Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/484/n_qzb2QNMks2MEGKIhOsdolncB8.roa
File:                     n_qzb2QNMks2MEGKIhOsdolncB8.roa (raw, json)
Hash identifier:          9XhwTM0faT6E0KC6GHfFy3HYKxOjftemRK6YzltZ9DQ=
Subject key identifier:   9F:FA:B3:6F:64:0D:32:4B:36:30:41:8A:22:13:AC:76:89:67:70:1F
Certificate issuer:       /CN=C0986C0F2DB2D4FE707672C227937BEAA9F5D78A
Certificate serial:       2E
Authority key identifier: C0:98:6C:0F:2D:B2:D4:FE:70:76:72:C2:27:93:7B:EA:A9:F5:D7:8A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wJhsDy2y1P5wdnLCJ5N76qn114o.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/n_qzb2QNMks2MEGKIhOsdolncB8.roa
Signing time:             Tue 07 Oct 2025 01:24:31 +0000
ROA not before:           Tue 07 Oct 2025 01:24:31 +0000
ROA not after:            Tue 15 Sep 2026 01:30:02 +0000
asID:                     9354
IP address blocks:        202.157.236.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/wJhsDy2y1P5wdnLCJ5N76qn114o.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/wJhsDy2y1P5wdnLCJ5N76qn114o.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wJhsDy2y1P5wdnLCJ5N76qn114o.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Oct 2025 06:03:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 46 (0x2e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0986C0F2DB2D4FE707672C227937BEAA9F5D78A
        Validity
            Not Before: Oct  7 01:24:31 2025 GMT
            Not After : Sep 15 01:30:02 2026 GMT
        Subject: CN=9FFAB36F640D324B3630418A2213AC768967701F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:5f:2a:60:10:98:13:42:0f:05:5d:ce:a9:5c:
                    f7:f3:87:2c:86:e4:d9:65:60:71:de:fc:e9:f9:e5:
                    45:cc:31:f8:98:87:d1:fe:a9:03:56:33:35:c8:f5:
                    af:fd:b7:d8:87:c3:6b:42:71:db:c2:84:85:66:69:
                    16:0f:0c:54:26:cb:84:92:83:62:ce:9d:a8:32:cc:
                    c6:37:9b:80:11:c3:21:5c:eb:da:1a:d9:c3:80:66:
                    da:6b:fc:34:a1:02:64:9f:ff:8e:ae:cf:bf:ea:33:
                    e9:be:f1:ef:26:ff:f6:a7:84:ee:b6:b1:9b:b0:2c:
                    00:1b:11:61:7c:d2:4f:9b:99:3a:32:d1:b5:1b:b2:
                    88:d2:8c:8a:b3:e4:69:84:a1:a5:ce:ab:4f:5d:3b:
                    97:1e:71:4d:8d:11:b3:bb:4e:ea:60:32:66:f6:59:
                    75:d9:1d:2c:6c:63:c4:e7:c4:8e:ac:ac:55:b7:f6:
                    8c:d6:b7:5e:6a:c4:e5:d0:08:69:63:4e:89:61:d9:
                    70:15:ed:ec:bd:c5:8d:83:6b:20:72:bc:da:95:8e:
                    b3:24:3b:ad:bd:eb:af:bc:1f:95:78:d8:9f:14:cf:
                    1d:36:e1:e7:db:03:55:5d:4e:7e:a5:6c:22:cf:6f:
                    52:2a:63:62:09:9e:6f:31:c9:4d:9e:50:1b:46:3c:
                    ab:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:FA:B3:6F:64:0D:32:4B:36:30:41:8A:22:13:AC:76:89:67:70:1F
            X509v3 Authority Key Identifier:
