Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/539/Uf7RbCvvzgWg7r8BsaF9TyEsvpI.roa
File:                     Uf7RbCvvzgWg7r8BsaF9TyEsvpI.roa (raw, json)
Hash identifier:          YO4jXTpwQ5lP4y0JOO0/yS9k9lcMRHf1glVWJJBA7MY=
Subject key identifier:   51:FE:D1:6C:2B:EF:CE:05:A0:EE:BF:01:B1:A1:7D:4F:21:2C:BE:92
Certificate issuer:       /CN=5B0D72F9F430B7D4003375F10D5025B9E5C00437
Certificate serial:       93
Authority key identifier: 5B:0D:72:F9:F4:30:B7:D4:00:33:75:F1:0D:50:25:B9:E5:C0:04:37
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ww1y-fQwt9QAM3XxDVAlueXABDc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/Uf7RbCvvzgWg7r8BsaF9TyEsvpI.roa
Signing time:             Tue 01 Jul 2025 01:34:56 +0000
ROA not before:           Tue 01 Jul 2025 01:34:56 +0000
ROA not after:            Mon 15 Jun 2026 01:30:02 +0000
asID:                     55900
IP address blocks:        43.248.160.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/Ww1y-fQwt9QAM3XxDVAlueXABDc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/Ww1y-fQwt9QAM3XxDVAlueXABDc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ww1y-fQwt9QAM3XxDVAlueXABDc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 147 (0x93)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B0D72F9F430B7D4003375F10D5025B9E5C00437
        Validity
            Not Before: Jul  1 01:34:56 2025 GMT
            Not After : Jun 15 01:30:02 2026 GMT
        Subject: CN=51FED16C2BEFCE05A0EEBF01B1A17D4F212CBE92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:de:b5:b7:1f:d4:87:2f:9a:20:5e:60:88:0e:
                    71:fa:89:96:05:1e:12:c0:ca:ab:8a:6f:03:8d:23:
                    21:d0:df:ea:d1:d1:cb:cd:50:04:a2:be:f7:9a:66:
                    2a:f2:6c:ff:57:8b:32:b5:d2:1b:2b:61:cc:a0:b8:
                    86:6e:cf:de:c7:4f:b2:2a:a4:34:53:2f:61:98:56:
                    ba:30:89:e1:72:d0:61:bb:4b:78:0f:c6:af:37:62:
                    6f:13:47:88:f4:43:66:86:4d:ad:01:89:e7:1d:2a:
                    99:0e:ba:94:77:53:80:a3:fe:f4:cc:2a:6d:38:f0:
                    f9:f8:44:30:bb:d1:f9:41:c0:ce:60:78:52:f6:cd:
                    0b:bd:e8:26:42:a9:c9:66:e7:eb:32:6f:cc:1f:ac:
                    67:2b:e4:e3:86:ec:2f:65:00:df:5b:48:c2:0d:12:
                    4e:03:b8:7d:3c:53:85:7d:10:c1:5f:36:7f:ac:4a:
                    bd:a5:36:a3:53:99:13:bf:fa:f2:97:29:a3:74:2a:
                    cf:f2:ad:44:a7:91:5d:8f:7f:85:03:46:1e:1b:aa:
                    52:e3:38:94:01:07:c2:9b:97:6b:d8:40:dc:fe:e6:
                    f2:12:f0:9d:4d:1f:90:5c:bd:2c:83:95:9f:8c:21:
                    bd:c3:d7:74:a6:f6:e2:ce:3e:f7:16:dc:c7:ab:0a:
                    dd:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:FE:D1:6C:2B:EF:CE:05:A0:EE:BF:01:B1:A1:7D:4F:21:2C:BE:92
            X509v3 Authority Key Identifier:
