Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/539/0GQ5i2dJRV8E9ti8nK8S_TxE8S4.roa
File:                     0GQ5i2dJRV8E9ti8nK8S_TxE8S4.roa (raw, json)
Hash identifier:          HVYFlxFlaaZ/lNUfOD4S/JNAnljpRfSdYjSrtNMXVCc=
Subject key identifier:   D0:64:39:8B:67:49:45:5F:04:F6:D8:BC:9C:AF:12:FD:3C:44:F1:2E
Certificate issuer:       /CN=5B0D72F9F430B7D4003375F10D5025B9E5C00437
Certificate serial:       99
Authority key identifier: 5B:0D:72:F9:F4:30:B7:D4:00:33:75:F1:0D:50:25:B9:E5:C0:04:37
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ww1y-fQwt9QAM3XxDVAlueXABDc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/0GQ5i2dJRV8E9ti8nK8S_TxE8S4.roa
Signing time:             Wed 01 Oct 2025 01:29:50 +0000
ROA not before:           Wed 01 Oct 2025 01:29:50 +0000
ROA not after:            Tue 15 Sep 2026 01:30:02 +0000
asID:                     55900
IP address blocks:        103.7.88.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/Ww1y-fQwt9QAM3XxDVAlueXABDc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/Ww1y-fQwt9QAM3XxDVAlueXABDc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ww1y-fQwt9QAM3XxDVAlueXABDc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Oct 2025 21:29:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 153 (0x99)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B0D72F9F430B7D4003375F10D5025B9E5C00437
        Validity
            Not Before: Oct  1 01:29:50 2025 GMT
            Not After : Sep 15 01:30:02 2026 GMT
        Subject: CN=D064398B6749455F04F6D8BC9CAF12FD3C44F12E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:64:9b:fe:fa:a3:4d:8f:7c:10:b8:2a:22:8c:
                    18:39:ac:c2:fa:e1:35:30:d9:82:b4:ac:3a:ec:4d:
                    97:8d:92:d5:d3:b5:be:89:65:d6:75:7b:2a:b7:db:
                    85:f8:d4:bc:94:a5:ca:e9:84:da:18:d2:f5:d5:85:
                    0a:f0:3b:5a:67:88:2d:53:80:1c:b3:25:24:0c:be:
                    bf:87:bc:24:7f:60:59:ad:bc:80:4a:98:c6:03:f9:
                    83:cb:69:d6:d0:c5:8d:1b:79:4f:01:b8:3b:b8:3d:
                    d5:97:8b:39:02:86:ae:c0:ca:cd:fa:d3:46:68:03:
                    72:5a:1f:5e:9c:f8:77:9a:73:ae:73:ba:b6:30:9e:
                    a9:30:74:5f:78:f6:3d:d8:33:16:1f:e6:d7:08:25:
                    e5:93:38:f1:4b:61:cf:d4:02:81:0f:15:71:3d:43:
                    9f:e0:b2:17:2b:43:7c:72:c0:23:9f:4f:a1:39:94:
                    1c:6a:c1:10:68:a2:34:ea:d7:44:6f:76:2f:37:37:
                    75:e2:69:82:24:5c:8c:08:06:b0:44:67:6e:fc:6f:
                    99:c5:aa:96:03:7f:34:cf:c9:e5:45:12:b3:91:cc:
                    fc:62:4d:18:d9:95:07:5e:e9:96:bd:55:97:65:bd:
                    97:56:9c:8f:38:48:db:f8:fd:c3:09:ba:f3:18:c0:
                    6d:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:64:39:8B:67:49:45:5F:04:F6:D8:BC:9C:AF:12:FD:3C:44:F1:2E
            X509v3 Authority Key Identifier:
