Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/12/BiM08tCUK9yFM1cPRT_yZmBSQ7Q.roa
File:                     BiM08tCUK9yFM1cPRT_yZmBSQ7Q.roa (raw, json)
Hash identifier:          0O0lGOzbyLBW3At4VrDBQsKRkLdNhjRmudZ/Q+mEoxA=
Subject key identifier:   06:23:34:F2:D0:94:2B:DC:85:33:57:0F:45:3F:F2:66:60:52:43:B4
Certificate issuer:       /CN=1589EECCC6718C652638CF4E92C60003C56FB697
Certificate serial:       6E
Authority key identifier: 15:89:EE:CC:C6:71:8C:65:26:38:CF:4E:92:C6:00:03:C5:6F:B6:97
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FYnuzMZxjGUmOM9OksYAA8Vvtpc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/BiM08tCUK9yFM1cPRT_yZmBSQ7Q.roa
Signing time:             Mon 01 Sep 2025 01:33:23 +0000
ROA not before:           Mon 01 Sep 2025 01:33:23 +0000
ROA not after:            Sat 15 Aug 2026 01:30:02 +0000
asID:                     2907
IP address blocks:        210.146.64.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/FYnuzMZxjGUmOM9OksYAA8Vvtpc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/FYnuzMZxjGUmOM9OksYAA8Vvtpc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FYnuzMZxjGUmOM9OksYAA8Vvtpc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 16 Sep 2025 07:46:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110 (0x6e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1589EECCC6718C652638CF4E92C60003C56FB697
        Validity
            Not Before: Sep  1 01:33:23 2025 GMT
            Not After : Aug 15 01:30:02 2026 GMT
        Subject: CN=062334F2D0942BDC8533570F453FF266605243B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:99:9e:03:d5:dc:0a:1b:75:47:d0:55:7c:e2:
                    99:fe:b4:07:b7:5f:36:9a:c3:f1:2e:be:21:f3:45:
                    d3:85:e7:be:1b:0d:20:f1:14:e4:d1:21:b3:00:57:
                    fe:5f:9e:57:ff:00:93:6e:73:2c:9e:48:d2:15:f8:
                    47:72:68:54:7b:8a:08:26:3d:fe:e0:56:fe:f4:40:
                    0b:49:ba:fb:69:4d:05:a6:40:2b:07:d1:ed:dd:8f:
                    6e:dd:fb:3f:c7:80:ff:80:f9:70:6b:3a:79:1e:b0:
                    f4:11:19:22:87:0e:05:47:8e:c6:a7:eb:5a:55:3b:
                    73:a0:55:b2:6b:8c:18:65:fd:c5:98:ee:b1:26:56:
                    dc:e9:16:ff:13:ea:4c:28:03:8c:4d:23:5d:6f:ba:
                    28:67:b5:9d:e6:ea:16:47:a4:9c:28:8a:43:d3:3b:
                    ef:80:23:0e:54:6d:b0:d1:68:74:4c:ea:95:9a:df:
                    ec:b3:b1:a0:7e:e2:bc:2d:5c:84:26:ba:01:75:52:
                    11:8f:66:31:b7:e8:47:6b:41:0c:80:19:63:dc:42:
                    1e:30:1c:1b:2d:d9:82:4f:6e:4c:c0:b4:91:6d:34:
                    d9:c7:73:51:c4:d8:25:2d:8a:39:8a:e7:6a:c9:69:
                    b5:a9:48:04:4a:ef:bb:dc:65:1b:0b:3e:bf:db:de:
                    32:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:23:34:F2:D0:94:2B:DC:85:33:57:0F:45:3F:F2:66:60:52:43:B4
            X509v3 Authority Key Identifier:
                keyid:15:89:EE:CC:C6:71:8C:65:26:38:CF:4E:92:C6:00:03:C5:6F:B6:97