                keyid:5B:0D:72:F9:F4:30:B7:D4:00:33:75:F1:0D:50:25:B9:E5:C0:04:37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/Ww1y-fQwt9QAM3XxDVAlueXABDc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ww1y-fQwt9QAM3XxDVAlueXABDc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/Uf7RbCvvzgWg7r8BsaF9TyEsvpI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.248.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         92:24:dc:e2:b1:db:8e:1a:01:70:31:26:dc:8f:79:52:7e:e9:
         99:b3:6d:d3:a6:4b:28:8a:2a:5a:49:8d:67:8c:41:91:da:ac:
         f3:df:85:2b:dd:ad:52:db:a5:b5:c8:88:07:90:d4:b7:84:85:
         89:d3:d0:f1:d9:1c:47:5f:25:9e:fc:0f:a4:f8:40:fc:78:5d:
         f1:5b:2c:ae:56:8a:e9:f5:93:6b:2f:98:0f:19:d1:42:38:4a:
         4d:67:a5:dd:1b:0b:d6:26:54:68:b5:f7:d3:c0:04:c7:34:d0:
         a7:a3:13:0a:0e:d8:c0:c8:f1:70:90:fd:86:5a:97:87:43:e2:
         7b:d4:c2:bf:49:17:2d:94:f3:39:54:57:5e:4b:ce:3d:0a:71:
         47:d5:1e:91:c0:4f:9e:b3:a1:80:0d:08:a3:c5:92:5d:9f:9d:
         0c:d0:53:24:81:89:1b:64:06:ed:54:eb:50:b8:cd:c9:77:2b:
         9d:f3:6b:b7:49:0d:67:c5:ff:79:30:65:3f:27:23:f1:89:6c:
         e6:dd:59:4a:08:b2:c5:cc:7f:d1:97:1c:7a:92:b3:2e:0d:b9:
         e5:3e:e3:c2:c0:4c:6f:4e:c1:26:25:01:87:0d:ff:a9:b7:f6:
         ad:07:40:45:4a:fc:d7:0b:ed:4d:3a:f4:da:fb:b2:e6:ca:5e:
         e5:66:1a:1a
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAJMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNUIw
RDcyRjlGNDMwQjdENDAwMzM3NUYxMEQ1MDI1QjlFNUMwMDQzNzAeFw0yNTA3MDEw
MTM0NTZaFw0yNjA2MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDUxRkVEMTZDMkJFRkNF
MDVBMEVFQkYwMUIxQTE3RDRGMjEyQ0JFOTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCj3rW3H9SHL5ogXmCIDnH6iZYFHhLAyquKbwONIyHQ3+rR0cvN
UASivveaZirybP9XizK10hsrYcyguIZuz97HT7IqpDRTL2GYVrowieFy0GG7S3gP
xq83Ym8TR4j0Q2aGTa0BiecdKpkOupR3U4Cj/vTMKm048Pn4RDC70flBwM5geFL2
zQu96CZCqclm5+syb8wfrGcr5OOG7C9lAN9bSMINEk4DuH08U4V9EMFfNn+sSr2l
NqNTmRO/+vKXKaN0Ks/yrUSnkV2Pf4UDRh4bqlLjOJQBB8Kbl2vYQNz+5vIS8J1N
H5BcvSyDlZ+MIb3D13Sm9uLOPvcW3MerCt39AgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUUf7RbCvvzgWg7r8BsaF9TyEsvpIwHwYDVR0jBBgwFoAUWw1y+fQwt9QAM3Xx
DVAlueXABDcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzUzOS9XdzF5LWZRd3Q5UUFNM1h4RFZBbHVlWEFCRGMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9XdzF5LWZRd3Q5UUFNM1h4RFZBbHVl
WEFCRGMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvNTM5L1VmN1JiQ3Z2emdXZzdyOEJzYUY5VHlFc3ZwSS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAIr+KAwDQYJKoZIhvcNAQELBQADggEBAJIk3OKx244aAXAxJtyPeVJ+6Zmz
bdOmSyiKKlpJjWeMQZHarPPfhSvdrVLbpbXIiAeQ1LeEhYnT0PHZHEdfJZ78D6T4
QPx4XfFbLK5Wiun1k2svmA8Z0UI4Sk1npd0bC9YmVGi199PABMc00KejEwoO2MDI
8XCQ/YZal4dD4nvUwr9JFy2U8zlUV15Lzj0KcUfVHpHAT56zoYANCKPFkl2fnQzQ
UySBiRtkBu1U61C4zcl3K53za7dJDWfF/3kwZT8nI/GJbObdWUoIssXMf9GXHHqS
sy4NueU+48LATG9OwSYlAYcN/6m39q0HQEVK/NcL7U069Nr7subKXuVmGho=
-----END CERTIFICATE-----
Generated at Sat Jul 5 04:02:04 2025 by rpki-client