                keyid:5B:0D:72:F9:F4:30:B7:D4:00:33:75:F1:0D:50:25:B9:E5:C0:04:37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/Ww1y-fQwt9QAM3XxDVAlueXABDc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ww1y-fQwt9QAM3XxDVAlueXABDc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/0GQ5i2dJRV8E9ti8nK8S_TxE8S4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.7.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2f:b3:13:43:a8:02:fd:9e:9c:74:b9:86:1e:ae:40:5a:e1:ed:
         da:fa:d9:98:b2:53:88:e6:80:0c:09:33:34:f4:00:71:bf:5d:
         b5:f8:c4:01:75:60:a5:8c:33:15:61:89:00:56:3b:63:78:fe:
         4c:9f:90:19:45:4d:19:e4:d0:32:b5:da:06:94:65:1c:05:b2:
         f8:d0:89:48:05:7b:e3:15:31:f4:e4:f6:ad:84:67:92:03:40:
         63:0e:ad:a9:41:f1:43:ae:90:aa:c7:0c:26:2f:26:3c:d8:74:
         f0:ca:1e:d7:c2:db:03:c5:0c:51:1b:bc:3d:c9:4a:37:0e:76:
         21:6b:51:b1:b1:74:32:26:bf:6c:ba:64:a9:50:86:9f:d5:71:
         c2:6a:78:60:5b:7d:98:cb:e1:5b:c6:4b:6c:ef:b9:b4:9f:ef:
         56:83:5d:35:2d:e3:6a:6e:00:34:a2:b9:17:cb:40:ba:1d:90:
         9e:c3:4e:44:f3:3e:37:08:e2:b8:15:3f:35:71:d1:df:84:f5:
         6f:bf:ab:60:fa:b5:92:51:f1:8c:fd:f5:ce:ab:10:19:e1:7c:
         92:16:34:1d:2f:e9:8c:54:bf:4b:65:c2:a1:89:74:fa:d0:b6:
         79:5c:42:97:24:48:8f:5e:c8:ce:77:8a:b9:ba:8a:54:72:2a:
         90:23:a6:fa
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAJkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNUIw
RDcyRjlGNDMwQjdENDAwMzM3NUYxMEQ1MDI1QjlFNUMwMDQzNzAeFw0yNTEwMDEw
MTI5NTBaFw0yNjA5MTUwMTMwMDJaMDMxMTAvBgNVBAMTKEQwNjQzOThCNjc0OTQ1
NUYwNEY2RDhCQzlDQUYxMkZEM0M0NEYxMkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDIZJv++qNNj3wQuCoijBg5rML64TUw2YK0rDrsTZeNktXTtb6J
ZdZ1eyq324X41LyUpcrphNoY0vXVhQrwO1pniC1TgByzJSQMvr+HvCR/YFmtvIBK
mMYD+YPLadbQxY0beU8BuDu4PdWXizkChq7Ays3600ZoA3JaH16c+Heac65zurYw
nqkwdF949j3YMxYf5tcIJeWTOPFLYc/UAoEPFXE9Q5/gshcrQ3xywCOfT6E5lBxq
wRBoojTq10Rvdi83N3XiaYIkXIwIBrBEZ278b5nFqpYDfzTPyeVFErORzPxiTRjZ
lQde6Za9VZdlvZdWnI84SNv4/cMJuvMYwG0pAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQU0GQ5i2dJRV8E9ti8nK8S/TxE8S4wHwYDVR0jBBgwFoAUWw1y+fQwt9QAM3Xx
DVAlueXABDcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzUzOS9XdzF5LWZRd3Q5UUFNM1h4RFZBbHVlWEFCRGMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9XdzF5LWZRd3Q5UUFNM1h4RFZBbHVl
WEFCRGMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvNTM5LzBHUTVpMmRKUlY4RTl0aThuSzhTX1R4RThTNC5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAJnB1gwDQYJKoZIhvcNAQELBQADggEBAC+zE0OoAv2enHS5hh6uQFrh7dr6
2ZiyU4jmgAwJMzT0AHG/XbX4xAF1YKWMMxVhiQBWO2N4/kyfkBlFTRnk0DK12gaU
ZRwFsvjQiUgFe+MVMfTk9q2EZ5IDQGMOralB8UOukKrHDCYvJjzYdPDKHtfC2wPF
DFEbvD3JSjcOdiFrUbGxdDImv2y6ZKlQhp/VccJqeGBbfZjL4VvGS2zvubSf71aD
XTUt42puADSiuRfLQLodkJ7DTkTzPjcI4rgVPzVx0d+E9W+/q2D6tZJR8Yz99c6r
EBnhfJIWNB0v6YxUv0tlwqGJdPrQtnlcQpckSI9eyM53irm6ilRyKpAjpvo=
-----END CERTIFICATE-----
Generated at Tue Oct 21 01:19:41 2025 by rpki-client