Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/pbEctq6LCW9lubZCdVevNj6GmNg.roa
File:                     pbEctq6LCW9lubZCdVevNj6GmNg.roa (raw, json)
Hash identifier:          eI86DYKAo3+6oE1F6SlJvtI2sH07B7b93+N1O+LvTGs=
Subject key identifier:   A5:B1:1C:B6:AE:8B:09:6F:65:B9:B6:42:75:57:AF:36:3E:86:98:D8
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       021C
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/pbEctq6LCW9lubZCdVevNj6GmNg.roa
Signing time:             Thu 01 May 2025 01:31:34 +0000
ROA not before:           Thu 01 May 2025 01:31:34 +0000
ROA not after:            Wed 15 Apr 2026 01:30:03 +0000
asID:                     4713
IP address blocks:        180.0.0.0/10 maxlen: 10
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 May 2025 15:52:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 540 (0x21c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: May  1 01:31:34 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=A5B11CB6AE8B096F65B9B6427557AF363E8698D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:69:1b:11:b5:7c:01:70:42:83:f0:6d:2a:7a:
                    b0:f7:57:42:26:82:1e:b0:da:c2:ed:3c:83:55:35:
                    d3:90:76:34:a7:38:83:50:8a:95:a8:43:76:b5:83:
                    ab:1a:cd:34:b4:4d:16:0a:c2:1d:1f:31:a1:f3:8a:
                    e3:be:ac:bf:7e:7b:17:fa:d4:ac:b6:31:1c:77:5e:
                    d1:c1:f1:0c:f2:41:42:06:5e:82:48:68:84:11:2d:
                    bb:ce:3d:9b:77:b5:9c:ca:b8:08:e3:49:83:37:85:
                    e0:a0:80:30:ab:64:de:23:10:13:20:de:a0:e2:f9:
                    6e:60:fa:23:9a:db:c2:f0:17:a9:1b:77:db:03:05:
                    07:7e:42:5a:0c:be:02:d2:c3:98:5c:3d:fa:c6:39:
                    6b:aa:14:45:6c:d5:9d:55:a9:c6:d0:68:d9:48:d6:
                    c9:d1:82:13:de:c3:bc:cc:20:73:a4:29:07:10:d3:
                    70:be:e1:26:e3:a4:67:14:ab:35:82:89:36:b8:85:
                    bf:b5:98:05:eb:f3:61:40:53:be:2d:9d:8d:88:b6:
                    b9:42:ae:9d:64:61:ca:bb:11:49:fd:9a:c5:76:f8:
                    15:fd:41:77:98:8b:17:93:8e:44:bb:7d:77:97:ad:
                    da:95:80:ab:b6:4f:a8:79:52:69:c6:7b:f3:30:22:
                    e5:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:B1:1C:B6:AE:8B:09:6F:65:B9:B6:42:75:57:AF:36:3E:86:98:D8
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/pbEctq6LCW9lubZCdVevNj6GmNg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.0.0.0/10

    Signature Algorithm: sha256WithRSAEncryption
         4b:5f:48:32:51:38:5b:91:f4:bf:85:ab:84:09:40:86:87:50:
         5f:bb:d1:12:34:49:88:68:cb:0b:4d:09:a4:1d:3c:81:8d:23:
         b8:c5:6f:88:d4:c4:13:02:9c:8c:d2:27:53:54:e2:b4:d4:52:
         71:1b:20:34:49:2a:eb:89:35:a6:28:f4:ce:95:d0:31:3a:80:
         1b:49:33:1a:8a:c0:ca:ad:d2:ba:84:f5:50:80:6e:ab:b6:16:
         8d:3f:d8:5c:ec:e5:af:0d:50:55:9c:e6:4e:4b:27:93:93:ac:
         a3:aa:35:de:51:00:55:68:01:44:69:8a:af:46:36:88:40:77:
         9e:b7:3f:ba:33:dd:56:d2:84:9a:a1:eb:c6:10:dd:41:b0:11:
         a0:c5:65:02:a7:df:98:ff:e5:7c:df:31:bf:a2:e0:db:02:f2:
         c9:ac:d1:5e:a9:90:47:32:65:83:64:7d:30:4c:38:f7:ef:4a:
         b8:ae:f5:0f:bb:47:fc:7b:d8:82:90:5c:3c:a9:5b:14:c6:83:
         66:11:15:6d:c9:37:3f:d2:9f:06:37:55:e6:7d:25:42:3e:98:
         bb:6f:08:c3:bc:13:74:5b:84:6f:40:9b:cb:08:29:d8:ca:a6:
         0b:5b:fa:c9:b2:a0:db:e8:9c:f5:1c:ac:f2:a0:5f:42:b0:ee:
         c8:1b:5c:a5
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgICAhwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkZD
MDk5MjNCMDVBN0U4RjFBREQ5QTU5ODRFREMxOTMyMERCOTc0QjAeFw0yNTA1MDEw
MTMxMzRaFw0yNjA0MTUwMTMwMDNaMDMxMTAvBgNVBAMTKEE1QjExQ0I2QUU4QjA5
NkY2NUI5QjY0Mjc1NTdBRjM2M0U4Njk4RDgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDlaRsRtXwBcEKD8G0qerD3V0Imgh6w2sLtPINVNdOQdjSnOINQ
ipWoQ3a1g6sazTS0TRYKwh0fMaHziuO+rL9+exf61Ky2MRx3XtHB8QzyQUIGXoJI
aIQRLbvOPZt3tZzKuAjjSYM3heCggDCrZN4jEBMg3qDi+W5g+iOa28LwF6kbd9sD
BQd+QloMvgLSw5hcPfrGOWuqFEVs1Z1VqcbQaNlI1snRghPew7zMIHOkKQcQ03C+
4SbjpGcUqzWCiTa4hb+1mAXr82FAU74tnY2ItrlCrp1kYcq7EUn9msV2+BX9QXeY
ixeTjkS7fXeXrdqVgKu2T6h5UmnGe/MwIuXJAgMBAAGjggIjMIICHzAdBgNVHQ4E
FgQUpbEctq6LCW9lubZCdVevNj6GmNgwHwYDVR0jBBgwFoAUL8CZI7Bafo8a3ZpZ
hO3BkyDbl0swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzEzMS9MOENaSTdCYWZvOGEzWnBaaE8zQmt5RGJsMHMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9MOENaSTdCYWZvOGEzWnBaaE8zQmt5
RGJsMHMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTMxL3BiRWN0cTZMQ1c5bHViWkNkVmV2Tmo2R21OZy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwa0ADANBgkqhkiG9w0BAQsFAAOCAQEAS19IMlE4W5H0v4WrhAlAhodQX7vR
EjRJiGjLC00JpB08gY0juMVviNTEEwKcjNInU1TitNRScRsgNEkq64k1pij0zpXQ
MTqAG0kzGorAyq3SuoT1UIBuq7YWjT/YXOzlrw1QVZzmTksnk5Oso6o13lEAVWgB
RGmKr0Y2iEB3nrc/ujPdVtKEmqHrxhDdQbARoMVlAqffmP/lfN8xv6Lg2wLyyazR
XqmQRzJlg2R9MEw49+9KuK71D7tH/HvYgpBcPKlbFMaDZhEVbck3P9KfBjdV5n0l
Qj6Yu28Iw7wTdFuEb0Cbywgp2MqmC1v6ybKg2+ic9Rys8qBfQrDuyBtcpQ==
-----END CERTIFICATE-----
Generated at Sun May 18 19:59:34 2025 by rpki-client