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/FYnuzMZxjGUmOM9OksYAA8Vvtpc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FYnuzMZxjGUmOM9OksYAA8Vvtpc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/BiM08tCUK9yFM1cPRT_yZmBSQ7Q.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.146.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         61:52:dd:1d:a5:0a:de:eb:db:ac:66:49:85:3b:5a:8d:7b:a4:
         07:9f:21:92:9f:ec:0d:70:3b:15:83:a4:5f:0d:69:fe:02:d0:
         c0:61:69:d2:19:51:e7:43:56:2a:1c:8d:36:7b:bb:fa:1a:ad:
         72:90:55:3d:d6:c0:da:50:20:94:69:39:55:81:d3:5e:79:82:
         23:48:a9:cf:54:41:94:4e:bd:98:99:03:ea:19:4a:bc:39:25:
         2e:3c:b2:32:6e:31:2f:f4:a8:06:31:cf:82:37:13:d7:d1:6d:
         a2:7f:2c:9f:67:06:99:32:6f:71:76:1a:56:b9:be:d4:8b:5c:
         fb:90:f6:93:b3:ce:93:e4:3d:02:44:8c:58:14:6d:15:0f:2c:
         10:55:77:bc:e1:e2:91:92:09:c3:6f:d8:bb:8e:6a:cc:40:90:
         f8:01:6e:a4:9f:04:65:71:4b:57:f4:9a:5d:20:e0:55:a5:34:
         39:a9:a7:78:f7:e9:de:40:1b:b5:b1:8e:e6:b0:af:9c:54:d3:
         ad:80:a3:e1:a8:af:44:70:c2:41:ed:8b:df:3f:58:ef:e9:96:
         2f:bb:6a:41:66:fa:a8:f0:ce:97:12:61:2f:e2:72:f2:49:e7:
         49:13:5f:5e:c5:f6:3c:93:3f:8a:67:62:b9:8a:0c:98:17:ab:
         ad:81:92:be
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgIBbjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxNTg5
RUVDQ0M2NzE4QzY1MjYzOENGNEU5MkM2MDAwM0M1NkZCNjk3MB4XDTI1MDkwMTAx
MzMyM1oXDTI2MDgxNTAxMzAwMlowMzExMC8GA1UEAxMoMDYyMzM0RjJEMDk0MkJE
Qzg1MzM1NzBGNDUzRkYyNjY2MDUyNDNCNDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALyZngPV3AobdUfQVXzimf60B7dfNprD8S6+IfNF04XnvhsNIPEU
5NEhswBX/l+eV/8Ak25zLJ5I0hX4R3JoVHuKCCY9/uBW/vRAC0m6+2lNBaZAKwfR
7d2Pbt37P8eA/4D5cGs6eR6w9BEZIocOBUeOxqfrWlU7c6BVsmuMGGX9xZjusSZW
3OkW/xPqTCgDjE0jXW+6KGe1nebqFkeknCiKQ9M774AjDlRtsNFodEzqlZrf7LOx
oH7ivC1chCa6AXVSEY9mMbfoR2tBDIAZY9xCHjAcGy3Zgk9uTMC0kW002cdzUcTY
JS2KOYrnaslptalIBErvu9xlGws+v9veMkUCAwEAAaOCAiIwggIeMB0GA1UdDgQW
BBQGIzTy0JQr3IUzVw9FP/JmYFJDtDAfBgNVHSMEGDAWgBQVie7MxnGMZSY4z06S
xgADxW+2lzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGUGA1UdHwReMFwwWqBY
oFaGVHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMTIvRlludXpNWnhqR1VtT005T2tzWUFBOFZ2dHBjLmNybDBtBggrBgEF
BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p
Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvRlludXpNWnhqR1VtT005T2tzWUFBOFZ2
dHBjLmNlcjAOBgNVHQ8BAf8EBAMCB4AwgboGCCsGAQUFBwELBIGtMIGqMGAGCCsG
AQUFBzALhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzEyL0JpTTA4dENVSzl5Rk0xY1BSVF95Wm1CU1E3US5yb2EwRgYI
KwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRw
L2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BATSkkAwDQYJKoZIhvcNAQELBQADggEBAGFS3R2lCt7r26xmSYU7Wo17pAefIZKf
7A1wOxWDpF8Naf4C0MBhadIZUedDViocjTZ7u/oarXKQVT3WwNpQIJRpOVWB0155
giNIqc9UQZROvZiZA+oZSrw5JS48sjJuMS/0qAYxz4I3E9fRbaJ/LJ9nBpkyb3F2
Gla5vtSLXPuQ9pOzzpPkPQJEjFgUbRUPLBBVd7zh4pGSCcNv2LuOasxAkPgBbqSf
BGVxS1f0ml0g4FWlNDmpp3j36d5AG7Wxjuawr5xU062Ao+Gor0RwwkHti98/WO/p
li+7akFm+qjwzpcSYS/icvJJ50kTX17F9jyTP4pnYrmKDJgXq62Bkr4=
-----END CERTIFICATE-----
Generated at Tue Sep 9 09:23:27 2025 by rpki-client