Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/233/JRAFyum16jaqohEf-uzBFi6uu94.roa
File:                     JRAFyum16jaqohEf-uzBFi6uu94.roa (raw, json)
Hash identifier:          cHhioEBbU6ncJKByzk1yUz40gwC9wxtGNUT1Z3doIME=
Subject key identifier:   25:10:05:CA:E9:B5:EA:36:AA:A2:11:1F:FA:EC:C1:16:2E:AE:BB:DE
Certificate issuer:       /CN=D788678E64D29184C23DAAADB594BFD9BAE2405C
Certificate serial:       59
Authority key identifier: D7:88:67:8E:64:D2:91:84:C2:3D:AA:AD:B5:94:BF:D9:BA:E2:40:5C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/14hnjmTSkYTCPaqttZS_2briQFw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/233/JRAFyum16jaqohEf-uzBFi6uu94.roa
Signing time:             Fri 01 Aug 2025 01:29:06 +0000
ROA not before:           Fri 01 Aug 2025 01:29:06 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     7670
IP address blocks:        202.25.192.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/233/14hnjmTSkYTCPaqttZS_2briQFw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/233/14hnjmTSkYTCPaqttZS_2briQFw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/14hnjmTSkYTCPaqttZS_2briQFw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 31 Aug 2025 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 89 (0x59)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D788678E64D29184C23DAAADB594BFD9BAE2405C
        Validity
            Not Before: Aug  1 01:29:06 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=251005CAE9B5EA36AAA2111FFAECC1162EAEBBDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:85:b6:c4:a2:44:82:c1:07:4d:67:98:e3:b9:
                    99:3d:d4:ba:c5:c8:5c:b9:9f:ce:93:3d:e8:85:78:
                    0a:df:ec:00:35:70:3d:46:15:2f:07:76:2f:05:7b:
                    d4:94:62:8b:dd:f9:26:83:f9:4f:a6:52:c3:5d:75:
                    31:9d:4d:f6:62:9a:cd:1f:01:be:37:93:9e:98:c6:
                    6f:cb:4a:c1:a9:46:0f:57:37:86:1a:01:22:76:5e:
                    83:f4:50:00:60:2c:4e:de:12:7d:1d:6c:2b:55:fd:
                    12:49:5f:78:45:5e:dd:e0:9b:82:44:b6:ce:e9:5a:
                    76:25:a0:b3:35:86:fd:fd:1e:82:88:9e:87:9e:27:
                    87:c0:82:a2:29:7c:85:5b:6f:cd:b1:5d:cd:69:b3:
                    f3:88:54:df:40:1d:09:6d:30:ea:3e:e7:45:a4:de:
                    00:41:7f:b8:09:b8:2c:81:77:57:57:eb:2e:fc:f5:
                    26:24:f6:7b:cf:e7:21:1b:2d:42:49:44:d8:b4:30:
                    7a:98:60:e0:67:d7:e1:a7:a0:51:b7:73:1b:ae:6b:
                    c8:c4:18:e7:05:0f:47:fb:5b:ce:61:48:11:52:37:
                    b4:25:fa:db:ac:ec:7b:29:e5:e1:d8:20:b5:60:aa:
                    78:75:e2:ac:19:b1:e4:a0:48:25:ac:05:23:73:a1:
                    a8:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:10:05:CA:E9:B5:EA:36:AA:A2:11:1F:FA:EC:C1:16:2E:AE:BB:DE
            X509v3 Authority Key Identifier:
