Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1937/kQv3fIvRLF__6eLBYgIMYPGjgiw.roa
File:                     kQv3fIvRLF__6eLBYgIMYPGjgiw.roa (raw, json)
Hash identifier:          H0DTZNdN8BLTCh+iahk10zYcpuu3KFESTHFSq57bF80=
Subject key identifier:   91:0B:F7:7C:8B:D1:2C:5F:FF:E9:E2:C1:62:02:0C:60:F1:A3:82:2C
Certificate issuer:       /CN=C60076FC28F04DEB9817A3482226942CBEF1F80D
Certificate serial:       42
Authority key identifier: C6:00:76:FC:28:F0:4D:EB:98:17:A3:48:22:26:94:2C:BE:F1:F8:0D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/kQv3fIvRLF__6eLBYgIMYPGjgiw.roa
Signing time:             Tue 01 Jul 2025 01:32:45 +0000
ROA not before:           Tue 01 Jul 2025 01:32:45 +0000
ROA not after:            Mon 15 Jun 2026 01:30:02 +0000
asID:                     18071
IP address blocks:        133.183.112.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 66 (0x42)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C60076FC28F04DEB9817A3482226942CBEF1F80D
        Validity
            Not Before: Jul  1 01:32:45 2025 GMT
            Not After : Jun 15 01:30:02 2026 GMT
        Subject: CN=910BF77C8BD12C5FFFE9E2C162020C60F1A3822C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a3:12:06:ef:a7:ec:62:6a:95:0c:02:50:95:
                    77:ec:c3:a1:93:e7:c7:5a:7c:79:6f:8b:34:b5:be:
                    fd:9b:e2:28:a6:42:73:17:d0:87:3d:d6:8d:73:08:
                    3b:85:d2:93:62:99:bb:15:fa:ef:51:00:69:38:9e:
                    7d:90:20:ee:a9:18:e1:27:a9:fd:ef:ea:e6:07:42:
                    51:96:67:00:19:f4:6c:4e:dc:12:b9:74:7c:dd:96:
                    4d:47:93:b1:79:7d:7e:c7:fe:ba:3c:6a:47:7e:4b:
                    f6:5d:d8:e8:19:04:2e:16:8e:b8:99:64:1c:c3:c9:
                    fd:57:c3:6c:f1:d0:5e:68:16:15:e6:17:af:43:58:
                    3f:ee:b6:0a:82:91:39:7a:0c:47:ca:7f:9d:ec:1c:
                    38:da:c2:26:2e:a2:c1:54:fb:0f:c8:c5:03:45:ab:
                    3c:10:72:97:65:69:62:94:fe:08:a1:48:4d:01:c0:
                    ca:b8:f8:ea:d9:28:3a:6d:7b:7b:f1:37:89:15:2b:
                    e9:0e:b7:cb:29:b5:b4:f0:71:ab:e6:e4:48:6b:5a:
                    bd:55:3a:fb:51:fb:52:ec:12:ba:e6:ce:f1:61:1b:
                    75:e1:53:43:6f:90:51:25:66:9a:a3:64:3b:98:35:
                    88:fb:d9:74:00:1f:a1:2b:db:69:b9:61:f8:f7:fe:
                    06:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:0B:F7:7C:8B:D1:2C:5F:FF:E9:E2:C1:62:02:0C:60:F1:A3:82:2C
            X509v3 Authority Key Identifier:
                keyid:C6:00:76:FC:28:F0:4D:EB:98:17:A3:48:22:26:94:2C:BE:F1:F8:0D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/kQv3fIvRLF__6eLBYgIMYPGjgiw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.183.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         ec:1d:d7:f8:0e:3c:28:fd:98:0c:09:be:c9:08:b1:0f:f5:d4:
