Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/247/VO4W-Br07QGvtdJFw1l99sVqoU8.roa
File:                     VO4W-Br07QGvtdJFw1l99sVqoU8.roa (raw, json)
Hash identifier:          kfAuU5WVGapLqCPQRWz1aHyAZV4Ed+vvb3rTgj7Fygo=
Subject key identifier:   54:EE:16:F8:1A:F4:ED:01:AF:B5:D2:45:C3:59:7D:F6:C5:6A:A1:4F
Certificate issuer:       /CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
Certificate serial:       FF
Authority key identifier: 9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/VO4W-Br07QGvtdJFw1l99sVqoU8.roa
Signing time:             Thu 01 May 2025 01:32:08 +0000
ROA not before:           Thu 01 May 2025 01:32:08 +0000
ROA not after:            Wed 15 Apr 2026 01:30:03 +0000
asID:                     9370
IP address blocks:        110.44.128.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 May 2025 06:43:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 255 (0xff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
        Validity
            Not Before: May  1 01:32:08 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=54EE16F81AF4ED01AFB5D245C3597DF6C56AA14F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ca:85:78:24:1f:b6:54:ce:f8:1c:96:4d:48:
                    09:ff:15:8a:f7:d6:57:71:ac:c2:08:ba:a4:3f:77:
                    57:62:26:19:0d:32:c4:71:4d:a2:63:5c:cb:6f:36:
                    63:6c:69:8b:b7:36:2c:a4:80:a1:16:03:cd:a5:b2:
                    30:fa:9d:d2:81:89:2a:c9:6d:b3:f6:2c:14:7b:31:
                    c4:d6:66:f7:90:8e:f5:e9:c7:38:97:a5:40:60:ec:
                    09:d4:ab:7f:88:29:ba:fa:07:25:22:8e:8d:fb:1c:
                    9c:9c:84:5f:b6:61:c4:d8:2b:88:6b:da:dd:2d:c0:
                    24:d0:17:79:f6:ae:1e:8f:90:7b:d9:f3:cb:23:d5:
                    f7:d3:76:71:da:9f:6d:9c:6b:c7:3a:ac:03:20:23:
                    f7:e7:8c:dc:d9:78:00:85:45:ee:db:95:00:0c:dd:
                    08:72:ee:e6:08:e2:25:83:e2:b0:35:15:66:de:f1:
                    57:59:22:d6:46:6f:31:3e:94:4a:a5:da:c6:1c:6b:
                    92:8e:37:37:f8:73:92:c8:ab:e1:af:9b:0d:89:6f:
                    d8:4b:55:c2:bd:7b:5c:09:11:ef:7c:8f:ca:b2:d7:
                    fa:29:bf:d3:b2:cc:be:fd:7e:64:49:96:14:89:0e:
                    9d:d9:44:e6:cc:ca:1f:16:5e:14:3b:8c:98:ee:4a:
                    f2:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:EE:16:F8:1A:F4:ED:01:AF:B5:D2:45:C3:59:7D:F6:C5:6A:A1:4F
            X509v3 Authority Key Identifier:
                keyid:9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/VO4W-Br07QGvtdJFw1l99sVqoU8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.44.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         ae:d6:df:f7:56:7e:08:0e:98:b2:21:97:a7:7f:34:3c:8d:b8:
         9c:f6:d6:6a:fe:38:e5:be:d9:db:47:07:29:cc:4f:8f:f5:39:
         f1:7d:81:b0:a0:d6:e0:6e:de:70:9e:b9:a4:87:60:c8:4f:0c:
         2f:c0:ba:fe:27:43:87:95:88:15:90:99:be:25:ff:cc:3b:14:
         8a:d0:7e:b2:39:fe:f0:f0:2b:74:3a:0c:d3:a0:2b:ea:14:05:
         a3:35:20:d7:5e:77:a0:9d:45:2a:54:0d:f4:0a:36:06:b1:a8:
         d0:6a:0b:e1:5c:57:ae:51:c0:08:dd:4a:2c:62:a6:4c:e9:10:
         02:99:d3:c7:c1:69:ba:48:ba:47:03:45:fa:e2:d5:9a:86:46:
         a5:92:65:15:99:2c:05:72:e4:2d:0e:8d:17:f7:04:09:aa:4d:
         00:93:10:07:e6:e8:6e:f0:36:11:e7:bf:3a:85:d2:86:ce:c1:
         07:61:b1:41:e3:2c:47:db:50:38:fe:03:6e:2a:f6:05:98:fe:
         be:ee:89:00:35:99:0d:b1:a3:65:53:8c:a0:f5:11:2e:bb:67:
         40:0a:34:1c:fa:d0:50:fe:e3:92:57:a9:92:ae:c1:c9:37:64:
         2e:18:07:82:a7:f8:50:8a:c0:fe:be:cf:cf:c1:2f:48:96:0e:
         f1:b8:c2:d2
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAP8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOUEy
MUJERkYyRENBRkNDMTM4RjVCRkQ2QzAzMzBEMDIxOUUwRjUzMjAeFw0yNTA1MDEw
MTMyMDhaFw0yNjA0MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDU0RUUxNkY4MUFGNEVE
MDFBRkI1RDI0NUMzNTk3REY2QzU2QUExNEYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDNyoV4JB+2VM74HJZNSAn/FYr31ldxrMIIuqQ/d1diJhkNMsRx
TaJjXMtvNmNsaYu3NiykgKEWA82lsjD6ndKBiSrJbbP2LBR7McTWZveQjvXpxziX
pUBg7AnUq3+IKbr6ByUijo37HJychF+2YcTYK4hr2t0twCTQF3n2rh6PkHvZ88sj
1ffTdnHan22ca8c6rAMgI/fnjNzZeACFRe7blQAM3Qhy7uYI4iWD4rA1FWbe8VdZ
ItZGbzE+lEql2sYca5KONzf4c5LIq+Gvmw2Jb9hLVcK9e1wJEe98j8qy1/opv9Oy
zL79fmRJlhSJDp3ZRObMyh8WXhQ7jJjuSvLJAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUVO4W+Br07QGvtdJFw1l99sVqoU8wHwYDVR0jBBgwFoAUmiG9/y3K/ME49b/W
wDMNAhng9TIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzI0Ny9taUc5X3kzS19NRTQ5Yl9Xd0RNTkFobmc5VEkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9taUc5X3kzS19NRTQ5Yl9Xd0RNTkFo
bmc5VEkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMjQ3L1ZPNFctQnIwN1FHdnRkSkZ3MWw5OXNWcW9VOC5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBARuLIAwDQYJKoZIhvcNAQELBQADggEBAK7W3/dWfggOmLIhl6d/NDyNuJz2
1mr+OOW+2dtHBynMT4/1OfF9gbCg1uBu3nCeuaSHYMhPDC/Auv4nQ4eViBWQmb4l
/8w7FIrQfrI5/vDwK3Q6DNOgK+oUBaM1INded6CdRSpUDfQKNgaxqNBqC+FcV65R
wAjdSixipkzpEAKZ08fBabpIukcDRfri1ZqGRqWSZRWZLAVy5C0OjRf3BAmqTQCT
EAfm6G7wNhHnvzqF0obOwQdhsUHjLEfbUDj+A24q9gWY/r7uiQA1mQ2xo2VTjKD1
ES67Z0AKNBz60FD+45JXqZKuwck3ZC4YB4Kn+FCKwP6+z8/BL0iWDvG4wtI=
-----END CERTIFICATE-----
Generated at Mon May 19 09:45:58 2025 by rpki-client