Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/12/GxUfftsjIyNyOrztAF9p8bEdy4A.roa
File:                     GxUfftsjIyNyOrztAF9p8bEdy4A.roa (raw, json)
Hash identifier:          jxGzbPCXVfXj3iaBl44CBvr5k0oOxF2WCBpC7RX5mNM=
Subject key identifier:   1B:15:1F:7E:DB:23:23:23:72:3A:BC:ED:00:5F:69:F1:B1:1D:CB:80
Certificate issuer:       /CN=1589EECCC6718C652638CF4E92C60003C56FB697
Certificate serial:       65
Authority key identifier: 15:89:EE:CC:C6:71:8C:65:26:38:CF:4E:92:C6:00:03:C5:6F:B6:97
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FYnuzMZxjGUmOM9OksYAA8Vvtpc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/GxUfftsjIyNyOrztAF9p8bEdy4A.roa
Signing time:             Mon 01 Sep 2025 01:33:17 +0000
ROA not before:           Mon 01 Sep 2025 01:33:17 +0000
ROA not after:            Sat 15 Aug 2026 01:30:02 +0000
asID:                     2907
IP address blocks:        202.145.16.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/FYnuzMZxjGUmOM9OksYAA8Vvtpc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/FYnuzMZxjGUmOM9OksYAA8Vvtpc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FYnuzMZxjGUmOM9OksYAA8Vvtpc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 16 Sep 2025 07:46:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101 (0x65)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1589EECCC6718C652638CF4E92C60003C56FB697
        Validity
            Not Before: Sep  1 01:33:17 2025 GMT
            Not After : Aug 15 01:30:02 2026 GMT
        Subject: CN=1B151F7EDB232323723ABCED005F69F1B11DCB80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:08:ac:b1:0d:63:f3:01:fe:cb:ca:52:64:f5:
                    85:1f:a3:a9:cd:0c:0e:60:49:1f:30:e2:a1:a0:69:
                    c2:47:a7:be:9b:ca:a3:95:0e:d9:0f:e0:f4:e3:a5:
                    c4:e6:63:26:52:5f:e0:b0:a6:3c:f5:86:32:27:86:
                    fe:39:11:6c:9e:4a:d6:61:a0:7a:ed:6b:d3:f8:9d:
                    bf:cf:5a:91:49:26:82:de:83:f5:45:7a:63:05:d0:
                    fb:fa:d0:50:66:de:87:d9:2d:8f:a4:aa:52:e1:03:
                    df:22:75:cc:f1:67:dc:af:28:68:17:4b:cc:b3:46:
                    65:53:fe:5a:b8:c2:cc:c5:63:12:dd:66:33:56:5c:
                    8c:90:13:31:88:f9:6e:9c:78:62:3b:4d:f3:9f:14:
                    b9:00:84:b0:76:d0:be:74:5c:2c:14:21:5a:54:11:
                    3d:05:f7:e0:67:40:fa:6c:6e:42:1b:b8:aa:77:8a:
                    89:ca:76:c3:10:0f:8c:ea:15:cf:0a:9a:53:3c:96:
                    3e:15:c6:82:92:6e:9f:b4:72:3f:96:c7:f2:c6:7b:
                    8d:4e:ed:bb:0b:5e:b1:2b:08:37:8d:7d:47:31:de:
                    2f:0f:54:4f:2b:d6:fb:8a:69:91:16:f2:fd:15:4f:
                    1a:9b:0a:23:e4:40:33:fe:99:af:a3:11:fc:e1:e2:
                    a9:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:15:1F:7E:DB:23:23:23:72:3A:BC:ED:00:5F:69:F1:B1:1D:CB:80
            X509v3 Authority Key Identifier:
                keyid:15:89:EE:CC:C6:71:8C:65:26:38:CF:4E:92:C6:00:03:C5:6F:B6:97

