Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/354/PLthVgVcZ9YkRb79jZEzYWghkSU.roa
File:                     PLthVgVcZ9YkRb79jZEzYWghkSU.roa (raw, json)
Hash identifier:          k3C+hYaYTYUb5+RDg2StQGkan8DcDr/1LbTR0GxrRZQ=
Subject key identifier:   3C:BB:61:56:05:5C:67:D6:24:45:BE:FD:8D:91:33:61:68:21:91:25
Certificate issuer:       /CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Certificate serial:       0133
Authority key identifier: 0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/PLthVgVcZ9YkRb79jZEzYWghkSU.roa
Signing time:             Fri 01 Aug 2025 01:33:17 +0000
ROA not before:           Fri 01 Aug 2025 01:33:17 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     9607
IP address blocks:        218.231.240.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 19:35:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 307 (0x133)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
        Validity
            Not Before: Aug  1 01:33:17 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=3CBB6156055C67D62445BEFD8D91336168219125
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:57:12:c7:5b:90:3e:57:57:6e:a1:12:ab:ec:
                    ae:49:10:d3:5b:5e:44:65:a6:12:07:e1:1b:5a:b7:
                    e8:67:1b:ab:06:2a:d4:1f:a4:a1:00:d2:5e:0b:db:
                    3d:11:1a:e6:90:8f:7c:c2:00:f9:de:2e:17:b5:6d:
                    b4:bf:c7:65:5f:73:b2:17:79:2e:6c:c0:e6:14:8d:
                    9f:e1:ac:1d:ee:d2:65:06:a0:a7:8c:3e:c4:7d:59:
                    ff:3b:92:a3:c3:d7:e0:e9:85:eb:d4:ba:30:d1:b9:
                    31:5e:03:32:0a:36:8d:ac:c5:41:2f:6b:bc:85:af:
                    d5:ef:f2:cf:3e:86:1a:c2:8a:fd:72:ca:5f:13:72:
                    f8:9a:4e:c8:f1:2e:01:34:bd:d5:2a:e3:89:9f:22:
                    cd:3d:bd:19:66:05:97:3e:d6:7b:7c:0c:46:04:e2:
                    90:0b:5a:4b:30:47:7d:51:5c:62:a9:98:5c:9e:fd:
                    4e:38:b1:74:93:d4:e5:9e:a5:87:37:26:3c:34:14:
                    b0:44:c8:3c:28:4e:1c:cd:04:99:21:38:d5:66:55:
                    fe:aa:7a:dd:e8:28:e4:4d:b4:12:f5:ab:d5:e9:07:
                    37:b8:fb:0b:95:a8:08:59:9d:ca:1c:f1:89:1e:b3:
                    ca:0c:2b:f3:47:b9:59:46:8c:03:bb:82:83:35:0d:
                    79:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:BB:61:56:05:5C:67:D6:24:45:BE:FD:8D:91:33:61:68:21:91:25
            X509v3 Authority Key Identifier:
                keyid:0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/PLthVgVcZ9YkRb79jZEzYWghkSU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.231.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b0:24:ff:31:20:a9:66:b8:cc:96:8c:3a:eb:c3:ae:86:cb:df:
         dc:a3:25:79:4f:f4:8e:b3:1d:ef:20:c5:25:9a:da:2f:1e:fe:
         29:fd:e8:31:8b:1b:ae:30:19:41:85:d8:f8:48:7b:97:ec:5f:
         67:08:31:ac:22:3e:f1:b0:26:fb:83:12:29:b0:e2:07:f6:1a:
         d4:b6:5f:0a:30:f2:c9:e8:c1:bb:18:61:33:d3:cd:b4:37:03:
         8e:75:39:8e:f4:b0:33:b6:46:9f:80:7a:1d:8a:a9:f2:bd:cc:
         be:94:7b:c3:04:a9:61:64:74:8e:d4:ea:c1:6f:dd:ac:d1:5e:
         7b:96:9f:41:33:1b:66:64:30:dc:b5:5f:3e:91:b6:f4:ce:40:
         30:e8:be:75:18:66:0c:a1:92:6e:45:eb:b5:d5:47:75:58:b6:
         de:52:fb:36:1a:e2:cf:7e:77:80:59:05:0a:87:f6:59:60:b6:
         5d:b4:ab:25:8c:c6:1c:4b:f8:b9:5d:96:ef:4b:bf:6c:08:f2:
         d3:84:55:91:18:fa:ff:0f:d0:92:43:5b:31:8f:d1:d0:f4:82:
         64:c4:7a:01:a4:80:d8:6a:47:43:e3:b3:69:cc:83:92:65:5e:
         04:01:28:b6:ef:44:cb:f1:46:7a:de:8b:cc:46:cc:9d:f9:9f:
         57:5a:a0:75
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICATMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEE1
QUNBQzI5OTBCRDhGODY1NUMwQzcyMUJBQ0ZGMDMwQTU5RDFGQzAeFw0yNTA4MDEw
MTMzMTdaFw0yNjA3MzAwNjI5MDhaMDMxMTAvBgNVBAMTKDNDQkI2MTU2MDU1QzY3
RDYyNDQ1QkVGRDhEOTEzMzYxNjgyMTkxMjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDmVxLHW5A+V1duoRKr7K5JENNbXkRlphIH4Rtat+hnG6sGKtQf
pKEA0l4L2z0RGuaQj3zCAPneLhe1bbS/x2Vfc7IXeS5swOYUjZ/hrB3u0mUGoKeM
PsR9Wf87kqPD1+DphevUujDRuTFeAzIKNo2sxUEva7yFr9Xv8s8+hhrCiv1yyl8T
cviaTsjxLgE0vdUq44mfIs09vRlmBZc+1nt8DEYE4pALWkswR31RXGKpmFye/U44
sXST1OWepYc3Jjw0FLBEyDwoThzNBJkhONVmVf6qet3oKORNtBL1q9XpBze4+wuV
qAhZncoc8Ykes8oMK/NHuVlGjAO7goM1DXn9AgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUPLthVgVcZ9YkRb79jZEzYWghkSUwHwYDVR0jBBgwFoAUClrKwpkL2PhlXAxy
G6z/AwpZ0fwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzM1NC9DbHJLd3BrTDJQaGxYQXh5RzZ6X0F3cFowZncuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9DbHJLd3BrTDJQaGxYQXh5RzZ6X0F3
cFowZncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzU0L1BMdGhWZ1ZjWjlZa1JiNzlqWkV6WVdnaGtTVS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBALa5/AwDQYJKoZIhvcNAQELBQADggEBALAk/zEgqWa4zJaMOuvDrobL39yj
JXlP9I6zHe8gxSWa2i8e/in96DGLG64wGUGF2PhIe5fsX2cIMawiPvGwJvuDEimw
4gf2GtS2Xwow8snowbsYYTPTzbQ3A451OY70sDO2Rp+Aeh2KqfK9zL6Ue8MEqWFk
dI7U6sFv3azRXnuWn0EzG2ZkMNy1Xz6RtvTOQDDovnUYZgyhkm5F67XVR3VYtt5S
+zYa4s9+d4BZBQqH9llgtl20qyWMxhxL+Lldlu9Lv2wI8tOEVZEY+v8P0JJDWzGP
0dD0gmTEegGkgNhqR0Pjs2nMg5JlXgQBKLbvRMvxRnrei8xGzJ35n1daoHU=
-----END CERTIFICATE-----
Generated at Sat Aug 23 22:27:38 2025 by rpki-client