Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/506/1AYjWOVqrkBkDFVy-EU61EG32NQ.roa
File:                     1AYjWOVqrkBkDFVy-EU61EG32NQ.roa (raw, json)
Hash identifier:          Cqq2NH7hQbP01dDR9V6kDGL7ATLvfvHddrjmza+VHhk=
Subject key identifier:   D4:06:23:58:E5:6A:AE:40:64:0C:55:72:F8:45:3A:D4:41:B7:D8:D4
Certificate issuer:       /CN=4BEA6BD8A9C7848829141999A016A0C9D19912AF
Certificate serial:       5C
Authority key identifier: 4B:EA:6B:D8:A9:C7:84:88:29:14:19:99:A0:16:A0:C9:D1:99:12:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/S-pr2KnHhIgpFBmZoBagydGZEq8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/1AYjWOVqrkBkDFVy-EU61EG32NQ.roa
Signing time:             Tue 01 Jul 2025 01:32:57 +0000
ROA not before:           Tue 01 Jul 2025 01:32:57 +0000
ROA not after:            Mon 15 Jun 2026 01:30:02 +0000
asID:                     14618
IP address blocks:        27.131.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/S-pr2KnHhIgpFBmZoBagydGZEq8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/S-pr2KnHhIgpFBmZoBagydGZEq8.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/S-pr2KnHhIgpFBmZoBagydGZEq8.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 92 (0x5c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4BEA6BD8A9C7848829141999A016A0C9D19912AF
        Validity
            Not Before: Jul  1 01:32:57 2025 GMT
            Not After : Jun 15 01:30:02 2026 GMT
        Subject: CN=D4062358E56AAE40640C5572F8453AD441B7D8D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:45:ff:da:7c:e9:97:06:f9:16:ec:43:9b:94:
                    6a:ed:2e:05:46:0a:13:ed:de:1c:78:8f:2e:89:a5:
                    af:13:95:49:0f:3c:7b:62:cf:b5:a1:5b:64:c9:10:
                    27:05:20:16:a0:fc:9f:d4:08:ab:42:1e:8f:53:db:
                    55:27:eb:f9:8d:22:87:14:ab:01:df:7f:d7:0a:bc:
                    b9:89:f1:c3:df:83:61:03:97:ce:16:55:7d:65:43:
                    e7:8b:02:18:7a:c8:48:a5:00:18:f7:71:3c:0f:1b:
                    b7:a3:65:72:a4:02:75:8f:bd:75:40:6f:27:0f:be:
                    9a:cb:f5:fe:9c:bd:24:ba:48:96:34:d3:55:90:c3:
                    27:3a:0e:f7:93:6f:ad:63:df:63:8e:34:69:cd:ce:
                    ee:d6:f5:c5:06:3e:62:f5:95:ae:83:39:22:17:81:
                    fc:47:96:ff:17:39:ec:dd:b2:88:66:96:72:2b:e7:
                    68:d4:93:eb:fc:86:92:62:c5:df:39:0a:9c:79:6b:
                    db:12:b9:d4:ef:d3:84:2b:14:83:c6:7d:df:46:a7:
                    71:37:84:0c:47:da:c7:c0:0e:a8:8a:35:56:c7:be:
                    2b:53:d1:3c:82:3d:ed:ca:2d:fb:d4:15:64:dd:06:
                    20:e6:9e:87:89:df:03:c9:73:00:95:ce:0a:66:be:
                    da:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:06:23:58:E5:6A:AE:40:64:0C:55:72:F8:45:3A:D4:41:B7:D8:D4
            X509v3 Authority Key Identifier:
