Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/368/vxqLdC5PlLOGogCJb79T0tkx-1g.roa
File:                     vxqLdC5PlLOGogCJb79T0tkx-1g.roa (raw, json)
Hash identifier:          PzAX94J35sK9w8ArhDJ8o9OBxkx+dJCD0FqySGCU5fA=
Subject key identifier:   BF:1A:8B:74:2E:4F:94:B3:86:A2:00:89:6F:BF:53:D2:D9:31:FB:58
Certificate issuer:       /CN=3BD306ECE6043901E52A8E8B6614AAA456ABA756
Certificate serial:       4A
Authority key identifier: 3B:D3:06:EC:E6:04:39:01:E5:2A:8E:8B:66:14:AA:A4:56:AB:A7:56
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/O9MG7OYEOQHlKo6LZhSqpFarp1Y.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/368/vxqLdC5PlLOGogCJb79T0tkx-1g.roa
Signing time:             Thu 18 Sep 2025 01:48:41 +0000
ROA not before:           Thu 18 Sep 2025 01:48:41 +0000
ROA not after:            Tue 15 Sep 2026 01:30:02 +0000
asID:                     0
IP address blocks:        119.235.104.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/368/O9MG7OYEOQHlKo6LZhSqpFarp1Y.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/368/O9MG7OYEOQHlKo6LZhSqpFarp1Y.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/O9MG7OYEOQHlKo6LZhSqpFarp1Y.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Oct 2025 12:53:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 74 (0x4a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3BD306ECE6043901E52A8E8B6614AAA456ABA756
        Validity
            Not Before: Sep 18 01:48:41 2025 GMT
            Not After : Sep 15 01:30:02 2026 GMT
        Subject: CN=BF1A8B742E4F94B386A200896FBF53D2D931FB58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:cf:a1:55:c6:07:b6:bd:0a:8e:42:c4:b0:fd:
                    f8:43:73:f2:7c:b7:a8:0b:d5:38:f7:eb:c6:45:22:
                    1f:08:be:de:cf:1d:ea:ab:3d:0e:0d:e1:1c:34:37:
                    c1:2c:b2:b2:b8:e5:6d:60:2a:5e:06:f5:52:0e:80:
                    92:a6:c2:3d:b7:6b:9f:f8:b4:54:c3:97:f2:52:e3:
                    90:d3:e2:aa:6c:9c:d4:19:f5:e4:38:67:f2:c1:7b:
                    ec:8c:73:0e:03:fb:df:cd:66:cb:15:cf:f1:2f:fe:
                    67:87:be:53:3e:a6:09:e7:2b:a2:49:e9:e9:85:9b:
                    8d:a7:13:58:7c:c2:3c:1f:b7:95:14:d9:3c:1d:dc:
                    80:83:ec:ad:3e:5b:f1:15:b3:5e:9e:eb:32:c4:22:
                    10:3b:54:84:8b:26:51:a6:6b:f5:09:d6:57:2f:11:
                    62:f2:e8:9c:12:57:a3:ae:4b:45:18:fc:78:c9:42:
                    3f:fa:2e:35:5e:9f:f9:c5:30:ce:9f:80:5e:92:09:
                    49:ff:3f:ba:e8:65:4e:8b:12:0c:76:94:bd:4b:6d:
                    cb:41:cd:01:74:c6:16:4b:2c:29:26:0a:92:74:e8:
                    b5:2b:c2:10:30:bf:1e:3a:61:9e:ad:3f:33:49:a6:
                    66:9c:3f:e0:52:8d:bf:ad:4c:69:2f:c8:95:7b:48:
                    db:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:1A:8B:74:2E:4F:94:B3:86:A2:00:89:6F:BF:53:D2:D9:31:FB:58
            X509v3 Authority Key Identifier:
