Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/240/HGPn0IxAl8GO1IqhKQIOnY2aFPw.roa
File:                     HGPn0IxAl8GO1IqhKQIOnY2aFPw.roa (raw, json)
Hash identifier:          yYQDA5uw9Pssctz3MYjj048TsmYPu29p363ySsvAV3k=
Subject key identifier:   1C:63:E7:D0:8C:40:97:C1:8E:D4:8A:A1:29:02:0E:9D:8D:9A:14:FC
Certificate issuer:       /CN=B96964A7CE0A58F4AE3673F47D7A1D425BE4A07D
Certificate serial:       51
Authority key identifier: B9:69:64:A7:CE:0A:58:F4:AE:36:73:F4:7D:7A:1D:42:5B:E4:A0:7D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uWlkp84KWPSuNnP0fXodQlvkoH0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/HGPn0IxAl8GO1IqhKQIOnY2aFPw.roa
Signing time:             Tue 01 Jul 2025 01:32:11 +0000
ROA not before:           Tue 01 Jul 2025 01:32:11 +0000
ROA not after:            Mon 15 Jun 2026 01:30:02 +0000
asID:                     9597
IP address blocks:        219.100.168.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/uWlkp84KWPSuNnP0fXodQlvkoH0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/uWlkp84KWPSuNnP0fXodQlvkoH0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uWlkp84KWPSuNnP0fXodQlvkoH0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 81 (0x51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B96964A7CE0A58F4AE3673F47D7A1D425BE4A07D
        Validity
            Not Before: Jul  1 01:32:11 2025 GMT
            Not After : Jun 15 01:30:02 2026 GMT
        Subject: CN=1C63E7D08C4097C18ED48AA129020E9D8D9A14FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:50:95:4a:98:e1:d4:fd:ad:5b:ee:0c:79:fd:
                    c4:51:e7:88:26:2f:b4:15:de:42:38:c9:08:8d:ef:
                    7f:97:40:b1:91:94:58:7b:e2:ed:cd:0c:8c:75:58:
                    19:3b:a2:fe:d9:b2:46:c8:3b:d0:fb:1f:2a:24:f5:
                    ad:38:fb:eb:78:91:bd:cd:80:4b:ad:da:a7:4a:1e:
                    c5:4b:c3:45:aa:e3:0e:44:e6:5d:d4:21:a6:d0:6f:
                    f1:ad:e0:bf:9f:fa:a2:a9:73:55:a9:ce:7e:72:0e:
                    ed:ba:32:ad:d5:94:8c:d1:98:fe:fb:2e:02:68:ea:
                    d9:09:6b:ac:2d:84:0e:72:ed:c2:db:f4:b6:62:95:
                    11:bd:01:c7:13:80:25:a7:03:fd:97:bf:9c:67:81:
                    27:84:6d:c6:75:89:2a:9d:77:51:21:7f:4b:97:cc:
                    a3:c6:f4:15:dc:b2:ab:23:d0:34:ea:50:1f:66:5c:
                    5d:76:7a:fd:e0:2a:2c:da:34:73:33:36:21:aa:aa:
                    0b:ef:f4:cb:36:fe:93:b1:94:a8:58:8a:77:14:a3:
                    2e:68:49:ea:a2:3c:98:38:6a:69:56:27:1a:1c:c7:
                    25:11:76:9a:5d:99:32:fb:3f:cd:eb:51:90:01:4f:
                    c7:e0:2f:0d:84:01:15:3a:fd:4f:16:c1:3e:c4:9f:
                    b7:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:63:E7:D0:8C:40:97:C1:8E:D4:8A:A1:29:02:0E:9D:8D:9A:14:FC
            X509v3 Authority Key Identifier:
