Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/CCcPgW5159c8IQ76OUN2oVZWkYM.roa
File:                     CCcPgW5159c8IQ76OUN2oVZWkYM.roa (raw, json)
Hash identifier:          5mBppMhuzSMqi5m/l0ryruhVOG/eaBcBPt5qVlKW4LM=
Subject key identifier:   08:27:0F:81:6E:75:E7:D7:3C:21:0E:FA:39:43:76:A1:56:56:91:83
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       023D
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/CCcPgW5159c8IQ76OUN2oVZWkYM.roa
Signing time:             Thu 01 May 2025 01:36:06 +0000
ROA not before:           Thu 01 May 2025 01:36:06 +0000
ROA not after:            Wed 15 Apr 2026 01:30:03 +0000
asID:                     4713
IP address blocks:        220.96.0.0/14 maxlen: 14
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 23 May 2025 22:45:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 573 (0x23d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: May  1 01:36:06 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=08270F816E75E7D73C210EFA394376A156569183
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:73:2e:e4:fc:73:ed:3b:72:8c:60:d0:53:ac:
                    b3:da:bb:ea:62:ae:69:ab:af:b9:6e:49:0a:50:c8:
                    ac:7f:0a:e4:7d:f4:d7:73:13:82:ce:b0:ac:eb:2f:
                    87:71:c9:57:76:4a:0f:13:41:12:bf:2f:38:ae:69:
                    83:a6:56:86:5b:8f:a0:f6:d8:4d:28:36:dc:5a:f3:
                    c3:aa:75:af:8f:6f:e8:c0:c4:20:b4:6d:12:77:cb:
                    20:3f:61:49:5e:7d:95:80:b3:6f:f6:60:99:a0:6d:
                    d5:29:18:43:f6:30:6c:3d:3e:8a:f0:b0:b2:02:d0:
                    41:ac:4c:49:b2:15:4c:58:21:d7:44:bf:c9:d8:ef:
                    c3:02:36:87:89:d5:20:f3:d0:8b:d5:9e:13:bf:55:
                    f2:3f:7f:a9:df:27:be:38:e3:aa:e2:f9:b0:e7:79:
                    84:a2:af:81:44:7f:a1:0e:8e:ec:ec:fb:24:3c:90:
                    f5:a5:54:4a:1f:dc:65:77:9c:0b:4f:d6:63:2d:30:
                    aa:ed:f6:57:91:17:63:d5:ff:51:40:23:ff:95:db:
                    56:6b:90:9b:64:04:93:e8:bc:33:7f:15:51:f9:6c:
                    38:15:c1:3f:8f:51:d3:54:d3:9b:72:65:67:92:9b:
                    05:cb:0a:66:90:c8:15:49:e9:21:64:22:86:d0:21:
                    53:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:27:0F:81:6E:75:E7:D7:3C:21:0E:FA:39:43:76:A1:56:56:91:83
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/CCcPgW5159c8IQ76OUN2oVZWkYM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.96.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         c2:9e:44:d0:37:8a:15:4b:d2:91:af:29:68:ba:03:7e:72:20:
         9c:d1:17:f5:52:ad:69:bd:43:72:26:92:4e:92:eb:6a:6d:e7:
         87:a1:b6:1b:20:cb:c0:92:34:6a:f7:cc:7c:83:f5:ee:c9:9b:
         3b:c5:1a:3f:ac:10:d8:d5:14:88:b6:8e:00:f4:91:6b:9f:3c:
         4a:51:6a:5a:f5:59:32:70:40:fd:53:09:21:3a:7d:24:09:1f:
         62:f2:35:88:a4:2d:61:39:19:94:4c:c9:cb:5a:03:53:bd:3a:
         80:6d:55:c7:f2:84:00:be:90:a2:90:75:d1:d6:b0:e4:55:38:
         2a:c1:03:d3:d2:38:5d:1e:0e:66:de:3f:58:b4:ea:dd:f4:24:
         eb:cd:b1:2a:5c:7f:7e:f2:8f:e8:a4:aa:53:3b:e1:7e:4d:ea:
         7d:df:73:32:6f:73:d2:5a:46:db:14:a4:4d:8d:28:85:bb:23:
         cb:b3:a4:09:d3:a4:cb:98:12:40:7a:f6:52:9f:be:8b:fb:96:
         46:2f:50:ea:2c:4d:6f:09:78:20:70:04:b1:e2:8a:90:45:ed:
         6c:c9:db:2c:9c:59:75:8e:5c:45:f7:7b:eb:53:ca:f5:d8:8f:
         0b:42:dc:13:05:93:aa:b5:c5:61:bf:07:ef:51:cb:76:c6:3e:
         fe:e3:ec:1a
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgICAj0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkZD
MDk5MjNCMDVBN0U4RjFBREQ5QTU5ODRFREMxOTMyMERCOTc0QjAeFw0yNTA1MDEw
MTM2MDZaFw0yNjA0MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDA4MjcwRjgxNkU3NUU3
RDczQzIxMEVGQTM5NDM3NkExNTY1NjkxODMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDPcy7k/HPtO3KMYNBTrLPau+pirmmrr7luSQpQyKx/CuR99Ndz
E4LOsKzrL4dxyVd2Sg8TQRK/LziuaYOmVoZbj6D22E0oNtxa88Oqda+Pb+jAxCC0
bRJ3yyA/YUlefZWAs2/2YJmgbdUpGEP2MGw9PorwsLIC0EGsTEmyFUxYIddEv8nY
78MCNoeJ1SDz0IvVnhO/VfI/f6nfJ74446ri+bDneYSir4FEf6EOjuzs+yQ8kPWl
VEof3GV3nAtP1mMtMKrt9leRF2PV/1FAI/+V21ZrkJtkBJPovDN/FVH5bDgVwT+P
UdNU05tyZWeSmwXLCmaQyBVJ6SFkIobQIVMRAgMBAAGjggIjMIICHzAdBgNVHQ4E
FgQUCCcPgW5159c8IQ76OUN2oVZWkYMwHwYDVR0jBBgwFoAUL8CZI7Bafo8a3ZpZ
hO3BkyDbl0swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzEzMS9MOENaSTdCYWZvOGEzWnBaaE8zQmt5RGJsMHMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9MOENaSTdCYWZvOGEzWnBaaE8zQmt5
RGJsMHMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTMxL0NDY1BnVzUxNTljOElRNzZPVU4yb1ZaV2tZTS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwLcYDANBgkqhkiG9w0BAQsFAAOCAQEAwp5E0DeKFUvSka8paLoDfnIgnNEX
9VKtab1DciaSTpLram3nh6G2GyDLwJI0avfMfIP17smbO8UaP6wQ2NUUiLaOAPSR
a588SlFqWvVZMnBA/VMJITp9JAkfYvI1iKQtYTkZlEzJy1oDU706gG1Vx/KEAL6Q
opB10daw5FU4KsED09I4XR4OZt4/WLTq3fQk682xKlx/fvKP6KSqUzvhfk3qfd9z
Mm9z0lpG2xSkTY0ohbsjy7OkCdOky5gSQHr2Up++i/uWRi9Q6ixNbwl4IHAEseKK
kEXtbMnbLJxZdY5cRfd761PK9diPC0LcEwWTqrXFYb8H71HLdsY+/uPsGg==
-----END CERTIFICATE-----
Generated at Sat May 17 00:12:46 2025 by rpki-client