Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/pQeItV79AIcYDPLvYyPlD7Z2Djs.roa
File:                     pQeItV79AIcYDPLvYyPlD7Z2Djs.roa (raw, json)
Hash identifier:          DAu+Qg+pskQn302rqqjEbqleFjBsE6DpJUwMNRyE95w=
Subject key identifier:   A5:07:88:B5:5E:FD:00:87:18:0C:F2:EF:63:23:E5:0F:B6:76:0E:3B
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       0239
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/pQeItV79AIcYDPLvYyPlD7Z2Djs.roa
Signing time:             Thu 01 May 2025 01:31:53 +0000
ROA not before:           Thu 01 May 2025 01:31:53 +0000
ROA not after:            Wed 15 Apr 2026 01:30:03 +0000
asID:                     7684
IP address blocks:        112.78.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 May 2025 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 569 (0x239)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: May  1 01:31:53 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=A50788B55EFD0087180CF2EF6323E50FB6760E3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:58:84:39:ea:06:7c:e0:9c:63:7b:88:7e:8d:
                    af:c7:f8:7e:83:a2:53:d0:b8:e9:12:10:f0:82:b9:
                    01:12:77:37:80:17:e0:1f:95:80:22:19:70:a1:73:
                    f9:1b:29:22:58:aa:7d:8c:32:88:83:2c:a5:cd:2c:
                    c0:36:d2:0d:ac:da:ab:57:37:c8:bb:5f:89:4a:6f:
                    a5:15:dc:c9:06:3a:a8:45:0c:7e:11:70:34:07:3e:
                    24:4c:65:31:d4:86:b5:2a:7e:1a:6b:3c:d8:94:ba:
                    11:09:81:51:9d:44:47:8f:75:c0:51:19:7a:4d:0b:
                    84:4e:eb:06:28:2d:f8:50:81:74:a7:f2:dc:ad:f8:
                    84:3a:22:50:2e:44:d9:08:02:cb:11:1b:36:6e:12:
                    a5:f9:25:fa:28:0f:8b:7d:67:c1:77:c8:77:54:62:
                    a6:b9:54:bf:84:e7:8e:04:57:99:69:ff:34:76:d5:
                    81:97:d7:3c:cb:8f:63:63:55:43:23:62:21:1b:5c:
                    5c:3a:82:cf:12:b8:84:e9:5c:b7:5a:ca:85:5c:24:
                    c7:92:e3:eb:ed:53:2c:93:0c:6c:a5:42:26:dd:3d:
                    3a:87:23:04:1b:f0:91:9e:50:8c:c7:c0:00:9f:50:
                    0e:7b:76:10:ed:c3:24:28:10:dc:16:6c:bf:c5:97:
                    4d:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:07:88:B5:5E:FD:00:87:18:0C:F2:EF:63:23:E5:0F:B6:76:0E:3B
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/pQeItV79AIcYDPLvYyPlD7Z2Djs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.78.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:64:ee:60:37:88:cc:fd:02:d1:b4:ec:74:ba:c6:3e:75:51:
         5d:59:6a:91:0e:e0:51:3f:16:60:7a:21:47:71:52:28:2e:dc:
         de:85:3c:ff:4e:55:16:fe:5f:74:f2:b3:98:cb:db:aa:e2:cd:
         5f:7f:ff:08:93:0e:03:f8:d9:f1:31:0f:1c:a0:da:04:93:0d:
         70:60:98:7e:81:16:d0:44:fe:d7:50:78:3b:ba:b7:c5:6e:10:
         31:af:32:e0:c2:a3:23:17:b8:df:44:87:57:5f:ea:62:40:9e:
         ef:8c:7c:6d:f6:5d:99:ef:1a:21:a5:95:a4:89:9f:14:26:2b:
         36:46:b5:35:73:24:ba:5a:c1:5c:fb:5c:f2:df:21:cb:cd:45:
         ec:4d:dc:74:21:5d:60:ab:5b:3a:74:59:0a:26:0a:80:81:a7:
         61:43:7b:f6:fd:b4:aa:93:5c:cb:36:ec:16:ec:3f:29:02:3b:
         98:2f:e6:d2:05:10:1a:b0:a1:f7:61:0c:37:10:9b:99:fc:61:
         b2:60:60:9e:7f:44:c7:10:11:3f:28:68:e0:0b:6f:ee:64:aa:
         56:bd:14:4f:31:cc:95:e8:ce:5f:46:45:56:69:b9:ef:6d:25:
         14:26:a1:54:e5:0b:40:86:64:b7:0a:52:d0:74:51:07:ed:91:
         80:da:f6:18
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgICAjkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjAz
MjBGNkQwOURCMThDMEY3MEIzNTRBM0Q4NzQ1MEY3MEU2RDcxQTAeFw0yNTA1MDEw
MTMxNTNaFw0yNjA0MTUwMTMwMDNaMDMxMTAvBgNVBAMTKEE1MDc4OEI1NUVGRDAw
ODcxODBDRjJFRjYzMjNFNTBGQjY3NjBFM0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCVWIQ56gZ84Jxje4h+ja/H+H6DolPQuOkSEPCCuQESdzeAF+Af
lYAiGXChc/kbKSJYqn2MMoiDLKXNLMA20g2s2qtXN8i7X4lKb6UV3MkGOqhFDH4R
cDQHPiRMZTHUhrUqfhprPNiUuhEJgVGdREePdcBRGXpNC4RO6wYoLfhQgXSn8tyt
+IQ6IlAuRNkIAssRGzZuEqX5JfooD4t9Z8F3yHdUYqa5VL+E544EV5lp/zR21YGX
1zzLj2NjVUMjYiEbXFw6gs8SuITpXLdayoVcJMeS4+vtUyyTDGylQibdPTqHIwQb
8JGeUIzHwACfUA57dhDtwyQoENwWbL/Fl01hAgMBAAGjggIoMIICJDAdBgNVHQ4E
FgQUpQeItV79AIcYDPLvYyPlD7Z2DjswHwYDVR0jBBgwFoAUIDIPbQnbGMD3CzVK
PYdFD3Dm1xowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzEwMjQ3L0lESVBiUW5iR01EM0N6VktQWWRGRDNEbTF4by5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0lESVBiUW5iR01EM0N6VktQWWRG
RDNEbTF4by5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8xMDI0Ny9wUWVJdFY3OUFJY1lEUEx2WXlQbEQ3WjJEanMu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAcE7UMA0GCSqGSIb3DQEBCwUAA4IBAQA1ZO5gN4jM/QLRtOx0usY+
dVFdWWqRDuBRPxZgeiFHcVIoLtzehTz/TlUW/l908rOYy9uq4s1ff/8Ikw4D+Nnx
MQ8coNoEkw1wYJh+gRbQRP7XUHg7urfFbhAxrzLgwqMjF7jfRIdXX+piQJ7vjHxt
9l2Z7xohpZWkiZ8UJis2RrU1cyS6WsFc+1zy3yHLzUXsTdx0IV1gq1s6dFkKJgqA
gadhQ3v2/bSqk1zLNuwW7D8pAjuYL+bSBRAasKH3YQw3EJuZ/GGyYGCef0THEBE/
KGjgC2/uZKpWvRRPMcyV6M5fRkVWabnvbSUUJqFU5QtAhmS3ClLQdFEH7ZGA2vYY
-----END CERTIFICATE-----
Generated at Sat May 17 08:30:11 2025 by rpki-client