Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1188/3o5J6pc8EtLdPWgXZZ_XlyoaC2E.roa
File:                     3o5J6pc8EtLdPWgXZZ_XlyoaC2E.roa (raw, json)
Hash identifier:          RNlxfb4hmFT3oo21/dX+bnRktQur0TzdNTfX0JTP4Tk=
Subject key identifier:   DE:8E:49:EA:97:3C:12:D2:DD:3D:68:17:65:9F:D7:97:2A:1A:0B:61
Certificate issuer:       /CN=8188C01C8AF4C7886FC19750779AF58E5E1333E4
Certificate serial:       2F
Authority key identifier: 81:88:C0:1C:8A:F4:C7:88:6F:C1:97:50:77:9A:F5:8E:5E:13:33:E4
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/gYjAHIr0x4hvwZdQd5r1jl4TM-Q.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1188/3o5J6pc8EtLdPWgXZZ_XlyoaC2E.roa
Signing time:             Mon 01 Sep 2025 01:31:16 +0000
ROA not before:           Mon 01 Sep 2025 01:31:16 +0000
ROA not after:            Sat 15 Aug 2026 01:30:02 +0000
asID:                     0
IP address blocks:        133.252.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1188/gYjAHIr0x4hvwZdQd5r1jl4TM-Q.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1188/gYjAHIr0x4hvwZdQd5r1jl4TM-Q.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/gYjAHIr0x4hvwZdQd5r1jl4TM-Q.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Oct 2025 12:53:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 47 (0x2f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8188C01C8AF4C7886FC19750779AF58E5E1333E4
        Validity
            Not Before: Sep  1 01:31:16 2025 GMT
            Not After : Aug 15 01:30:02 2026 GMT
        Subject: CN=DE8E49EA973C12D2DD3D6817659FD7972A1A0B61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:20:2d:2a:cc:07:a5:32:66:55:e5:11:0e:44:
                    2f:c9:82:ec:76:48:37:f5:e8:0a:a7:17:68:18:df:
                    de:c0:36:a3:58:24:45:81:65:14:b2:00:cd:ac:7a:
                    ad:2b:cb:df:ec:e6:f2:a3:2c:9b:e7:77:87:e9:d8:
                    ac:f8:20:77:dc:e4:f1:c8:ca:a9:3c:59:8b:32:56:
                    22:fd:6d:85:fd:25:ec:6a:03:9b:52:1a:14:cf:ac:
                    11:8a:71:b5:04:75:b9:3d:d6:43:16:df:ff:68:35:
                    e9:5b:43:ca:0b:3d:76:04:3e:2a:a1:d3:ec:05:f9:
                    fb:23:9e:db:85:6f:40:4b:bf:46:ce:69:09:15:04:
                    50:33:05:40:06:97:fb:b1:54:c5:c2:da:5e:da:1c:
                    23:3b:80:4f:f4:dc:a8:cb:05:71:17:c9:ab:ac:53:
                    62:ab:8c:92:82:4a:39:5b:2b:38:e5:d2:e9:71:30:
                    e4:07:98:f6:c4:d0:56:d1:f2:e7:c2:02:ee:2c:21:
                    0b:a4:02:53:80:cc:84:bc:8c:6a:f2:32:d5:0f:28:
                    d7:c3:6f:6f:86:1e:0e:79:8b:ec:6a:b7:1b:02:d8:
                    e6:13:e2:e7:64:ef:f4:cd:6b:ad:7e:f4:77:60:16:
                    da:a9:70:47:cd:68:e7:04:a9:51:ea:d2:94:db:0d:
                    b6:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:8E:49:EA:97:3C:12:D2:DD:3D:68:17:65:9F:D7:97:2A:1A:0B:61
            X509v3 Authority Key Identifier:
                keyid:81:88:C0:1C:8A:F4:C7:88:6F:C1:97:50:77:9A:F5:8E:5E:13:33:E4