                keyid:D7:88:67:8E:64:D2:91:84:C2:3D:AA:AD:B5:94:BF:D9:BA:E2:40:5C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/233/14hnjmTSkYTCPaqttZS_2briQFw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/14hnjmTSkYTCPaqttZS_2briQFw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/233/JRAFyum16jaqohEf-uzBFi6uu94.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.25.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         bf:4c:3e:62:a4:5b:d6:1f:c9:33:de:34:eb:ce:20:6d:00:31:
         77:51:e1:ee:97:79:c4:b1:54:11:66:49:c9:f4:30:f0:f7:17:
         e6:90:a7:64:0e:df:e4:f6:ac:ed:bf:07:7c:3b:66:26:ae:18:
         d8:62:40:be:74:cd:e4:06:af:64:2c:f6:de:de:90:94:eb:8e:
         75:af:7d:92:b3:4b:59:79:54:96:b5:fb:df:58:dd:01:0d:fd:
         b2:5b:fa:3d:0f:ce:10:86:77:88:26:39:a0:17:8b:70:e3:d5:
         ca:d2:60:19:74:22:e1:c6:a4:aa:0c:2f:f7:09:80:89:05:c7:
         f3:e0:a0:3e:54:fd:11:b0:cc:40:1a:17:f1:8e:e0:2c:d7:05:
         35:eb:df:6b:37:d6:94:d9:d2:69:c5:eb:4d:63:89:a6:dd:5b:
         6b:cc:3a:22:0b:f5:d3:c5:42:af:05:0c:be:97:e7:53:78:29:
         17:e1:3b:56:64:c5:8e:b9:25:f6:fd:2d:0f:1d:8d:67:7f:d3:
         5a:de:6f:ef:57:b9:fa:ab:c7:8b:58:a7:31:53:cb:30:3e:96:
         77:55:70:01:06:bc:21:4b:d2:dc:92:25:bb:41:e3:ef:36:33:
         bf:c5:03:aa:81:eb:fb:f0:d0:16:21:f4:64:62:7b:e5:4e:72:
         55:86:ab:20
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBWTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhENzg4
Njc4RTY0RDI5MTg0QzIzREFBQURCNTk0QkZEOUJBRTI0MDVDMB4XDTI1MDgwMTAx
MjkwNloXDTI2MDczMDA2MjkwOFowMzExMC8GA1UEAxMoMjUxMDA1Q0FFOUI1RUEz
NkFBQTIxMTFGRkFFQ0MxMTYyRUFFQkJERTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALGFtsSiRILBB01nmOO5mT3UusXIXLmfzpM96IV4Ct/sADVwPUYV
Lwd2LwV71JRii935JoP5T6ZSw111MZ1N9mKazR8BvjeTnpjGb8tKwalGD1c3hhoB
InZeg/RQAGAsTt4SfR1sK1X9EklfeEVe3eCbgkS2zuladiWgszWG/f0egoieh54n
h8CCoil8hVtvzbFdzWmz84hU30AdCW0w6j7nRaTeAEF/uAm4LIF3V1frLvz1JiT2
e8/nIRstQklE2LQwephg4GfX4aegUbdzG65ryMQY5wUPR/tbzmFIEVI3tCX626zs
eynl4dggtWCqeHXirBmx5KBIJawFI3OhqIcCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBQlEAXK6bXqNqqiER/67MEWLq673jAfBgNVHSMEGDAWgBTXiGeOZNKRhMI9qq21
lL/ZuuJAXDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjMzLzE0aG5qbVRTa1lUQ1BhcXR0WlNfMmJyaVFGdy5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzE0aG5qbVRTa1lUQ1BhcXR0WlNfMmJy
aVFGdy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8yMzMvSlJBRnl1bTE2amFxb2hFZi11ekJGaTZ1dTk0LnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBMoZwDANBgkqhkiG9w0BAQsFAAOCAQEAv0w+YqRb1h/JM940684gbQAxd1Hh
7pd5xLFUEWZJyfQw8PcX5pCnZA7f5Pas7b8HfDtmJq4Y2GJAvnTN5AavZCz23t6Q
lOuOda99krNLWXlUlrX731jdAQ39slv6PQ/OEIZ3iCY5oBeLcOPVytJgGXQi4cak
qgwv9wmAiQXH8+CgPlT9EbDMQBoX8Y7gLNcFNevfazfWlNnSacXrTWOJpt1ba8w6
Igv108VCrwUMvpfnU3gpF+E7VmTFjrkl9v0tDx2NZ3/TWt5v71e5+qvHi1inMVPL
MD6Wd1VwAQa8IUvS3JIlu0Hj7zYzv8UDqoHr+/DQFiH0ZGJ75U5yVYarIA==
-----END CERTIFICATE-----
Generated at Sun Aug 24 05:45:20 2025 by rpki-client