Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/939/86tmyywxoBIR-cve_vUO9vduiWs.roa
File:                     86tmyywxoBIR-cve_vUO9vduiWs.roa (raw, json)
Hash identifier:          1A5jhwThgKvsb6GHSCtHYfxyuM/IXRfSBjxlwoFKXAI=
Subject key identifier:   F3:AB:66:CB:2C:31:A0:12:11:F9:CB:DE:FE:F5:0E:F6:F7:6E:89:6B
Certificate issuer:       /CN=7C60295C85FF37E2DCF75AF014D44AD3BF8C33A4
Certificate serial:       CC
Authority key identifier: 7C:60:29:5C:85:FF:37:E2:DC:F7:5A:F0:14:D4:4A:D3:BF:8C:33:A4
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/86tmyywxoBIR-cve_vUO9vduiWs.roa
Signing time:             Thu 01 May 2025 01:29:07 +0000
ROA not before:           Thu 01 May 2025 01:29:07 +0000
ROA not after:            Wed 15 Apr 2026 01:30:03 +0000
asID:                     2518
IP address blocks:        119.238.0.0/15 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Jun 2025 16:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 204 (0xcc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C60295C85FF37E2DCF75AF014D44AD3BF8C33A4
        Validity
            Not Before: May  1 01:29:07 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=F3AB66CB2C31A01211F9CBDEFEF50EF6F76E896B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:49:b0:d1:61:a6:2f:7e:8d:2f:bd:7e:c4:d3:
                    d8:5a:1e:c0:93:e9:35:95:c6:82:f2:84:db:03:c7:
                    58:cd:c2:e6:c8:97:53:c8:d9:a8:1b:df:07:48:08:
                    92:53:75:2e:ef:99:3b:9f:89:8c:ee:8c:81:c8:62:
                    e8:57:3c:e1:fa:d4:de:3e:a2:0d:76:29:c5:9a:cc:
                    e9:8b:33:ee:ba:4d:c1:72:11:15:3d:21:19:05:b3:
                    b8:cb:52:45:e4:47:77:20:68:d7:c3:d0:94:61:37:
                    41:d6:0c:72:ef:85:15:ab:d0:2a:0c:6a:de:f4:dc:
                    e5:82:93:74:b3:18:aa:56:a3:d4:2a:9c:b6:b9:88:
                    43:71:1e:44:d8:12:3a:dd:42:e9:3e:a4:97:0e:17:
                    36:bc:d8:7b:cc:16:14:38:89:f7:f3:1d:b2:d1:6a:
                    ef:bd:0a:96:8b:dd:33:52:fb:b3:7a:c8:cb:80:58:
                    cd:11:44:ac:c9:2d:a8:f5:94:75:e1:16:e6:87:34:
                    11:49:bf:7e:9d:1d:20:9b:ab:6a:f7:67:ce:f9:cd:
                    30:ad:57:5f:51:4a:0b:29:81:1f:14:03:15:70:c4:
                    d5:27:e3:c1:44:3d:7d:38:5e:9b:49:f9:02:b2:63:
                    b5:20:33:8b:17:c0:3d:d4:83:fd:df:08:d3:fe:a2:
                    8c:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:AB:66:CB:2C:31:A0:12:11:F9:CB:DE:FE:F5:0E:F6:F7:6E:89:6B
            X509v3 Authority Key Identifier:
                keyid:7C:60:29:5C:85:FF:37:E2:DC:F7:5A:F0:14:D4:4A:D3:BF:8C:33:A4

