Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20280/dsmuXGnUop97qmBymycxJF8_cdA.roa
File:                     dsmuXGnUop97qmBymycxJF8_cdA.roa (raw, json)
Hash identifier:          eaitp/9BQk59xIAzypJHs64hiYJRBhbTh5Cb9M+bM/o=
Subject key identifier:   76:C9:AE:5C:69:D4:A2:9F:7B:AA:60:72:9B:27:31:24:5F:3F:71:D0
Certificate issuer:       /CN=2480B90E3CDB301FFE16C1A7112B0279B54EF0D1
Certificate serial:       03
Authority key identifier: 24:80:B9:0E:3C:DB:30:1F:FE:16:C1:A7:11:2B:02:79:B5:4E:F0:D1
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/JIC5DjzbMB_-FsGnESsCebVO8NE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20280/dsmuXGnUop97qmBymycxJF8_cdA.roa
Signing time:             Wed 15 Oct 2025 07:33:21 +0000
ROA not before:           Wed 15 Oct 2025 07:33:21 +0000
ROA not after:            Thu 15 Oct 2026 07:20:47 +0000
asID:                     63806
IP address blocks:        123.253.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20280/JIC5DjzbMB_-FsGnESsCebVO8NE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20280/JIC5DjzbMB_-FsGnESsCebVO8NE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/JIC5DjzbMB_-FsGnESsCebVO8NE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Oct 2025 21:29:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2480B90E3CDB301FFE16C1A7112B0279B54EF0D1
        Validity
            Not Before: Oct 15 07:33:21 2025 GMT
            Not After : Oct 15 07:20:47 2026 GMT
        Subject: CN=76C9AE5C69D4A29F7BAA60729B2731245F3F71D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d4:be:e1:ff:5f:2f:1f:67:7b:a9:d9:aa:d8:
                    61:cf:b6:32:f2:b5:68:f6:15:c7:85:6f:c4:c8:fc:
                    f9:41:23:d6:42:cc:29:e6:5d:f0:61:39:46:a8:d5:
                    6c:54:74:e9:29:03:27:be:28:cb:28:38:8d:19:86:
                    56:4a:33:6a:b8:7b:e4:9e:c0:36:43:39:58:19:85:
                    f5:c7:fa:df:7b:24:e0:a6:af:08:ee:dd:a3:46:da:
                    d2:31:14:30:ae:0e:57:f5:cf:2d:93:3f:ed:d6:c9:
                    69:96:48:af:21:72:17:09:87:d4:85:92:21:02:0e:
                    37:db:5c:d5:cd:02:84:36:2e:f3:57:0f:84:a5:f8:
                    46:db:b2:56:05:1d:ce:07:f8:4c:96:9c:ed:4f:98:
                    5f:eb:cf:98:0b:6c:f9:66:17:58:92:97:c0:bf:ad:
                    56:18:83:7d:c7:5e:45:de:72:8a:da:fc:42:8d:2b:
                    3a:d8:69:bc:c6:7e:fd:76:6b:40:68:0e:57:50:3c:
                    c8:70:7d:30:5e:e1:de:7d:49:eb:b2:63:5b:79:b4:
                    35:6c:4e:4a:82:6c:af:da:8b:42:0c:70:37:ac:8b:
                    8a:fe:c1:1d:7f:b3:9b:fe:70:60:61:b6:83:7f:95:
                    fa:da:d8:93:e3:6a:d5:a0:46:76:36:c4:ea:98:10:
                    b1:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:C9:AE:5C:69:D4:A2:9F:7B:AA:60:72:9B:27:31:24:5F:3F:71:D0
            X509v3 Authority Key Identifier:
