Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/554/GxwO8yNtWudeY8cvSx9x3UDAaAM.roa
File:                     GxwO8yNtWudeY8cvSx9x3UDAaAM.roa (raw, json)
Hash identifier:          n5MRm4nEJpjjExGVs8HpJnbpPKChYBXuDwTHnD00ti0=
Subject key identifier:   1B:1C:0E:F3:23:6D:5A:E7:5E:63:C7:2F:4B:1F:71:DD:40:C0:68:03
Certificate issuer:       /CN=96D92CE24CF3FCC753285CEBAF3FEC1D72581A81
Certificate serial:       50
Authority key identifier: 96:D9:2C:E2:4C:F3:FC:C7:53:28:5C:EB:AF:3F:EC:1D:72:58:1A:81
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ltks4kzz_MdTKFzrrz_sHXJYGoE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/554/GxwO8yNtWudeY8cvSx9x3UDAaAM.roa
Signing time:             Tue 01 Jul 2025 01:33:16 +0000
ROA not before:           Tue 01 Jul 2025 01:33:16 +0000
ROA not after:            Mon 15 Jun 2026 01:30:02 +0000
asID:                     131921
IP address blocks:        153.122.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/554/ltks4kzz_MdTKFzrrz_sHXJYGoE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/554/ltks4kzz_MdTKFzrrz_sHXJYGoE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ltks4kzz_MdTKFzrrz_sHXJYGoE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 80 (0x50)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96D92CE24CF3FCC753285CEBAF3FEC1D72581A81
        Validity
            Not Before: Jul  1 01:33:16 2025 GMT
            Not After : Jun 15 01:30:02 2026 GMT
        Subject: CN=1B1C0EF3236D5AE75E63C72F4B1F71DD40C06803
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:f8:1f:3a:84:63:17:30:bd:32:63:f1:ff:44:
                    1a:c7:54:b1:aa:69:e2:8e:2f:38:1b:41:56:7f:02:
                    f6:2b:4a:90:7d:42:60:1b:39:04:93:bc:e9:a5:ad:
                    e2:25:e1:cc:80:5f:12:1b:aa:94:ce:4e:e3:dc:90:
                    df:fd:3f:38:91:21:2e:44:bf:ea:54:0d:68:0a:93:
                    39:71:f6:a5:8a:d6:f0:4e:84:a8:5b:02:66:dd:9f:
                    0a:8c:c4:6a:15:cc:7b:f0:e1:20:d8:d0:71:c8:77:
                    63:fb:10:35:be:ae:bc:59:35:38:68:f6:ad:de:db:
                    d4:a5:52:a1:46:46:8a:38:86:c1:e0:1d:24:b6:b6:
                    fc:d5:bc:37:3c:91:17:2c:88:27:17:d3:2b:76:4e:
                    90:1f:be:6a:02:58:85:80:ad:71:a9:c1:d1:11:39:
                    89:8b:2e:75:07:44:c7:01:92:c5:80:39:49:71:81:
                    3b:61:4f:a6:2b:d2:04:75:80:2a:60:2c:01:d6:0c:
                    4d:9f:b0:b7:45:8e:3f:04:3e:fa:cd:7c:50:28:e5:
                    01:c5:25:d7:c2:9f:68:e9:b0:86:4a:1c:94:45:e5:
                    33:6a:af:26:82:c5:b6:da:26:f0:7e:e7:e6:5f:a3:
                    82:3f:04:c6:77:86:c4:a2:6c:07:4d:20:87:cb:29:
                    c1:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:1C:0E:F3:23:6D:5A:E7:5E:63:C7:2F:4B:1F:71:DD:40:C0:68:03
            X509v3 Authority Key Identifier:
                keyid:96:D9:2C:E2:4C:F3:FC:C7:53:28:5C:EB:AF:3F:EC:1D:72:58:1A:81

