Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/vO0hH2iV_cOkGJ08P_4sVA3g9us.roa
File:                     vO0hH2iV_cOkGJ08P_4sVA3g9us.roa (raw, json)
Hash identifier:          pzNb5A7a4k5eqDlYAN6SchgUhYiPMuo0SmnnFXr7X7I=
Subject key identifier:   BC:ED:21:1F:68:95:FD:C3:A4:18:9D:3C:3F:FE:2C:54:0D:E0:F6:EB
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0498
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/vO0hH2iV_cOkGJ08P_4sVA3g9us.roa
Signing time:             Wed 01 Oct 2025 01:43:37 +0000
ROA not before:           Wed 01 Oct 2025 01:43:37 +0000
ROA not after:            Tue 15 Sep 2026 01:30:02 +0000
asID:                     10013
IP address blocks:        220.215.40.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Oct 2025 09:38:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1176 (0x498)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Oct  1 01:43:37 2025 GMT
            Not After : Sep 15 01:30:02 2026 GMT
        Subject: CN=BCED211F6895FDC3A4189D3C3FFE2C540DE0F6EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:71:91:ba:cc:3a:83:6b:47:8f:df:36:5c:ed:
                    ae:c0:ee:ff:96:b0:3c:36:ad:62:bd:75:4c:a7:4f:
                    92:f8:97:6f:72:dc:61:65:9f:b2:32:6f:42:a0:a2:
                    87:ae:ec:2c:17:b7:e7:71:08:bb:02:f4:50:77:35:
                    d1:ed:37:94:82:c6:d5:d6:f5:e0:3d:d8:09:e8:7e:
                    19:09:a0:90:78:5e:d5:c2:87:9c:95:ef:3e:cd:70:
                    20:f7:60:18:ec:20:b8:f9:b9:af:a5:11:86:3f:66:
                    be:9f:60:e7:dc:62:5f:9f:45:4d:ae:f4:78:0e:62:
                    06:82:f0:c8:5c:7c:ca:4a:5a:a0:2b:f9:3f:f9:a1:
                    15:cc:c4:14:0b:02:92:d0:fc:c7:cd:61:77:7a:47:
                    bb:f5:2a:89:44:c4:ef:f7:e8:2f:d6:5c:3f:06:24:
                    13:ee:ed:90:46:94:50:eb:1e:23:50:45:b7:05:14:
                    1e:d9:a7:37:a6:16:57:4f:e2:5d:53:3f:6d:33:81:
                    4e:2f:52:ce:f0:73:ee:a0:9c:af:b0:9a:b3:b3:d6:
                    e8:11:f6:96:eb:5d:d9:37:03:1a:46:06:47:9b:34:
                    8f:d5:2e:44:88:7d:e5:c0:13:fa:e9:c6:4b:fa:18:
                    ad:e7:f3:47:4c:64:17:cc:1e:63:46:4b:c4:0f:fa:
                    07:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:ED:21:1F:68:95:FD:C3:A4:18:9D:3C:3F:FE:2C:54:0D:E0:F6:EB
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/vO0hH2iV_cOkGJ08P_4sVA3g9us.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.215.40.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:a7:cc:c8:f0:94:8e:91:93:1f:35:cc:8c:a4:8b:60:ad:4a:
         a3:62:a3:4c:b1:56:41:d0:ad:a7:db:44:aa:d1:79:40:9c:1e:
         8e:d5:de:e0:8a:7b:d9:6e:98:01:b7:30:0b:75:92:90:62:a8:
         6e:1c:30:69:00:d3:1f:48:b6:cb:b4:e8:b6:4f:2c:2d:91:9d:
         bd:97:21:e3:f6:fa:c3:a6:9a:74:bc:cb:c4:0b:5b:5c:57:40:
         37:11:e7:75:1e:34:d2:6c:38:5b:61:02:29:68:3d:b7:b9:e3:
         19:97:e3:1d:a5:c6:96:1b:3e:7d:6a:1b:9a:b7:52:3d:55:e7:
         ca:55:37:c4:25:d4:c1:a3:fb:55:2a:5d:cb:a3:93:7e:16:23:
         0b:15:68:45:fa:cb:ee:93:76:fa:51:f9:f5:b8:2b:03:24:aa:
         f9:50:84:27:23:30:23:af:ce:c4:fb:64:02:f7:a9:ef:51:50:
         c2:f9:89:d5:34:a8:8b:51:9e:42:74:4d:53:bb:6b:92:1e:0e:
         8c:79:7a:b7:e6:7a:67:bc:97:f8:ea:90:ab:e7:7e:01:3c:86:
         5d:2e:3e:b6:d7:12:25:e6:35:01:e2:6b:7b:b6:22:5e:39:99:
         df:cc:fc:25:08:77:7d:04:3d:c2:24:d9:38:e3:d0:72:0c:04:
         2e:34:31:7c
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICBJgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3
MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNTEwMDEw
MTQzMzdaFw0yNjA5MTUwMTMwMDJaMDMxMTAvBgNVBAMTKEJDRUQyMTFGNjg5NUZE
QzNBNDE4OUQzQzNGRkUyQzU0MERFMEY2RUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDacZG6zDqDa0eP3zZc7a7A7v+WsDw2rWK9dUynT5L4l29y3GFl
n7Iyb0Kgooeu7CwXt+dxCLsC9FB3NdHtN5SCxtXW9eA92AnofhkJoJB4XtXCh5yV
7z7NcCD3YBjsILj5ua+lEYY/Zr6fYOfcYl+fRU2u9HgOYgaC8MhcfMpKWqAr+T/5
oRXMxBQLApLQ/MfNYXd6R7v1KolExO/36C/WXD8GJBPu7ZBGlFDrHiNQRbcFFB7Z
pzemFldP4l1TP20zgU4vUs7wc+6gnK+wmrOz1ugR9pbrXdk3AxpGBkebNI/VLkSI
feXAE/rpxkv6GK3n80dMZBfMHmNGS8QP+gf9AgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUvO0hH2iV/cOkGJ08P/4sVA3g9uswHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp
qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR
Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzk0L3ZPMGhIMmlWX2NPa0dKMDhQXzRzVkEzZzl1cy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADc1ygwDQYJKoZIhvcNAQELBQADggEBABmnzMjwlI6Rkx81zIyki2CtSqNi
o0yxVkHQrafbRKrReUCcHo7V3uCKe9lumAG3MAt1kpBiqG4cMGkA0x9Itsu06LZP
LC2Rnb2XIeP2+sOmmnS8y8QLW1xXQDcR53UeNNJsOFthAiloPbe54xmX4x2lxpYb
Pn1qG5q3Uj1V58pVN8Ql1MGj+1UqXcujk34WIwsVaEX6y+6TdvpR+fW4KwMkqvlQ
hCcjMCOvzsT7ZAL3qe9RUML5idU0qItRnkJ0TVO7a5IeDox5erfmeme8l/jqkKvn
fgE8hl0uPrbXEiXmNQHia3u2Il45md/M/CUId30EPcIk2Tjj0HIMBC40MXw=
-----END CERTIFICATE-----
Generated at Mon Oct 20 12:09:58 2025 by rpki-client