                keyid:24:80:B9:0E:3C:DB:30:1F:FE:16:C1:A7:11:2B:02:79:B5:4E:F0:D1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20280/JIC5DjzbMB_-FsGnESsCebVO8NE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/JIC5DjzbMB_-FsGnESsCebVO8NE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20280/dsmuXGnUop97qmBymycxJF8_cdA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.253.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:ea:76:34:0b:c3:7a:e4:36:e2:8a:19:14:74:be:f7:51:c4:
         a1:c8:e8:21:91:a0:1f:36:d0:1c:fe:a2:d0:62:aa:99:fd:43:
         11:3f:56:18:f2:2c:3a:a0:06:8a:c7:32:e0:9b:cf:95:69:0b:
         e6:41:23:b8:1c:55:d2:85:d8:f2:56:66:f2:e5:71:28:dc:0f:
         2a:34:d1:d8:17:26:e4:08:f2:8e:93:0b:68:65:7f:f5:13:4f:
         72:50:08:76:af:bd:2f:58:fd:13:4a:9b:70:96:96:ca:17:31:
         43:c3:6f:93:12:e2:16:b6:54:be:5f:a1:a4:0e:6e:f9:ad:fa:
         a6:27:ce:ce:b8:e9:4c:9a:3d:0d:de:ed:9b:6d:1d:0e:18:97:
         6b:b1:8f:40:50:2f:c2:48:74:24:fb:00:5a:61:b2:d1:d9:1d:
         40:5e:7d:99:8b:ce:fa:a2:ac:25:57:69:fb:d9:81:24:46:b2:
         99:08:db:06:e5:d9:87:79:e1:1c:97:8e:d6:4e:7a:78:6b:c1:
         d7:13:34:96:d2:0b:c1:12:3b:13:fb:84:68:60:a3:db:c3:af:
         2f:bb:0f:b5:e2:3a:b5:d2:63:dd:de:c2:52:40:56:d3:c6:88:
         81:df:57:b5:59:b5:1e:f5:61:e8:b2:c6:d7:a4:c3:e6:c7:70:
         8a:3d:31:74
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIBAzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygyNDgw
QjkwRTNDREIzMDFGRkUxNkMxQTcxMTJCMDI3OUI1NEVGMEQxMB4XDTI1MTAxNTA3
MzMyMVoXDTI2MTAxNTA3MjA0N1owMzExMC8GA1UEAxMoNzZDOUFFNUM2OUQ0QTI5
RjdCQUE2MDcyOUIyNzMxMjQ1RjNGNzFEMDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMDUvuH/Xy8fZ3up2arYYc+2MvK1aPYVx4VvxMj8+UEj1kLMKeZd
8GE5RqjVbFR06SkDJ74oyyg4jRmGVkozarh75J7ANkM5WBmF9cf633sk4KavCO7d
o0ba0jEUMK4OV/XPLZM/7dbJaZZIryFyFwmH1IWSIQION9tc1c0ChDYu81cPhKX4
RtuyVgUdzgf4TJac7U+YX+vPmAts+WYXWJKXwL+tVhiDfcdeRd5yitr8Qo0rOthp
vMZ+/XZrQGgOV1A8yHB9MF7h3n1J67JjW3m0NWxOSoJsr9qLQgxwN6yLiv7BHX+z
m/5wYGG2g3+V+trYk+Nq1aBGdjbE6pgQsQUCAwEAAaOCAigwggIkMB0GA1UdDgQW
BBR2ya5cadSin3uqYHKbJzEkXz9x0DAfBgNVHSMEGDAWgBQkgLkOPNswH/4WwacR
KwJ5tU7w0TAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAyODAvSklDNURqemJNQl8tRnNHbkVTc0NlYlZPOE5FLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvSklDNURqemJNQl8tRnNHbkVTc0Nl
YlZPOE5FLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzIwMjgwL2RzbXVYR25Vb3A5N3FtQnlteWN4SkY4X2NkQS5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAB7/XcwDQYJKoZIhvcNAQELBQADggEBADvqdjQLw3rkNuKKGRR0vvdR
xKHI6CGRoB820Bz+otBiqpn9QxE/VhjyLDqgBorHMuCbz5VpC+ZBI7gcVdKF2PJW
ZvLlcSjcDyo00dgXJuQI8o6TC2hlf/UTT3JQCHavvS9Y/RNKm3CWlsoXMUPDb5MS
4ha2VL5foaQObvmt+qYnzs646UyaPQ3e7ZttHQ4Yl2uxj0BQL8JIdCT7AFphstHZ
HUBefZmLzvqirCVXafvZgSRGspkI2wbl2Yd54RyXjtZOenhrwdcTNJbSC8ESOxP7
hGhgo9vDry+7D7XiOrXSY93ewlJAVtPGiIHfV7VZtR71Yeiyxtekw+bHcIo9MXQ=
-----END CERTIFICATE-----
Generated at Tue Oct 21 23:20:01 2025 by rpki-client