                keyid:4B:EA:6B:D8:A9:C7:84:88:29:14:19:99:A0:16:A0:C9:D1:99:12:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/S-pr2KnHhIgpFBmZoBagydGZEq8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/S-pr2KnHhIgpFBmZoBagydGZEq8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/1AYjWOVqrkBkDFVy-EU61EG32NQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.131.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:6e:fc:86:29:16:d2:ed:61:2b:db:41:ab:5c:5b:78:7c:25:
         a0:9e:e4:c8:6a:f6:d7:8a:20:38:8a:ac:04:ee:a0:0d:71:9d:
         92:8e:c1:5f:da:73:10:bf:c2:0b:97:7d:06:48:73:1f:23:54:
         8e:15:3b:17:63:2f:0b:86:e3:4f:a5:03:4d:c6:6c:d7:1e:ad:
         08:d3:24:cb:26:dc:bd:18:3d:69:b1:4a:bf:17:40:15:52:e6:
         71:6a:3e:14:47:7d:b8:8a:a8:4d:26:9e:4b:9b:6f:b4:48:44:
         88:4a:5d:05:5f:cb:df:2a:c0:bd:e0:f8:9b:c9:75:ca:5f:b3:
         20:ad:a2:ee:f9:74:0c:4f:6f:5a:7f:2c:2b:cd:42:e0:1e:7d:
         68:d4:75:c7:a5:fc:37:48:ed:33:3f:7c:94:1a:19:e5:77:87:
         a1:f8:91:2e:b4:ce:c3:d5:d6:ad:7f:f1:81:a4:4a:ea:1f:80:
         9b:bd:88:13:d8:6e:db:1b:40:c3:c8:70:59:db:52:be:19:2a:
         62:49:1c:cf:83:43:fb:93:78:e9:96:82:c4:3d:51:c1:6e:06:
         8f:2c:93:64:92:27:49:85:48:b2:df:98:8f:65:10:e7:22:c2:
         c9:57:8c:ec:f7:45:07:2c:7d:4c:c2:9d:ec:b4:db:e7:51:35:
         4c:58:28:f6
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBXDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0QkVB
NkJEOEE5Qzc4NDg4MjkxNDE5OTlBMDE2QTBDOUQxOTkxMkFGMB4XDTI1MDcwMTAx
MzI1N1oXDTI2MDYxNTAxMzAwMlowMzExMC8GA1UEAxMoRDQwNjIzNThFNTZBQUU0
MDY0MEM1NTcyRjg0NTNBRDQ0MUI3RDhENDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMBF/9p86ZcG+RbsQ5uUau0uBUYKE+3eHHiPLomlrxOVSQ88e2LP
taFbZMkQJwUgFqD8n9QIq0Iej1PbVSfr+Y0ihxSrAd9/1wq8uYnxw9+DYQOXzhZV
fWVD54sCGHrISKUAGPdxPA8bt6NlcqQCdY+9dUBvJw++msv1/py9JLpIljTTVZDD
JzoO95NvrWPfY440ac3O7tb1xQY+YvWVroM5IheB/EeW/xc57N2yiGaWcivnaNST
6/yGkmLF3zkKnHlr2xK51O/ThCsUg8Z930ancTeEDEfax8AOqIo1Vse+K1PRPII9
7cot+9QVZN0GIOaeh4nfA8lzAJXOCma+2rUCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBTUBiNY5WquQGQMVXL4RTrUQbfY1DAfBgNVHSMEGDAWgBRL6mvYqceEiCkUGZmg
FqDJ0ZkSrzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNTA2L1MtcHIyS25IaElncEZCbVpvQmFneWRHWkVxOC5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1MtcHIyS25IaElncEZCbVpvQmFneWRH
WkVxOC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC81MDYvMUFZaldPVnFya0JrREZWeS1FVTYxRUczMk5RLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEABuDCjANBgkqhkiG9w0BAQsFAAOCAQEAoW78hikW0u1hK9tBq1xbeHwloJ7k
yGr214ogOIqsBO6gDXGdko7BX9pzEL/CC5d9BkhzHyNUjhU7F2MvC4bjT6UDTcZs
1x6tCNMkyybcvRg9abFKvxdAFVLmcWo+FEd9uIqoTSaeS5tvtEhEiEpdBV/L3yrA
veD4m8l1yl+zIK2i7vl0DE9vWn8sK81C4B59aNR1x6X8N0jtMz98lBoZ5XeHofiR
LrTOw9XWrX/xgaRK6h+Am72IE9hu2xtAw8hwWdtSvhkqYkkcz4ND+5N46ZaCxD1R
wW4GjyyTZJInSYVIst+Yj2UQ5yLCyVeM7PdFByx9TMKd7LTb51E1TFgo9g==
-----END CERTIFICATE-----
Generated at Sat Jul 5 04:12:03 2025 by rpki-client