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/554/ltks4kzz_MdTKFzrrz_sHXJYGoE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ltks4kzz_MdTKFzrrz_sHXJYGoE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/554/GxwO8yNtWudeY8cvSx9x3UDAaAM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.122.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         b5:7f:5a:03:ff:91:bd:5b:ba:7d:ed:ba:66:7b:f6:e0:2a:6a:
         19:3d:03:df:f5:f3:df:9b:24:68:f1:b3:a4:38:9e:ed:8b:4b:
         e1:6f:21:73:18:5a:c1:b5:05:78:27:58:84:ff:5d:47:4b:c5:
         b6:97:8e:90:d8:fc:6a:6f:c6:44:ff:dd:ec:47:e1:ee:47:cc:
         b8:43:c1:66:6b:5e:e4:81:b2:21:46:d4:81:03:24:8f:b8:21:
         cc:0a:a4:f0:df:31:d5:33:ad:f5:fb:81:c9:bb:36:61:3a:3c:
         e0:c0:42:54:cb:b5:fc:40:b2:aa:11:9f:01:3f:f6:5c:f8:99:
         66:81:2c:73:1e:6c:22:e7:1d:cd:d4:62:09:46:76:87:84:1a:
         68:4a:b1:63:65:da:97:a8:2a:8e:af:3a:46:f4:9b:e6:c0:60:
         4c:2f:70:3c:09:48:78:a4:2e:3a:3c:fd:1a:8e:96:f9:89:f3:
         c6:9b:60:d1:db:1d:78:1f:df:02:c5:dc:e5:22:73:14:b9:9b:
         38:20:eb:0b:f5:c0:2d:25:9d:81:b8:ad:7d:02:82:e0:9d:3e:
         6b:f0:fc:3a:7a:16:6f:97:aa:da:6b:9e:76:30:67:11:44:fd:
         73:dc:39:c7:c6:5f:4e:db:25:e7:98:b3:99:dd:bb:16:ba:63:
         17:55:2a:62
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgIBUDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5NkQ5
MkNFMjRDRjNGQ0M3NTMyODVDRUJBRjNGRUMxRDcyNTgxQTgxMB4XDTI1MDcwMTAx
MzMxNloXDTI2MDYxNTAxMzAwMlowMzExMC8GA1UEAxMoMUIxQzBFRjMyMzZENUFF
NzVFNjNDNzJGNEIxRjcxREQ0MEMwNjgwMzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAPD4HzqEYxcwvTJj8f9EGsdUsapp4o4vOBtBVn8C9itKkH1CYBs5
BJO86aWt4iXhzIBfEhuqlM5O49yQ3/0/OJEhLkS/6lQNaAqTOXH2pYrW8E6EqFsC
Zt2fCozEahXMe/DhINjQcch3Y/sQNb6uvFk1OGj2rd7b1KVSoUZGijiGweAdJLa2
/NW8NzyRFyyIJxfTK3ZOkB++agJYhYCtcanB0RE5iYsudQdExwGSxYA5SXGBO2FP
pivSBHWAKmAsAdYMTZ+wt0WOPwQ++s18UCjlAcUl18KfaOmwhkoclEXlM2qvJoLF
ttom8H7n5l+jgj8ExneGxKJsB00gh8spwUMCAwEAAaOCAiMwggIfMB0GA1UdDgQW
BBQbHA7zI21a515jxy9LH3HdQMBoAzAfBgNVHSMEGDAWgBSW2SziTPP8x1MoXOuv
P+wdclgagTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNTU0L2x0a3M0a3p6X01kVEtGenJyel9zSFhKWUdvRS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2x0a3M0a3p6X01kVEtGenJyel9zSFhK
WUdvRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC81NTQvR3h3Tzh5TnRXdWRlWThjdlN4OXgzVURBYUFNLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEw
BQMDAJl6MA0GCSqGSIb3DQEBCwUAA4IBAQC1f1oD/5G9W7p97bpme/bgKmoZPQPf
9fPfmyRo8bOkOJ7ti0vhbyFzGFrBtQV4J1iE/11HS8W2l46Q2Pxqb8ZE/93sR+Hu
R8y4Q8Fma17kgbIhRtSBAySPuCHMCqTw3zHVM631+4HJuzZhOjzgwEJUy7X8QLKq
EZ8BP/Zc+JlmgSxzHmwi5x3N1GIJRnaHhBpoSrFjZdqXqCqOrzpG9JvmwGBML3A8
CUh4pC46PP0ajpb5ifPGm2DR2x14H98CxdzlInMUuZs4IOsL9cAtJZ2BuK19AoLg
nT5r8Pw6ehZvl6raa552MGcRRP1z3DnHxl9O2yXnmLOZ3bsWumMXVSpi
-----END CERTIFICATE-----
Generated at Fri Jul 4 22:57:15 2025 by rpki-client