Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/454/nB7h8GGzVzDCBTWkaMb7HNZ8rxk.roa
File:                     nB7h8GGzVzDCBTWkaMb7HNZ8rxk.roa (raw, json)
Hash identifier:          IpSd49Zb/DkneMD3+fLGaMDLvRJU6gGByNvNvmvbaLE=
Subject key identifier:   9C:1E:E1:F0:61:B3:57:30:C2:05:35:A4:68:C6:FB:1C:D6:7C:AF:19
Certificate issuer:       /CN=AD4741F0349FBC15A708E28A2CE307906CAC5DE0
Certificate serial:       62
Authority key identifier: AD:47:41:F0:34:9F:BC:15:A7:08:E2:8A:2C:E3:07:90:6C:AC:5D:E0
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/nB7h8GGzVzDCBTWkaMb7HNZ8rxk.roa
Signing time:             Wed 18 Jun 2025 02:37:41 +0000
ROA not before:           Wed 18 Jun 2025 02:37:41 +0000
ROA not after:            Mon 15 Jun 2026 01:30:02 +0000
asID:                     10000
IP address blocks:        126.52.0.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 98 (0x62)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD4741F0349FBC15A708E28A2CE307906CAC5DE0
        Validity
            Not Before: Jun 18 02:37:41 2025 GMT
            Not After : Jun 15 01:30:02 2026 GMT
        Subject: CN=9C1EE1F061B35730C20535A468C6FB1CD67CAF19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:fa:bc:5e:82:8b:0e:2b:b9:29:03:d2:f1:33:
                    f5:cd:af:64:f1:22:d5:38:20:19:db:e9:d7:a4:18:
                    61:a9:af:1c:50:08:66:f5:d9:11:92:6d:b4:ec:10:
                    85:fd:1f:f7:29:2c:ef:97:7c:ec:ac:ee:f6:ac:0b:
                    f1:7c:ef:9f:12:0f:c4:d1:12:45:74:0a:35:e3:80:
                    af:04:53:d7:b3:54:15:72:8c:54:0d:53:4a:c7:d7:
                    41:63:1f:80:fd:68:89:e2:4e:12:dc:c0:d2:e8:44:
                    79:76:30:54:3c:f6:fe:14:4a:7c:65:49:3f:1e:b0:
                    19:6f:ad:02:8e:16:10:7f:72:d5:2d:51:b2:01:c3:
                    4a:52:85:9e:55:49:94:d8:c1:b9:78:fe:95:a8:4d:
                    50:db:71:ef:3f:16:2c:1a:59:f6:e3:3e:7c:ca:92:
                    3c:fd:4e:7e:23:6d:b3:c6:22:32:bc:b7:53:db:c2:
                    53:b5:52:7c:21:cc:5a:af:91:fc:aa:4a:20:2f:e5:
                    50:5b:22:b7:7a:62:0a:85:1e:3b:13:db:56:5c:bf:
                    7e:5c:88:a6:87:a8:07:05:c7:19:76:93:1c:2f:78:
                    2e:29:d1:f8:a4:26:a8:63:79:c6:12:21:f1:90:0a:
                    c8:ac:86:d5:7c:8a:98:a5:ef:a2:d2:ac:c2:bb:cb:
                    a1:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:1E:E1:F0:61:B3:57:30:C2:05:35:A4:68:C6:FB:1C:D6:7C:AF:19
            X509v3 Authority Key Identifier:
                keyid:AD:47:41:F0:34:9F:BC:15:A7:08:E2:8A:2C:E3:07:90:6C:AC:5D:E0

