Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/554/IPeVTuksORQ08xhFGC4OZ2mu0Fo.roa
File:                     IPeVTuksORQ08xhFGC4OZ2mu0Fo.roa (raw, json)
Hash identifier:          FUyj0LoW1ZH2BuvTbWhqvvtawFzZaHs+BebdXob7o8w=
Subject key identifier:   20:F7:95:4E:E9:2C:39:14:34:F3:18:45:18:2E:0E:67:69:AE:D0:5A
Certificate issuer:       /CN=96D92CE24CF3FCC753285CEBAF3FEC1D72581A81
Certificate serial:       4E
Authority key identifier: 96:D9:2C:E2:4C:F3:FC:C7:53:28:5C:EB:AF:3F:EC:1D:72:58:1A:81
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ltks4kzz_MdTKFzrrz_sHXJYGoE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/554/IPeVTuksORQ08xhFGC4OZ2mu0Fo.roa
Signing time:             Tue 10 Jun 2025 10:51:22 +0000
ROA not before:           Tue 10 Jun 2025 10:51:22 +0000
ROA not after:            Sat 23 May 2026 09:51:00 +0000
asID:                     131921
IP address blocks:        153.122.208.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/554/ltks4kzz_MdTKFzrrz_sHXJYGoE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/554/ltks4kzz_MdTKFzrrz_sHXJYGoE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ltks4kzz_MdTKFzrrz_sHXJYGoE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 78 (0x4e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96D92CE24CF3FCC753285CEBAF3FEC1D72581A81
        Validity
            Not Before: Jun 10 10:51:22 2025 GMT
            Not After : May 23 09:51:00 2026 GMT
        Subject: CN=20F7954EE92C391434F31845182E0E6769AED05A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d0:23:b8:51:c5:e7:ea:b7:f7:bd:79:67:8c:
                    46:9f:97:9b:1a:87:64:22:d6:71:fb:b9:55:3d:9f:
                    27:30:29:2a:7a:4b:8d:b8:aa:3e:cd:e6:53:1a:b7:
                    ec:19:68:7a:17:d6:37:6a:97:56:aa:6f:88:9d:e9:
                    51:a2:a5:a9:b8:a4:ef:2e:d8:e9:74:fb:a4:d3:c9:
                    61:4d:7d:4d:de:8c:ea:69:cf:ef:ad:80:19:a2:56:
                    62:4d:74:5e:9e:84:8f:e0:03:3e:6a:c2:e3:56:5b:
                    ca:a0:d2:38:39:3a:79:3f:41:f0:bf:2a:d4:c1:c1:
                    f2:4f:cd:5f:da:89:d2:5a:84:99:91:32:8e:fc:6b:
                    f1:a9:af:69:e7:42:98:06:f1:0e:79:92:2b:83:7e:
                    27:f9:cc:b2:44:71:b1:97:46:0e:b8:2c:bd:a6:29:
                    8a:e3:b6:96:24:db:6b:32:1c:52:d8:8c:3c:51:18:
                    77:ec:42:15:e9:de:fa:fa:b1:0d:0f:9d:4a:46:a5:
                    de:68:80:1a:25:85:d5:ff:c5:98:71:bd:b0:d3:a8:
                    6d:d5:37:57:3b:c2:38:eb:ee:12:51:e2:94:76:5a:
                    4e:15:dc:d1:b3:07:53:ab:07:09:96:4a:11:32:8d:
                    59:a1:25:26:39:0c:29:fb:22:c5:85:43:fe:5e:c2:
                    a4:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:F7:95:4E:E9:2C:39:14:34:F3:18:45:18:2E:0E:67:69:AE:D0:5A
            X509v3 Authority Key Identifier:
                keyid:96:D9:2C:E2:4C:F3:FC:C7:53:28:5C:EB:AF:3F:EC:1D:72:58:1A:81