                keyid:C0:98:6C:0F:2D:B2:D4:FE:70:76:72:C2:27:93:7B:EA:A9:F5:D7:8A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/wJhsDy2y1P5wdnLCJ5N76qn114o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wJhsDy2y1P5wdnLCJ5N76qn114o.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/n_qzb2QNMks2MEGKIhOsdolncB8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.157.236.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d9:89:2c:5c:72:59:cd:24:a9:12:2b:e5:22:9a:65:98:cc:5f:
         d2:f3:01:fe:32:b5:05:0e:db:88:5a:2c:44:7f:ac:91:af:a5:
         d4:73:4e:3f:02:c1:55:29:e0:5f:26:8d:64:45:59:7c:cb:fd:
         fd:bc:d5:c5:e9:02:4f:ae:e1:db:44:67:a0:f8:34:0c:40:fd:
         e0:bc:83:cb:29:b3:99:3d:94:40:a1:75:6d:18:bb:4f:01:62:
         41:b6:27:fd:ac:03:d8:18:b5:45:fe:6a:b9:b5:45:cd:f4:8e:
         a3:77:a6:95:95:c3:e7:1b:86:f3:23:16:f9:dc:0e:21:9e:a6:
         3e:b0:aa:ad:54:a6:4c:6a:51:e2:8f:ee:1c:20:a6:cc:d2:e3:
         f2:0f:e3:a8:4b:9a:87:20:06:7b:2a:40:db:b7:15:26:9a:b0:
         4f:88:97:fa:c0:5d:46:e4:48:ea:b2:e0:05:9b:62:25:d3:81:
         03:40:bf:0d:c4:2f:ac:0b:fc:43:38:e6:79:b4:0f:43:3e:58:
         43:da:92:88:cb:78:a5:e1:5c:eb:0d:73:49:a5:36:49:f4:6a:
         e1:45:e5:db:44:66:19:fd:46:2f:6e:e7:1b:13:3a:77:25:03:
         e7:15:3e:e7:c0:1e:9e:84:5f:87:fe:71:85:b3:88:48:54:ec:
         7f:8f:5e:0a
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBLjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDMDk4
NkMwRjJEQjJENEZFNzA3NjcyQzIyNzkzN0JFQUE5RjVENzhBMB4XDTI1MTAwNzAx
MjQzMVoXDTI2MDkxNTAxMzAwMlowMzExMC8GA1UEAxMoOUZGQUIzNkY2NDBEMzI0
QjM2MzA0MThBMjIxM0FDNzY4OTY3NzAxRjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAL9fKmAQmBNCDwVdzqlc9/OHLIbk2WVgcd786fnlRcwx+JiH0f6p
A1YzNcj1r/232IfDa0Jx28KEhWZpFg8MVCbLhJKDYs6dqDLMxjebgBHDIVzr2hrZ
w4Bm2mv8NKECZJ//jq7Pv+oz6b7x7yb/9qeE7raxm7AsABsRYXzST5uZOjLRtRuy
iNKMirPkaYShpc6rT107lx5xTY0Rs7tO6mAyZvZZddkdLGxjxOfEjqysVbf2jNa3
XmrE5dAIaWNOiWHZcBXt7L3FjYNrIHK82pWOsyQ7rb3rr7wflXjYnxTPHTbh59sD
VV1OfqVsIs9vUipjYgmebzHJTZ5QG0Y8qycCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBSf+rNvZA0ySzYwQYoiE6x2iWdwHzAfBgNVHSMEGDAWgBTAmGwPLbLU/nB2csIn
k3vqqfXXijAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNDg0L3dKaHNEeTJ5MVA1d2RuTENKNU43NnFuMTE0by5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3dKaHNEeTJ5MVA1d2RuTENKNU43NnFu
MTE0by5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC80ODQvbl9xemIyUU5Na3MyTUVHS0loT3Nkb2xuY0I4LnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAcqd7DANBgkqhkiG9w0BAQsFAAOCAQEA2YksXHJZzSSpEivlIpplmMxf0vMB
/jK1BQ7biFosRH+ska+l1HNOPwLBVSngXyaNZEVZfMv9/bzVxekCT67h20RnoPg0
DED94LyDyymzmT2UQKF1bRi7TwFiQbYn/awD2Bi1Rf5qubVFzfSOo3emlZXD5xuG
8yMW+dwOIZ6mPrCqrVSmTGpR4o/uHCCmzNLj8g/jqEuahyAGeypA27cVJpqwT4iX
+sBdRuRI6rLgBZtiJdOBA0C/DcQvrAv8QzjmebQPQz5YQ9qSiMt4peFc6w1zSaU2
SfRq4UXl20RmGf1GL27nGxM6dyUD5xU+58AenoRfh/5xhbOISFTsf49eCg==
-----END CERTIFICATE-----
Generated at Tue Oct 21 07:33:38 2025 by rpki-client