Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/D31rBn5e7bDdJVnKMLGP9GyvITE.roa
File:                     D31rBn5e7bDdJVnKMLGP9GyvITE.roa (raw, json)
Hash identifier:          ffB0hSgcTWSd38gGIx9IlxdMioptW8ue8nXsziQohKE=
Subject key identifier:   0F:7D:6B:06:7E:5E:ED:B0:DD:25:59:CA:30:B1:8F:F4:6C:AF:21:31
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       0226
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/D31rBn5e7bDdJVnKMLGP9GyvITE.roa
Signing time:             Thu 01 May 2025 01:31:40 +0000
ROA not before:           Thu 01 May 2025 01:31:40 +0000
ROA not after:            Wed 15 Apr 2026 01:30:03 +0000
asID:                     4713
IP address blocks:        210.170.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 May 2025 00:27:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 550 (0x226)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: May  1 01:31:40 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=0F7D6B067E5EEDB0DD2559CA30B18FF46CAF2131
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:4c:7e:1f:c4:6c:b2:a1:3b:ad:bc:f8:a2:1d:
                    b8:72:25:5d:0c:63:b1:e8:a6:55:3f:ab:19:31:09:
                    a9:9c:df:32:5f:11:4d:65:33:de:7e:3e:d1:bd:a9:
                    00:c4:a4:9d:a0:b0:8c:b8:8b:55:1b:c2:3e:02:f7:
                    2c:4f:86:8d:26:66:b0:c2:8d:6d:ee:fc:2c:8a:0f:
                    f5:05:26:49:4b:f7:74:ce:8c:3a:e8:27:1f:1a:52:
                    6c:74:ed:a2:9a:91:23:07:cd:61:08:ad:6f:19:7e:
                    1a:87:4c:62:c2:b7:04:db:7e:07:eb:cf:aa:4b:62:
                    3f:67:86:b0:07:43:03:33:67:99:6d:07:97:86:14:
                    42:68:e6:71:bd:74:f3:76:4c:da:d3:3b:2f:13:2a:
                    3a:d8:60:7e:04:ff:23:7a:98:11:68:89:6f:00:e4:
                    4f:e6:1b:9c:e5:d5:e9:fc:24:b8:a0:2e:39:22:d9:
                    8a:39:88:45:24:a0:15:eb:58:69:07:c2:70:01:59:
                    8e:5b:25:5c:02:ad:4f:be:29:ce:9d:7c:5c:fa:b3:
                    86:da:d0:b8:35:4e:9f:9a:c1:37:34:36:aa:dd:f3:
                    67:f6:32:79:79:d2:0d:91:c6:61:4d:9e:a7:7b:83:
                    b1:25:52:ce:6a:3c:b8:1d:60:58:2c:ca:d1:43:17:
                    7f:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:7D:6B:06:7E:5E:ED:B0:DD:25:59:CA:30:B1:8F:F4:6C:AF:21:31
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/D31rBn5e7bDdJVnKMLGP9GyvITE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.170.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         22:0f:de:b4:63:63:64:83:2f:a7:c8:86:b8:a9:58:c3:bb:1a:
         49:bb:42:38:b4:f1:33:a5:86:e8:03:09:5e:68:c4:16:65:17:
         f2:b0:5a:f2:08:7c:b9:64:2c:fc:5e:9f:14:77:66:a9:15:1c:
         4f:ca:7c:84:ff:83:0b:9b:3f:e7:32:36:06:a4:05:92:e6:e8:
         76:dd:63:86:77:e1:4b:4c:c4:5f:cf:77:c9:3e:3a:60:34:cd:
         e3:b7:a8:b9:87:c1:4b:36:a5:94:72:2e:da:5b:28:12:21:2a:
         b1:8c:57:23:20:50:53:06:f5:c8:25:56:11:de:fc:83:d5:cd:
         37:94:86:38:da:11:17:42:d8:b9:e8:f0:b1:36:a7:92:e7:c6:
         19:28:f9:fe:70:c4:48:62:8c:25:7b:ac:d7:64:d7:6e:19:5f:
         a6:2b:db:c4:ec:d2:20:fc:de:a2:80:bd:21:64:24:a2:e4:fb:
         46:22:9d:58:cd:66:94:92:95:9d:9a:f1:7b:c0:35:5c:bc:01:
         c8:d4:f4:7c:52:9e:25:e6:c9:29:4a:23:6d:87:8d:66:d5:ec:
         ec:33:66:8c:0e:f7:fb:6d:b9:a9:ce:00:6b:3d:7c:17:57:85:
         0d:6a:08:d1:3f:6d:c2:14:09:61:bd:f2:16:5f:bd:11:17:5a:
         50:a0:df:5e
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAiYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkZD
MDk5MjNCMDVBN0U4RjFBREQ5QTU5ODRFREMxOTMyMERCOTc0QjAeFw0yNTA1MDEw
MTMxNDBaFw0yNjA0MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDBGN0Q2QjA2N0U1RUVE
QjBERDI1NTlDQTMwQjE4RkY0NkNBRjIxMzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC/TH4fxGyyoTutvPiiHbhyJV0MY7HoplU/qxkxCamc3zJfEU1l
M95+PtG9qQDEpJ2gsIy4i1Ubwj4C9yxPho0mZrDCjW3u/CyKD/UFJklL93TOjDro
Jx8aUmx07aKakSMHzWEIrW8ZfhqHTGLCtwTbfgfrz6pLYj9nhrAHQwMzZ5ltB5eG
FEJo5nG9dPN2TNrTOy8TKjrYYH4E/yN6mBFoiW8A5E/mG5zl1en8JLigLjki2Yo5
iEUkoBXrWGkHwnABWY5bJVwCrU++Kc6dfFz6s4ba0Lg1Tp+awTc0Nqrd82f2Mnl5
0g2RxmFNnqd7g7ElUs5qPLgdYFgsytFDF3/bAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUD31rBn5e7bDdJVnKMLGP9GyvITEwHwYDVR0jBBgwFoAUL8CZI7Bafo8a3ZpZ
hO3BkyDbl0swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzEzMS9MOENaSTdCYWZvOGEzWnBaaE8zQmt5RGJsMHMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9MOENaSTdCYWZvOGEzWnBaaE8zQmt5
RGJsMHMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTMxL0QzMXJCbjVlN2JEZEpWbktNTEdQOUd5dklURS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAbSqkAwDQYJKoZIhvcNAQELBQADggEBACIP3rRjY2SDL6fIhripWMO7Gkm7
Qji08TOlhugDCV5oxBZlF/KwWvIIfLlkLPxenxR3ZqkVHE/KfIT/gwubP+cyNgak
BZLm6HbdY4Z34UtMxF/Pd8k+OmA0zeO3qLmHwUs2pZRyLtpbKBIhKrGMVyMgUFMG
9cglVhHe/IPVzTeUhjjaERdC2Lno8LE2p5Lnxhko+f5wxEhijCV7rNdk124ZX6Yr
28Ts0iD83qKAvSFkJKLk+0YinVjNZpSSlZ2a8XvANVy8AcjU9HxSniXmySlKI22H
jWbV7OwzZowO9/ttuanOAGs9fBdXhQ1qCNE/bcIUCWG98hZfvREXWlCg314=
-----END CERTIFICATE-----
Generated at Sat May 17 02:42:56 2025 by rpki-client