                keyid:B9:69:64:A7:CE:0A:58:F4:AE:36:73:F4:7D:7A:1D:42:5B:E4:A0:7D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/uWlkp84KWPSuNnP0fXodQlvkoH0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uWlkp84KWPSuNnP0fXodQlvkoH0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/HGPn0IxAl8GO1IqhKQIOnY2aFPw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.100.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         85:9f:92:65:5d:26:19:8a:46:f7:48:2b:83:e5:e5:fa:35:d1:
         d2:55:8c:b6:36:f9:3f:aa:ae:bf:95:74:07:8d:24:0a:06:37:
         b6:4c:55:7a:e9:30:3e:8f:c2:f0:b7:fe:64:ed:ed:26:b9:cb:
         b2:7a:ba:d8:47:14:17:0a:64:81:68:7e:91:ff:5d:c6:0e:d4:
         93:f0:03:91:a7:ee:29:88:6e:8b:da:1b:e3:fd:72:53:25:fb:
         27:92:6f:21:31:80:cb:e2:cd:da:ef:5a:c2:04:09:17:08:b3:
         1f:08:de:58:b0:11:dd:9f:2f:49:a0:3f:84:1a:6e:47:81:03:
         2b:45:17:ce:a0:0f:15:23:dd:ac:56:df:60:f5:20:f2:05:80:
         e4:33:20:fd:15:a5:2b:6c:b2:46:30:b6:9b:4d:ab:93:7e:47:
         74:15:9a:2a:50:71:65:98:f3:12:e9:db:39:08:1e:48:85:07:
         42:cf:72:77:d9:01:59:cc:4c:bd:5f:be:72:33:37:68:2b:00:
         fa:3c:0c:97:a4:70:cb:27:33:19:71:a8:cd:e3:ce:ff:ec:a2:
         0f:73:d5:5e:59:ae:ec:52:cb:60:e7:69:6a:0a:59:f0:07:6c:
         6d:2c:0f:61:e2:ae:5c:25:b0:ee:f6:60:aa:82:26:d5:2b:79:
         fc:38:b3:a3
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBUTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhCOTY5
NjRBN0NFMEE1OEY0QUUzNjczRjQ3RDdBMUQ0MjVCRTRBMDdEMB4XDTI1MDcwMTAx
MzIxMVoXDTI2MDYxNTAxMzAwMlowMzExMC8GA1UEAxMoMUM2M0U3RDA4QzQwOTdD
MThFRDQ4QUExMjkwMjBFOUQ4RDlBMTRGQzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAOFQlUqY4dT9rVvuDHn9xFHniCYvtBXeQjjJCI3vf5dAsZGUWHvi
7c0MjHVYGTui/tmyRsg70PsfKiT1rTj763iRvc2AS63ap0oexUvDRarjDkTmXdQh
ptBv8a3gv5/6oqlzVanOfnIO7boyrdWUjNGY/vsuAmjq2QlrrC2EDnLtwtv0tmKV
Eb0BxxOAJacD/Ze/nGeBJ4RtxnWJKp13USF/S5fMo8b0FdyyqyPQNOpQH2ZcXXZ6
/eAqLNo0czM2IaqqC+/0yzb+k7GUqFiKdxSjLmhJ6qI8mDhqaVYnGhzHJRF2ml2Z
Mvs/zetRkAFPx+AvDYQBFTr9TxbBPsSft7sCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBQcY+fQjECXwY7UiqEpAg6djZoU/DAfBgNVHSMEGDAWgBS5aWSnzgpY9K42c/R9
eh1CW+SgfTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjQwL3VXbGtwODRLV1BTdU5uUDBmWG9kUWx2a29IMC5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3VXbGtwODRLV1BTdU5uUDBmWG9kUWx2
a29IMC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8yNDAvSEdQbjBJeEFsOEdPMUlxaEtRSU9uWTJhRlB3LnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAttkqDANBgkqhkiG9w0BAQsFAAOCAQEAhZ+SZV0mGYpG90grg+Xl+jXR0lWM
tjb5P6quv5V0B40kCgY3tkxVeukwPo/C8Lf+ZO3tJrnLsnq62EcUFwpkgWh+kf9d
xg7Uk/ADkafuKYhui9ob4/1yUyX7J5JvITGAy+LN2u9awgQJFwizHwjeWLAR3Z8v
SaA/hBpuR4EDK0UXzqAPFSPdrFbfYPUg8gWA5DMg/RWlK2yyRjC2m02rk35HdBWa
KlBxZZjzEunbOQgeSIUHQs9yd9kBWcxMvV++cjM3aCsA+jwMl6RwyyczGXGozePO
/+yiD3PVXlmu7FLLYOdpagpZ8AdsbSwPYeKuXCWw7vZgqoIm1St5/Dizow==
-----END CERTIFICATE-----
Generated at Fri Jul 4 23:03:18 2025 by rpki-client