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/86tmyywxoBIR-cve_vUO9vduiWs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.238.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         26:b5:78:e1:2e:11:5f:95:b2:9e:99:06:45:ae:7c:1c:46:15:
         1b:fb:d9:37:0f:e1:96:34:e8:cb:79:16:34:4e:03:53:ae:b4:
         84:3f:74:6d:84:94:20:65:9e:2c:da:8f:9b:29:8a:67:f6:98:
         b0:8a:8f:56:b9:5e:80:74:de:d6:17:1a:88:ea:fa:10:80:43:
         73:3b:e3:63:b9:ef:a8:e4:be:9b:c5:3e:ad:83:de:b3:4d:f3:
         5d:91:06:57:2f:4d:c7:68:68:56:82:22:ae:a7:f8:01:f3:32:
         e3:69:3c:1c:0a:e8:23:e5:40:55:b2:b7:66:ac:3b:79:74:25:
         fa:c5:e3:f6:d9:64:92:6f:bc:9a:77:9c:73:ee:96:e9:a3:33:
         54:57:b0:7f:30:c9:45:f9:ff:fd:31:07:77:6c:7c:de:88:a0:
         30:a0:52:55:6e:83:07:4d:81:38:7b:60:89:c1:da:1a:a9:2d:
         65:ee:7a:1e:76:7c:59:a3:8d:5b:a0:96:17:fc:d5:51:a0:62:
         8a:5c:89:16:45:9f:86:f2:8f:93:19:ff:9a:20:56:c1:99:cf:
         78:4a:ee:f7:89:87:b4:10:5a:9f:78:d8:36:b3:b2:1c:48:35:
         56:d8:f0:aa:a5:00:8d:6a:3f:d6:2f:a2:89:36:40:d7:28:4b:
         3b:44:7a:cc
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgICAMwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoN0M2
MDI5NUM4NUZGMzdFMkRDRjc1QUYwMTRENDRBRDNCRjhDMzNBNDAeFw0yNTA1MDEw
MTI5MDdaFw0yNjA0MTUwMTMwMDNaMDMxMTAvBgNVBAMTKEYzQUI2NkNCMkMzMUEw
MTIxMUY5Q0JERUZFRjUwRUY2Rjc2RTg5NkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDGSbDRYaYvfo0vvX7E09haHsCT6TWVxoLyhNsDx1jNwubIl1PI
2agb3wdICJJTdS7vmTufiYzujIHIYuhXPOH61N4+og12KcWazOmLM+66TcFyERU9
IRkFs7jLUkXkR3cgaNfD0JRhN0HWDHLvhRWr0CoMat703OWCk3SzGKpWo9QqnLa5
iENxHkTYEjrdQuk+pJcOFza82HvMFhQ4iffzHbLRau+9CpaL3TNS+7N6yMuAWM0R
RKzJLaj1lHXhFuaHNBFJv36dHSCbq2r3Z875zTCtV19RSgspgR8UAxVwxNUn48FE
PX04XptJ+QKyY7UgM4sXwD3Ug/3fCNP+ooxPAgMBAAGjggIjMIICHzAdBgNVHQ4E
FgQU86tmyywxoBIR+cve/vUO9vduiWswHwYDVR0jBBgwFoAUfGApXIX/N+Lc91rw
FNRK07+MM6QwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzkzOS9mR0FwWElYX04tTGM5MXJ3Rk5SSzA3LU1NNlEuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9mR0FwWElYX04tTGM5MXJ3Rk5SSzA3
LU1NNlEuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvOTM5Lzg2dG15eXd4b0JJUi1jdmVfdlVPOXZkdWlXcy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwF37jANBgkqhkiG9w0BAQsFAAOCAQEAJrV44S4RX5WynpkGRa58HEYVG/vZ
Nw/hljToy3kWNE4DU660hD90bYSUIGWeLNqPmymKZ/aYsIqPVrlegHTe1hcaiOr6
EIBDczvjY7nvqOS+m8U+rYPes03zXZEGVy9Nx2hoVoIirqf4AfMy42k8HAroI+VA
VbK3Zqw7eXQl+sXj9tlkkm+8mnecc+6W6aMzVFewfzDJRfn//TEHd2x83oigMKBS
VW6DB02BOHtgicHaGqktZe56HnZ8WaONW6CWF/zVUaBiilyJFkWfhvKPkxn/miBW
wZnPeEru94mHtBBan3jYNrOyHEg1VtjwqqUAjWo/1i+iiTZA1yhLO0R6zA==
-----END CERTIFICATE-----
Generated at Thu Jun 5 20:10:20 2025 by rpki-client