                keyid:3B:D3:06:EC:E6:04:39:01:E5:2A:8E:8B:66:14:AA:A4:56:AB:A7:56

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/368/O9MG7OYEOQHlKo6LZhSqpFarp1Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/O9MG7OYEOQHlKo6LZhSqpFarp1Y.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/368/vxqLdC5PlLOGogCJb79T0tkx-1g.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.235.104.0/21

    Signature Algorithm: sha256WithRSAEncryption
         34:15:6c:73:e3:57:cf:e9:03:bf:21:07:67:fb:b1:19:39:01:
         83:cc:18:2e:13:73:db:24:76:6c:8f:12:e6:ec:a6:b9:ed:ab:
         d5:40:cf:2e:b3:f2:97:94:0a:13:0d:dd:95:0c:8b:2b:73:5b:
         be:d9:25:bb:04:36:e5:c6:4e:d5:eb:43:76:6d:8d:3d:ea:57:
         25:d5:d9:0e:7d:66:2c:60:c8:8e:dd:df:6a:39:b5:93:ba:a6:
         e2:62:c8:61:1c:81:33:92:ec:b7:a1:6f:94:05:b4:7a:3b:3b:
         7d:5f:b7:41:0a:6f:90:19:dc:e6:fb:fc:8e:f7:d7:06:dc:99:
         75:a6:93:4f:84:3e:59:88:ab:d2:ce:44:ff:2e:ed:a8:93:a4:
         b5:eb:24:68:13:20:18:fa:41:56:5c:19:aa:a1:03:f0:e6:0e:
         bb:65:e1:de:ce:df:ea:99:d7:a3:83:f6:e5:2b:17:4b:d3:e2:
         d4:80:3c:7e:14:b8:fb:b2:9c:0a:48:a1:3f:25:60:b1:da:8f:
         17:5d:cf:36:5d:2a:02:9a:1a:e6:67:d6:c1:1d:e9:53:41:77:
         81:81:f0:fd:2b:8e:c0:11:6a:44:19:ae:76:7a:b1:09:93:ed:
         5b:11:db:9b:a6:c3:54:17:cd:27:fd:04:fd:28:fa:01:74:c4:
         4d:f5:53:8b
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBSjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygzQkQz
MDZFQ0U2MDQzOTAxRTUyQThFOEI2NjE0QUFBNDU2QUJBNzU2MB4XDTI1MDkxODAx
NDg0MVoXDTI2MDkxNTAxMzAwMlowMzExMC8GA1UEAxMoQkYxQThCNzQyRTRGOTRC
Mzg2QTIwMDg5NkZCRjUzRDJEOTMxRkI1ODCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKzPoVXGB7a9Co5CxLD9+ENz8ny3qAvVOPfrxkUiHwi+3s8d6qs9
Dg3hHDQ3wSyysrjlbWAqXgb1Ug6AkqbCPbdrn/i0VMOX8lLjkNPiqmyc1Bn15Dhn
8sF77IxzDgP7381myxXP8S/+Z4e+Uz6mCecroknp6YWbjacTWHzCPB+3lRTZPB3c
gIPsrT5b8RWzXp7rMsQiEDtUhIsmUaZr9QnWVy8RYvLonBJXo65LRRj8eMlCP/ou
NV6f+cUwzp+AXpIJSf8/uuhlTosSDHaUvUtty0HNAXTGFkssKSYKknTotSvCEDC/
Hjphnq0/M0mmZpw/4FKNv61MaS/IlXtI2+ECAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBS/Got0Lk+Us4aiAIlvv1PS2TH7WDAfBgNVHSMEGDAWgBQ70wbs5gQ5AeUqjotm
FKqkVqunVjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzY4L085TUc3T1lFT1FIbEtvNkxaaFNxcEZhcnAxWS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL085TUc3T1lFT1FIbEtvNkxaaFNxcEZh
cnAxWS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8zNjgvdnhxTGRDNVBsTE9Hb2dDSmI3OVQwdGt4LTFnLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEA3fraDANBgkqhkiG9w0BAQsFAAOCAQEANBVsc+NXz+kDvyEHZ/uxGTkBg8wY
LhNz2yR2bI8S5uymue2r1UDPLrPyl5QKEw3dlQyLK3NbvtkluwQ25cZO1etDdm2N
PepXJdXZDn1mLGDIjt3fajm1k7qm4mLIYRyBM5Lst6FvlAW0ejs7fV+3QQpvkBnc
5vv8jvfXBtyZdaaTT4Q+WYir0s5E/y7tqJOkteskaBMgGPpBVlwZqqED8OYOu2Xh
3s7f6pnXo4P25SsXS9Pi1IA8fhS4+7KcCkihPyVgsdqPF13PNl0qApoa5mfWwR3p
U0F3gYHw/SuOwBFqRBmudnqxCZPtWxHbm6bDVBfNJ/0E/Sj6AXTETfVTiw==
-----END CERTIFICATE-----
Generated at Wed Oct 8 14:01:45 2025 by rpki-client