Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/2251/eDnQhaSRISaFD-KP7FrROwNSUvc.roa
File:                     eDnQhaSRISaFD-KP7FrROwNSUvc.roa (raw, json)
Hash identifier:          b4SuwzSX1Ag7g8MMfdDoV2qZJcrNPSPcm6N//njXGuA=
Subject key identifier:   78:39:D0:85:A4:91:21:26:85:0F:E2:8F:EC:5A:D1:3B:03:52:52:F7
Certificate issuer:       /CN=85FE0FA704460AA4FAEF8FA8CA609F00C4CDE008
Certificate serial:       31
Authority key identifier: 85:FE:0F:A7:04:46:0A:A4:FA:EF:8F:A8:CA:60:9F:00:C4:CD:E0:08
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hf4PpwRGCqT674-oymCfAMTN4Ag.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2251/eDnQhaSRISaFD-KP7FrROwNSUvc.roa
Signing time:             Fri 01 Aug 2025 01:34:20 +0000
ROA not before:           Fri 01 Aug 2025 01:34:20 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     2518
IP address blocks:        133.200.0.0/13 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2251/hf4PpwRGCqT674-oymCfAMTN4Ag.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2251/hf4PpwRGCqT674-oymCfAMTN4Ag.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hf4PpwRGCqT674-oymCfAMTN4Ag.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 18:40:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 49 (0x31)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85FE0FA704460AA4FAEF8FA8CA609F00C4CDE008
        Validity
            Not Before: Aug  1 01:34:20 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=7839D085A4912126850FE28FEC5AD13B035252F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:79:89:a6:13:27:2d:c0:2a:92:fc:1c:38:e7:
                    7c:7b:6d:23:5c:94:3b:31:a4:39:f2:0a:7b:17:1f:
                    cd:f6:ca:2f:0b:1b:5c:e4:45:d3:00:20:7c:cb:1b:
                    77:2c:c9:c5:2f:ad:ce:72:85:6e:64:13:4a:dd:27:
                    3f:a4:2c:97:e5:eb:8a:f6:01:d5:c3:d9:11:bc:c3:
                    51:ee:ff:6e:84:be:88:62:1f:a1:f2:67:f6:d0:dc:
                    63:7e:69:ec:af:b7:6a:ef:ef:8d:cf:38:24:9b:1a:
                    2b:22:ad:8b:b2:4b:42:9d:4e:4f:e8:a6:20:63:99:
                    f0:d3:4d:2a:9f:51:ee:05:67:42:cc:ef:8c:cb:d8:
                    a5:17:5f:39:fd:33:e6:16:29:6c:fd:a7:b6:c9:e6:
                    63:bc:77:19:21:2b:32:48:04:42:db:b5:2f:5a:4f:
                    00:dd:2a:03:43:a4:61:d4:3d:f9:d8:9a:b1:d1:07:
                    53:0e:63:59:07:d4:66:b8:16:c6:03:3c:4b:4c:c8:
                    e9:c5:08:36:20:cf:71:83:14:b1:b8:7c:20:2b:e4:
                    c9:d3:24:e5:5c:69:fa:55:d8:7e:9d:49:e5:08:39:
                    af:e6:21:6a:9e:25:a3:dc:5f:57:07:68:69:9f:21:
                    b9:f3:ac:04:06:21:b7:17:ea:18:44:f0:9f:c3:08:
                    d6:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:39:D0:85:A4:91:21:26:85:0F:E2:8F:EC:5A:D1:3B:03:52:52:F7
            X509v3 Authority Key Identifier:
                keyid:85:FE:0F:A7:04:46:0A:A4:FA:EF:8F:A8:CA:60:9F:00:C4:CD:E0:08