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/554/ltks4kzz_MdTKFzrrz_sHXJYGoE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ltks4kzz_MdTKFzrrz_sHXJYGoE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/554/IPeVTuksORQ08xhFGC4OZ2mu0Fo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.122.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         0e:91:02:0c:eb:a0:7c:ed:0e:2c:ba:33:6d:a7:93:de:fe:e1:
         4e:94:11:8d:aa:93:5b:5c:cd:32:03:08:0f:56:7c:fd:a9:93:
         d7:57:23:58:2c:b4:51:5a:c5:00:ff:50:f3:23:d9:b9:e2:84:
         e9:bd:5c:0c:99:a3:fa:df:66:10:09:f3:9d:bf:68:52:ae:87:
         72:b5:18:f6:3e:c3:67:d3:64:65:3a:d3:bd:33:46:62:fb:2e:
         ad:95:2a:e5:83:ca:ba:65:94:03:f1:2e:ae:28:cf:54:b0:e4:
         86:44:21:28:b0:5b:72:c0:3e:04:32:90:16:c3:23:81:89:d3:
         08:d1:37:ef:40:47:51:8b:34:2a:6a:be:91:6e:5d:98:c8:c7:
         42:b9:8f:b9:ec:46:13:92:2d:6b:fb:e3:80:40:f9:51:82:97:
         58:95:ef:78:da:7a:d7:da:7d:19:f1:4a:b2:2f:a5:f2:0d:bb:
         0d:05:24:2a:d4:b5:d9:7b:eb:99:05:50:ba:85:0a:e1:43:7e:
         44:e1:a1:d5:fa:ff:a5:17:a8:4a:ea:7d:50:64:e9:0c:0b:d6:
         2d:72:55:4b:2a:1a:0f:44:29:98:53:b0:1e:b7:e2:05:d8:24:
         df:fc:7c:da:81:60:66:55:26:d8:3b:ca:bc:9e:a2:ce:65:f4:
         1a:42:78:4d
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBTjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5NkQ5
MkNFMjRDRjNGQ0M3NTMyODVDRUJBRjNGRUMxRDcyNTgxQTgxMB4XDTI1MDYxMDEw
NTEyMloXDTI2MDUyMzA5NTEwMFowMzExMC8GA1UEAxMoMjBGNzk1NEVFOTJDMzkx
NDM0RjMxODQ1MTgyRTBFNjc2OUFFRDA1QTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKfQI7hRxefqt/e9eWeMRp+XmxqHZCLWcfu5VT2fJzApKnpLjbiq
Ps3mUxq37BloehfWN2qXVqpviJ3pUaKlqbik7y7Y6XT7pNPJYU19Td6M6mnP762A
GaJWYk10Xp6Ej+ADPmrC41ZbyqDSODk6eT9B8L8q1MHB8k/NX9qJ0lqEmZEyjvxr
8amvaedCmAbxDnmSK4N+J/nMskRxsZdGDrgsvaYpiuO2liTbazIcUtiMPFEYd+xC
Fene+vqxDQ+dSkal3miAGiWF1f/FmHG9sNOobdU3VzvCOOvuElHilHZaThXc0bMH
U6sHCZZKETKNWaElJjkMKfsixYVD/l7CpIUCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBQg95VO6Sw5FDTzGEUYLg5naa7QWjAfBgNVHSMEGDAWgBSW2SziTPP8x1MoXOuv
P+wdclgagTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNTU0L2x0a3M0a3p6X01kVEtGenJyel9zSFhKWUdvRS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2x0a3M0a3p6X01kVEtGenJyel9zSFhK
WUdvRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC81NTQvSVBlVlR1a3NPUlEwOHhoRkdDNE9aMm11MEZvLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBJl60DANBgkqhkiG9w0BAQsFAAOCAQEADpECDOugfO0OLLozbaeT3v7hTpQR
jaqTW1zNMgMID1Z8/amT11cjWCy0UVrFAP9Q8yPZueKE6b1cDJmj+t9mEAnznb9o
Uq6HcrUY9j7DZ9NkZTrTvTNGYvsurZUq5YPKumWUA/EurijPVLDkhkQhKLBbcsA+
BDKQFsMjgYnTCNE370BHUYs0Kmq+kW5dmMjHQrmPuexGE5Ita/vjgED5UYKXWJXv
eNp619p9GfFKsi+l8g27DQUkKtS12XvrmQVQuoUK4UN+ROGh1fr/pReoSup9UGTp
DAvWLXJVSyoaD0QpmFOwHrfiBdgk3/x82oFgZlUm2DvKvJ6izmX0GkJ4TQ==
-----END CERTIFICATE-----
Generated at Fri Jul 4 23:28:02 2025 by rpki-client