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/FYnuzMZxjGUmOM9OksYAA8Vvtpc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FYnuzMZxjGUmOM9OksYAA8Vvtpc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/GxUfftsjIyNyOrztAF9p8bEdy4A.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.145.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0b:6a:f3:e7:1f:1a:9c:87:8d:a0:ba:e4:86:e7:82:cc:ac:07:
         b2:a0:00:f9:1b:a1:b2:4b:31:10:5b:66:4a:4f:37:0e:0d:05:
         f3:8f:a2:7b:2e:cc:72:c2:5d:78:bc:fb:32:bb:59:f0:e1:0b:
         1f:f3:fe:b5:a3:82:00:f9:eb:2f:f9:f9:67:3a:01:76:62:2e:
         a3:57:7c:db:dc:87:6e:a5:d6:9b:8f:a3:58:f2:1e:de:55:d9:
         dc:30:b9:8f:39:96:b0:5e:2a:f9:f2:f6:5b:9e:b5:97:79:6f:
         ff:38:4f:90:b6:1e:39:d0:80:c3:ec:d3:c9:39:13:c9:87:2c:
         41:83:d0:ca:79:20:25:18:50:96:d5:97:0a:b4:6d:fa:6b:c1:
         5b:94:12:2b:8f:b1:b9:27:23:e3:9a:fb:da:1e:6c:a3:a5:41:
         00:e7:3c:63:f2:c4:05:ef:37:06:89:5e:36:54:1e:97:ed:07:
         d5:98:fa:19:7c:b6:fc:98:5a:16:cb:72:9c:74:b8:64:c9:6e:
         8c:a2:63:ea:5e:e1:cb:ed:e0:a3:27:f3:bd:11:60:b8:02:db:
         1a:66:00:8e:5c:ff:2e:86:80:e7:18:e9:1c:b4:75:62:95:14:
         88:83:1d:5d:1c:1e:c5:43:13:66:b2:68:2d:5f:51:71:ea:f9:
         dc:25:aa:ce
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgIBZTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxNTg5
RUVDQ0M2NzE4QzY1MjYzOENGNEU5MkM2MDAwM0M1NkZCNjk3MB4XDTI1MDkwMTAx
MzMxN1oXDTI2MDgxNTAxMzAwMlowMzExMC8GA1UEAxMoMUIxNTFGN0VEQjIzMjMy
MzcyM0FCQ0VEMDA1RjY5RjFCMTFEQ0I4MDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALwIrLENY/MB/svKUmT1hR+jqc0MDmBJHzDioaBpwkenvpvKo5UO
2Q/g9OOlxOZjJlJf4LCmPPWGMieG/jkRbJ5K1mGgeu1r0/idv89akUkmgt6D9UV6
YwXQ+/rQUGbeh9ktj6SqUuED3yJ1zPFn3K8oaBdLzLNGZVP+WrjCzMVjEt1mM1Zc
jJATMYj5bpx4YjtN858UuQCEsHbQvnRcLBQhWlQRPQX34GdA+mxuQhu4qneKicp2
wxAPjOoVzwqaUzyWPhXGgpJun7RyP5bH8sZ7jU7tuwtesSsIN419RzHeLw9UTyvW
+4ppkRby/RVPGpsKI+RAM/6Zr6MR/OHiqRUCAwEAAaOCAiIwggIeMB0GA1UdDgQW
BBQbFR9+2yMjI3I6vO0AX2nxsR3LgDAfBgNVHSMEGDAWgBQVie7MxnGMZSY4z06S
xgADxW+2lzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGUGA1UdHwReMFwwWqBY
oFaGVHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMTIvRlludXpNWnhqR1VtT005T2tzWUFBOFZ2dHBjLmNybDBtBggrBgEF
BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p
Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvRlludXpNWnhqR1VtT005T2tzWUFBOFZ2
dHBjLmNlcjAOBgNVHQ8BAf8EBAMCB4AwgboGCCsGAQUFBwELBIGtMIGqMGAGCCsG
AQUFBzALhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzEyL0d4VWZmdHNqSXlOeU9yenRBRjlwOGJFZHk0QS5yb2EwRgYI
KwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRw
L2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BALKkRAwDQYJKoZIhvcNAQELBQADggEBAAtq8+cfGpyHjaC65IbngsysB7KgAPkb
obJLMRBbZkpPNw4NBfOPonsuzHLCXXi8+zK7WfDhCx/z/rWjggD56y/5+Wc6AXZi
LqNXfNvch26l1puPo1jyHt5V2dwwuY85lrBeKvny9luetZd5b/84T5C2HjnQgMPs
08k5E8mHLEGD0Mp5ICUYUJbVlwq0bfprwVuUEiuPsbknI+Oa+9oebKOlQQDnPGPy
xAXvNwaJXjZUHpftB9WY+hl8tvyYWhbLcpx0uGTJboyiY+pe4cvt4KMn870RYLgC
2xpmAI5c/y6GgOcY6Ry0dWKVFIiDHV0cHsVDE2ayaC1fUXHq+dwlqs4=
-----END CERTIFICATE-----
Generated at Tue Sep 9 09:23:35 2025 by rpki-client