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/nB7h8GGzVzDCBTWkaMb7HNZ8rxk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  126.52.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         6c:e8:89:fa:c4:68:4e:11:cf:12:94:cd:78:0d:94:5a:61:c2:
         cd:73:71:26:32:c3:c0:f9:82:bc:0c:60:da:46:50:a9:6b:e1:
         e7:ba:a8:c1:48:c0:62:17:31:a7:a9:c0:22:c6:02:1d:a0:04:
         30:25:f7:33:e7:c7:0f:36:2d:6f:a7:54:ac:ff:ab:ea:8d:80:
         d8:6f:24:31:89:b1:67:74:d5:d2:89:2a:dd:7c:8c:ef:f0:4e:
         cb:12:33:aa:3a:77:47:16:23:34:5a:3c:66:74:c9:9c:69:0a:
         a7:4c:c3:bd:cd:41:f3:4f:73:41:7d:1d:e4:13:47:d6:a3:50:
         ee:dc:e1:80:d1:80:af:13:51:bb:d8:e1:23:cb:7e:80:3d:89:
         1a:1d:8a:47:e3:92:1f:e5:4f:45:a3:93:23:b7:06:56:45:87:
         f8:9b:20:d9:22:15:52:4c:7e:bc:fc:0e:7e:a2:2e:3a:bf:c5:
         da:68:e9:26:8f:58:f9:e5:ae:af:52:3b:7a:bf:07:93:41:3b:
         ff:01:1c:a0:4b:3d:67:89:95:44:bb:42:c2:73:40:00:2f:c2:
         8d:14:a4:67:88:84:bb:3f:82:d7:34:8c:89:2b:eb:4b:4c:88:
         c6:fa:f7:e4:1f:ec:d4:bf:58:5c:05:f1:b3:1a:2f:b8:46:fc:
         e7:d8:a8:e6
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBYjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhBRDQ3
NDFGMDM0OUZCQzE1QTcwOEUyOEEyQ0UzMDc5MDZDQUM1REUwMB4XDTI1MDYxODAy
Mzc0MVoXDTI2MDYxNTAxMzAwMlowMzExMC8GA1UEAxMoOUMxRUUxRjA2MUIzNTcz
MEMyMDUzNUE0NjhDNkZCMUNENjdDQUYxOTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAOz6vF6Ciw4ruSkD0vEz9c2vZPEi1TggGdvp16QYYamvHFAIZvXZ
EZJttOwQhf0f9yks75d87Kzu9qwL8XzvnxIPxNESRXQKNeOArwRT17NUFXKMVA1T
SsfXQWMfgP1oieJOEtzA0uhEeXYwVDz2/hRKfGVJPx6wGW+tAo4WEH9y1S1RsgHD
SlKFnlVJlNjBuXj+lahNUNtx7z8WLBpZ9uM+fMqSPP1OfiNts8YiMry3U9vCU7VS
fCHMWq+R/KpKIC/lUFsit3piCoUeOxPbVly/flyIpoeoBwXHGXaTHC94LinR+KQm
qGN5xhIh8ZAKyKyG1XyKmKXvotKswrvLof8CAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBScHuHwYbNXMMIFNaRoxvsc1nyvGTAfBgNVHSMEGDAWgBStR0HwNJ+8FacI4oos
4weQbKxd4DAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNDU0L3JVZEI4RFNmdkJXbkNPS0tMT01Ia0d5c1hlQS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3JVZEI4RFNmdkJXbkNPS0tMT01Ia0d5
c1hlQS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC80NTQvbkI3aDhHR3pWekRDQlRXa2FNYjdITlo4cnhrLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBH40ADANBgkqhkiG9w0BAQsFAAOCAQEAbOiJ+sRoThHPEpTNeA2UWmHCzXNx
JjLDwPmCvAxg2kZQqWvh57qowUjAYhcxp6nAIsYCHaAEMCX3M+fHDzYtb6dUrP+r
6o2A2G8kMYmxZ3TV0okq3XyM7/BOyxIzqjp3RxYjNFo8ZnTJnGkKp0zDvc1B809z
QX0d5BNH1qNQ7tzhgNGArxNRu9jhI8t+gD2JGh2KR+OSH+VPRaOTI7cGVkWH+Jsg
2SIVUkx+vPwOfqIuOr/F2mjpJo9Y+eWur1I7er8Hk0E7/wEcoEs9Z4mVRLtCwnNA
AC/CjRSkZ4iEuz+C1zSMiSvrS0yIxvr35B/s1L9YXAXxsxovuEb859io5g==
-----END CERTIFICATE-----
Generated at Fri Jul 4 12:04:13 2025 by rpki-client