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2251/hf4PpwRGCqT674-oymCfAMTN4Ag.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hf4PpwRGCqT674-oymCfAMTN4Ag.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2251/eDnQhaSRISaFD-KP7FrROwNSUvc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.200.0.0/13

    Signature Algorithm: sha256WithRSAEncryption
         a5:73:5f:a1:98:16:04:fc:f1:10:62:de:e3:8d:7a:3d:9b:12:
         bb:2d:ae:ef:4a:4a:fa:d2:92:5b:f7:d5:a8:7c:29:45:e2:47:
         6e:0e:9e:e8:f9:20:0b:7a:62:d7:69:de:fe:b4:c3:83:ca:8b:
         70:ca:46:74:77:69:33:74:c3:2d:a9:52:01:c2:e3:2a:a1:3a:
         ee:fa:d1:d2:64:9a:ca:13:b6:bc:61:57:b9:41:01:0c:fb:30:
         47:e8:1d:7e:81:48:ba:c9:65:4a:9e:1d:86:df:9b:43:ec:46:
         a4:fa:6a:5e:71:15:be:17:79:3b:94:35:32:6e:70:dc:ef:67:
         2c:d8:b8:26:e9:63:b6:88:63:18:30:c6:2c:3a:7f:c1:90:ab:
         7d:c3:4f:6d:17:01:f1:56:e2:1f:60:2a:a3:13:49:f4:3f:a3:
         2e:22:c1:94:46:7d:2e:54:ba:1c:55:b2:50:68:7f:b6:62:be:
         fd:9a:14:7e:ce:28:40:b5:83:1c:9b:e6:4e:78:4c:72:2e:4e:
         04:8e:97:7e:db:93:d4:f5:cf:ea:63:c1:2f:b1:d5:f4:26:e8:
         e2:9c:9f:47:32:83:82:bc:07:35:e2:0c:82:d3:26:fd:06:77:
         3d:e4:a8:c3:47:62:11:b9:ae:5c:1c:22:5e:09:06:73:61:e2:
         95:8d:a4:2a
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgIBMTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4NUZF
MEZBNzA0NDYwQUE0RkFFRjhGQThDQTYwOUYwMEM0Q0RFMDA4MB4XDTI1MDgwMTAx
MzQyMFoXDTI2MDczMDA2MjkwOFowMzExMC8GA1UEAxMoNzgzOUQwODVBNDkxMjEy
Njg1MEZFMjhGRUM1QUQxM0IwMzUyNTJGNzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALp5iaYTJy3AKpL8HDjnfHttI1yUOzGkOfIKexcfzfbKLwsbXORF
0wAgfMsbdyzJxS+tznKFbmQTSt0nP6Qsl+XrivYB1cPZEbzDUe7/boS+iGIfofJn
9tDcY35p7K+3au/vjc84JJsaKyKti7JLQp1OT+imIGOZ8NNNKp9R7gVnQszvjMvY
pRdfOf0z5hYpbP2ntsnmY7x3GSErMkgEQtu1L1pPAN0qA0OkYdQ9+diasdEHUw5j
WQfUZrgWxgM8S0zI6cUINiDPcYMUsbh8ICvkydMk5Vxp+lXYfp1J5Qg5r+Yhap4l
o9xfVwdoaZ8hufOsBAYhtxfqGETwn8MI1vUCAwEAAaOCAiUwggIhMB0GA1UdDgQW
BBR4OdCFpJEhJoUP4o/sWtE7A1JS9zAfBgNVHSMEGDAWgBSF/g+nBEYKpPrvj6jK
YJ8AxM3gCDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa
oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjI1MS9oZjRQcHdSR0NxVDY3NC1veW1DZkFNVE40QWcuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9oZjRQcHdSR0NxVDY3NC1veW1DZkFN
VE40QWcuY2VyMA4GA1UdDwEB/wQEAwIHgDCBvAYIKwYBBQUHAQsEga8wgawwYgYI
KwYBBQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMjI1MS9lRG5RaGFTUklTYUZELUtQN0ZyUk93TlNVdmMucm9h
MEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAv
cnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIA
ATAFAwMDhcgwDQYJKoZIhvcNAQELBQADggEBAKVzX6GYFgT88RBi3uONej2bErst
ru9KSvrSklv31ah8KUXiR24Onuj5IAt6Ytdp3v60w4PKi3DKRnR3aTN0wy2pUgHC
4yqhOu760dJkmsoTtrxhV7lBAQz7MEfoHX6BSLrJZUqeHYbfm0PsRqT6al5xFb4X
eTuUNTJucNzvZyzYuCbpY7aIYxgwxiw6f8GQq33DT20XAfFW4h9gKqMTSfQ/oy4i
wZRGfS5UuhxVslBof7Zivv2aFH7OKEC1gxyb5k54THIuTgSOl37bk9T1z+pjwS+x
1fQm6OKcn0cyg4K8BzXiDILTJv0Gdz3kqMNHYhG5rlwcIl4JBnNh4pWNpCo=
-----END CERTIFICATE-----
Generated at Sat Aug 23 20:35:38 2025 by rpki-client