35)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=084F88D837A2A2132EA8F6F8F2DB82C1C1E90A8B
        Validity
            Not Before: Oct  1 01:31:56 2025 GMT
            Not After : Sep 15 01:30:02 2026 GMT
        Subject: CN=457C28E43E6E181229DC6B3B6FA760877327D997
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:7f:e7:98:ac:b4:4b:45:94:39:45:06:ea:09:
                    2b:49:68:11:8e:22:57:82:b3:39:c9:97:90:e5:56:
                    b8:4f:10:20:4e:7e:7a:78:09:22:0d:f1:90:ff:2c:
                    f9:5d:4f:d6:a4:bc:5a:cd:43:86:e5:67:f1:2d:5a:
                    60:a6:b2:23:d3:67:91:82:ee:9c:dd:5d:06:6b:e0:
                    3a:e2:79:d8:ca:aa:21:bb:41:80:d1:2a:0a:7d:f4:
                    08:f3:7a:2e:ff:96:b8:ea:0c:b2:8a:32:aa:65:c3:
                    fc:9f:e0:3a:49:b0:c7:db:34:63:29:e7:67:a9:91:
                    19:31:49:8a:6c:b9:2e:01:16:92:77:be:0b:75:12:
                    ee:bf:2e:ba:0b:c4:f5:ae:18:51:4d:1c:be:1b:b6:
                    d4:d7:27:ef:54:10:a2:88:a0:6a:f2:fb:4e:ea:7f:
                    de:3c:17:97:9b:c4:32:16:97:52:5e:d0:2f:bc:49:
                    43:90:d2:83:f9:71:23:e6:b2:b9:51:b4:57:fc:e9:
                    4d:d3:1c:5d:99:ff:a7:6d:86:4c:e6:1e:e5:31:8f:
                    1b:fc:84:21:b6:00:da:61:d9:03:ed:33:95:14:e8:
                    49:9b:49:c9:b0:c3:9c:92:50:75:ca:02:1c:3b:e7:
                    11:c2:ec:77:00:d4:33:29:04:9f:3d:9b:bc:33:79:
                    ca:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:7C:28:E4:3E:6E:18:12:29:DC:6B:3B:6F:A7:60:87:73:27:D9:97
            X509v3 Authority Key Identifier:
                keyid:08:4F:88:D8:37:A2:A2:13:2E:A8:F6:F8:F2:DB:82:C1:C1:E9:0A:8B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/800/CE-I2DeiohMuqPb48tuCwcHpCos.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CE-I2DeiohMuqPb48tuCwcHpCos.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/800/RXwo5D5uGBIp3Gs7b6dgh3Mn2Zc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.0.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         08:af:4d:64:e6:03:e4:b0:bc:70:23:29:cd:c6:f2:ae:67:5d:
         21:d4:0b:ba:4b:ee:4b:e8:53:ce:60:81:47:36:ed:d7:73:1a:
         86:06:6b:79:90:46:f6:56:e3:7d:5d:fd:ec:81:e8:8a:26:be:
         3f:02:00:13:a4:7c:ea:3d:bd:87:29:ac:91:c7:e3:92:77:17:
         2a:80:45:01:af:4b:62:65:73:15:61:57:2b:af:fc:68:f1:26:
         d3:00:1d:32:52:53:61:e2:eb:53:ea:21:1a:09:3d:5d:87:07:
         e8:49:94:50:11:af:4c:64:7b:ef:89:b8:0a:37:53:fd:89:24:
         c7:6c:a3:ed:d3:23:52:3e:99:f8:09:4d:ee:b8:b1:49:30:6b:
         87:a7:81:f6:5c:37:ed:a7:0a:b4:43:20:6e:75:41:31:bc:14:
         eb:be:43:12:42:6a:82:3c:b1:85:59:7d:03:83:00:ea:84:93:
         4f:d7:f0:9e:3a:36:8a:53:3b:59:96:79:7a:1f:8f:f7:09:ab:
         d1:da:b4:33:61:c4:ba:12:96:4c:cc:f4:a6:a5:1a:ad:c2:d0:
         1c:a2:52:89:c3:e4:e9:c8:d1:bc:16:fe:7f:83:c1:6d:3c:71:
         6a:8e:76:0f:cf:17:18:10:77:be:1f:c3:08:ff:af:d0:22:65:
         88:42:5e:3c
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBNTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygwODRG
ODhEODM3QTJBMjEzMkVBOEY2RjhGMkRCODJDMUMxRTkwQThCMB4XDTI1MTAwMTAx
MzE1NloXDTI2MDkxNTAxMzAwMlowMzExMC8GA1UEAxMoNDU3QzI4RTQzRTZFMTgx
MjI5REM2QjNCNkZBNzYwODc3MzI3RDk5NzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALh/55istEtFlDlFBuoJK0loEY4iV4KzOcmXkOVWuE8QIE5+engJ
Ig3xkP8s+V1P1qS8Ws1DhuVn8S1aYKayI9NnkYLunN1dBmvgOuJ52MqqIbtBgNEq
Cn30CPN6Lv+WuOoMsooyqmXD/J/gOkmwx9s0YynnZ6mRGTFJimy5LgEWkne+C3US
7r8uugvE9a4YUU0cvhu21Ncn71QQooigavL7Tup/3jwXl5vEMhaXUl7QL7xJQ5DS
g/lxI+ayuVG0V/zpTdMcXZn/p22GTOYe5TGPG/yEIbYA2mHZA+0zlRToSZtJybDD
nJJQdcoCHDvnEcLsdwDUMykEnz2bvDN5yrcCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBRFfCjkPm4YEincaztvp2CHcyfZlzAfBgNVHSMEGDAWgBQIT4jYN6KiEy6o9vjy
24LBwekKizAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvODAwL0NFLUkyRGVpb2hNdXFQYjQ4dHVDd2NIcENvcy5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0NFLUkyRGVpb2hNdXFQYjQ4dHVDd2NI
cENvcy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC84MDAvUlh3bzVENXVHQklwM0dzN2I2ZGdoM01uMlpjLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBXsAQDANBgkqhkiG9w0BAQsFAAOCAQEACK9NZOYD5LC8cCMpzcbyrmddIdQL
ukvuS+hTzmCBRzbt13MahgZreZBG9lbjfV397IHoiia+PwIAE6R86j29hymskcfj
kncXKoBFAa9LYmVzFWFXK6/8aPEm0wAdMlJTYeLrU+ohGgk9XYcH6EmUUBGvTGR7
74m4CjdT/Ykkx2yj7dMjUj6Z+AlN7rixSTBrh6eB9lw37acKtEMgbnVBMbwU675D
EkJqgjyxhVl9A4MA6oSTT9fwnjo2ilM7WZZ5eh+P9wmr0dq0M2HEuhKWTMz0pqUa
rcLQHKJSicPk6cjRvBb+f4PBbTxxao52D88XGBB3vh/DCP+v0CJliEJePA==
-----END CERTIFICATE-----
Generated at Thu Oct 9 05:44:17 2025 by rpki-client