         81:d3:2e:42:74:ce:30:6d:dd:77:ea:d4:f6:39:cf:f3:4b:df:
         ef:9e:04:0a:d6:0a:22:97:84:6d:39:bc:e5:c6:dc:de:d1:3c:
         29:4c:98:a7:41:e1:61:f0:f5:fd:a3:ed:63:00:29:1f:d9:a5:
         75:bc:7c:65:50:3e:cf:73:b5:fb:19:72:b0:1a:0b:d2:e4:2d:
         bd:30:11:af:a1:9b:c0:a3:be:3b:97:32:1d:e1:c9:d4:81:58:
         15:c9:20:ee:43:f6:57:3d:14:30:f5:f4:27:fd:1f:d9:93:6e:
         e5:e6:0b:90:5b:12:35:e5:a5:67:d9:56:c8:34:c6:72:06:eb:
         25:05:6f:b3:1e:6a:8f:5f:b6:ce:ff:73:63:78:92:e3:34:f5:
         08:c0:5b:6c:ed:a1:fe:c7:0d:11:af:cd:ee:7a:76:e4:d9:02:
         85:fe:69:cc:19:d4:c5:10:c4:1b:b8:98:23:54:8e:95:82:7c:
         9a:51:20:90:61:f6:50:90:70:c4:6d:86:13:85:f5:06:d3:10:
         67:cf:d1:c2:5e:b8:7a:72:fc:4a:b0:95:6c:a4:d3:c8:8e:20:
         a2:df:95:ae:b2:4b:fe:95:b0:3c:29:60:4a:50:a6:6a:f6:95:
         ec:49:02:af
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgIBQjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDNjAw
NzZGQzI4RjA0REVCOTgxN0EzNDgyMjI2OTQyQ0JFRjFGODBEMB4XDTI1MDcwMTAx
MzI0NVoXDTI2MDYxNTAxMzAwMlowMzExMC8GA1UEAxMoOTEwQkY3N0M4QkQxMkM1
RkZGRTlFMkMxNjIwMjBDNjBGMUEzODIyQzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKOjEgbvp+xiapUMAlCVd+zDoZPnx1p8eW+LNLW+/ZviKKZCcxfQ
hz3WjXMIO4XSk2KZuxX671EAaTiefZAg7qkY4Sep/e/q5gdCUZZnABn0bE7cErl0
fN2WTUeTsXl9fsf+ujxqR35L9l3Y6BkELhaOuJlkHMPJ/VfDbPHQXmgWFeYXr0NY
P+62CoKROXoMR8p/newcONrCJi6iwVT7D8jFA0WrPBByl2VpYpT+CKFITQHAyrj4
6tkoOm17e/E3iRUr6Q63yym1tPBxq+bkSGtavVU6+1H7UuwSuubO8WEbdeFTQ2+Q
USVmmqNkO5g1iPvZdAAfoSvbablh+Pf+BpsCAwEAAaOCAiYwggIiMB0GA1UdDgQW
BBSRC/d8i9EsX//p4sFiAgxg8aOCLDAfBgNVHSMEGDAWgBTGAHb8KPBN65gXo0gi
JpQsvvH4DTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa
oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMTkzNy94Z0IyX0Nqd1RldVlGNk5JSWlhVUxMN3gtQTAuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC94Z0IyX0Nqd1RldVlGNk5JSWlhVUxM
N3gtQTAuY2VyMA4GA1UdDwEB/wQEAwIHgDCBvAYIKwYBBQUHAQsEga8wgawwYgYI
KwYBBQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTkzNy9rUXYzZkl2UkxGX182ZUxCWWdJTVlQR2pnaXcucm9h
MEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAv
cnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA
ATAGAwQEhbdwMA0GCSqGSIb3DQEBCwUAA4IBAQDsHdf4Djwo/ZgMCb7JCLEP9dSB
0y5CdM4wbd136tT2Oc/zS9/vngQK1goil4RtObzlxtze0TwpTJinQeFh8PX9o+1j
ACkf2aV1vHxlUD7Pc7X7GXKwGgvS5C29MBGvoZvAo747lzId4cnUgVgVySDuQ/ZX
PRQw9fQn/R/Zk27l5guQWxI15aVn2VbINMZyBuslBW+zHmqPX7bO/3NjeJLjNPUI
wFts7aH+xw0Rr83uenbk2QKF/mnMGdTFEMQbuJgjVI6VgnyaUSCQYfZQkHDEbYYT
hfUG0xBnz9HCXrh6cvxKsJVspNPIjiCi35Wuskv+lbA8KWBKUKZq9pXsSQKv
-----END CERTIFICATE-----
Generated at Fri Jul 4 08:06:16 2025 by rpki-client