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1188/gYjAHIr0x4hvwZdQd5r1jl4TM-Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/gYjAHIr0x4hvwZdQd5r1jl4TM-Q.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1188/3o5J6pc8EtLdPWgXZZ_XlyoaC2E.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.252.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         20:c2:35:84:f2:52:6c:16:d1:24:6b:d3:0f:bb:39:2f:c3:d5:
         e1:32:15:f9:90:0c:b1:2e:66:65:62:2f:1a:7c:97:37:23:76:
         2e:75:d6:85:f1:1d:0f:76:33:5d:aa:c7:7c:05:42:c9:86:0f:
         30:9b:3c:b2:6a:89:af:e7:4b:5d:56:81:90:3a:21:b0:44:f8:
         45:16:4a:06:e1:23:00:6b:07:83:fb:4d:c0:e0:18:54:72:64:
         9b:35:ba:2d:81:15:8d:0a:c0:20:bb:0b:88:6a:f4:3d:26:c0:
         c3:7d:8d:65:da:fa:14:99:5d:d4:ca:7f:37:39:a8:5b:05:86:
         4d:d1:7c:3a:2a:dc:a2:d5:0a:58:ba:3b:26:2e:84:56:2a:41:
         7b:a1:22:08:11:3d:2e:85:0b:3f:43:b9:ec:0f:b9:e5:4a:ef:
         48:f8:38:61:68:60:d8:b9:e6:fc:e2:8c:2e:df:01:fe:1d:f1:
         62:57:92:58:ce:c3:e2:37:c5:bf:f2:2a:a1:03:6d:1b:63:f5:
         93:b2:0e:8b:5b:9f:04:b1:9d:6d:51:18:b1:f6:c7:db:7a:ee:
         29:65:c3:18:b7:a8:60:13:a1:9c:6a:66:10:ec:87:08:33:e7:
         7b:80:fd:c8:e0:9c:cc:7f:da:61:37:c2:5d:4c:80:ad:b1:36:
         b7:ee:4b:5f
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgIBLzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4MTg4
QzAxQzhBRjRDNzg4NkZDMTk3NTA3NzlBRjU4RTVFMTMzM0U0MB4XDTI1MDkwMTAx
MzExNloXDTI2MDgxNTAxMzAwMlowMzExMC8GA1UEAxMoREU4RTQ5RUE5NzNDMTJE
MkREM0Q2ODE3NjU5RkQ3OTcyQTFBMEI2MTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMcgLSrMB6UyZlXlEQ5EL8mC7HZIN/XoCqcXaBjf3sA2o1gkRYFl
FLIAzax6rSvL3+zm8qMsm+d3h+nYrPggd9zk8cjKqTxZizJWIv1thf0l7GoDm1Ia
FM+sEYpxtQR1uT3WQxbf/2g16VtDygs9dgQ+KqHT7AX5+yOe24VvQEu/Rs5pCRUE
UDMFQAaX+7FUxcLaXtocIzuAT/TcqMsFcRfJq6xTYquMkoJKOVsrOOXS6XEw5AeY
9sTQVtHy58IC7iwhC6QCU4DMhLyMavIy1Q8o18Nvb4YeDnmL7Gq3GwLY5hPi52Tv
9M1rrX70d2AW2qlwR81o5wSpUerSlNsNtlkCAwEAAaOCAiUwggIhMB0GA1UdDgQW
BBTejknqlzwS0t09aBdln9eXKhoLYTAfBgNVHSMEGDAWgBSBiMAcivTHiG/Bl1B3
mvWOXhMz5DAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa
oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMTE4OC9nWWpBSElyMHg0aHZ3WmRRZDVyMWpsNFRNLVEuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9nWWpBSElyMHg0aHZ3WmRRZDVyMWps
NFRNLVEuY2VyMA4GA1UdDwEB/wQEAwIHgDCBvAYIKwYBBQUHAQsEga8wgawwYgYI
KwYBBQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTE4OC8zbzVKNnBjOEV0TGRQV2dYWlpfWGx5b2FDMkUucm9h
MEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAv
cnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIA
ATAFAwMAhfwwDQYJKoZIhvcNAQELBQADggEBACDCNYTyUmwW0SRr0w+7OS/D1eEy
FfmQDLEuZmViLxp8lzcjdi511oXxHQ92M12qx3wFQsmGDzCbPLJqia/nS11WgZA6
IbBE+EUWSgbhIwBrB4P7TcDgGFRyZJs1ui2BFY0KwCC7C4hq9D0mwMN9jWXa+hSZ
XdTKfzc5qFsFhk3RfDoq3KLVCli6OyYuhFYqQXuhIggRPS6FCz9DuewPueVK70j4
OGFoYNi55vzijC7fAf4d8WJXkljOw+I3xb/yKqEDbRtj9ZOyDotbnwSxnW1RGLH2
x9t67illwxi3qGAToZxqZhDshwgz53uA/cjgnMx/2mE3wl1MgK2xNrfuS18=
-----END CERTIFICATE-----
Generated at Wed Oct 8 14:05:10 2025 by rpki-client