Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/1xAOyKV3QYrf5RxYTApSjneJOW4.roa
File:                     1xAOyKV3QYrf5RxYTApSjneJOW4.roa (raw, json)
Hash identifier:          xXzJgrh7cCftyJWth8+0CAv6os9t4CddoYlHBYj9NQc=
Subject key identifier:   D7:10:0E:C8:A5:77:41:8A:DF:E5:1C:58:4C:0A:52:8E:77:89:39:6E
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       01D5
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/1xAOyKV3QYrf5RxYTApSjneJOW4.roa
Signing time:             Tue 01 Jul 2025 01:42:28 +0000
ROA not before:           Tue 01 Jul 2025 01:42:28 +0000
ROA not after:            Mon 15 Jun 2026 01:30:02 +0000
asID:                     2497
IP address blocks:        210.128.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 469 (0x1d5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Jul  1 01:42:28 2025 GMT
            Not After : Jun 15 01:30:02 2026 GMT
        Subject: CN=D7100EC8A577418ADFE51C584C0A528E7789396E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:9e:8e:54:39:08:a6:0a:45:a7:cd:56:e6:8c:
                    ff:ce:f6:51:19:0d:05:91:15:6e:8d:9c:4a:8b:52:
                    7c:f7:5f:1d:0a:1c:d8:e1:2d:38:6e:52:a4:06:94:
                    51:df:7c:af:28:5f:13:e5:7e:11:66:f8:e3:cb:d3:
                    61:39:7f:5b:35:16:19:c6:63:4e:4d:85:b0:59:a2:
                    ef:40:fa:98:13:fd:80:32:17:ca:62:42:4b:a8:8e:
                    a0:6f:a7:9a:1d:ed:72:23:06:bd:8a:1f:8c:89:83:
                    97:eb:0e:d5:54:9d:ab:01:ad:07:f0:7a:93:f2:af:
                    16:da:a6:2e:34:d2:6e:21:ed:6a:09:b5:0c:58:16:
                    08:19:4d:cf:91:40:36:5a:af:85:f6:98:b2:ba:48:
                    a2:8f:b5:c9:12:49:41:4b:8d:3f:1f:fb:4f:78:17:
                    52:26:18:db:c9:91:20:05:a2:55:1f:9d:35:37:62:
                    0a:0a:37:b4:ad:f5:84:ef:2c:0c:e1:33:95:0b:13:
                    ea:ee:2f:74:38:99:07:9e:ce:73:ef:05:2a:cc:47:
                    85:30:96:2a:2b:c6:33:3e:96:17:1b:29:fe:28:9d:
                    c2:e3:57:81:ee:c9:d1:56:01:dc:e8:88:a3:57:1c:
                    28:65:9b:53:a0:ab:a1:da:d2:f0:2c:a5:a4:02:88:
                    d5:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:10:0E:C8:A5:77:41:8A:DF:E5:1C:58:4C:0A:52:8E:77:89:39:6E
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/1xAOyKV3QYrf5RxYTApSjneJOW4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.128.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         90:28:41:78:af:bd:b7:6a:f0:e9:c3:7b:dd:69:96:a2:5f:e4:
         d7:07:fe:95:a6:d4:2e:fc:70:a0:c1:e3:01:4b:48:37:91:53:
         c5:39:30:8b:55:a2:f3:6c:46:7d:1b:cb:3c:8d:cd:13:ba:f2:
         5a:b0:94:f7:07:a8:f2:c0:e3:2f:fc:e2:10:71:55:e6:1d:4f:
         2c:f0:9b:0c:9f:98:90:eb:93:13:6d:3c:d3:ac:1e:41:f5:b9:
         b2:72:96:99:16:4a:f9:4b:2a:36:4f:53:9e:1e:3b:d6:4e:f9:
         89:81:57:6b:44:b6:ad:5e:32:75:a6:db:a5:af:d9:dc:dd:80:
         12:a0:1c:81:48:ff:f0:5d:50:ac:35:ec:db:03:5f:62:57:35:
         de:27:48:1a:2c:82:5c:a0:51:9b:3e:82:b8:10:2f:ec:52:b2:
         e0:7c:e1:33:5b:c0:ac:f5:50:15:3e:a8:59:ec:03:97:b0:95:
         d5:5f:2e:8c:c0:3a:6b:d1:35:04:65:85:1c:6b:70:2e:a9:b0:
         29:00:a2:db:61:ab:f0:38:4d:14:7c:cd:6e:a0:99:5b:71:07:
         01:2b:92:0e:14:2d:99:80:c3:96:99:76:cd:db:77:58:8a:66:
         8d:22:9b:83:d6:58:f9:32:e4:06:11:d3:0e:3a:16:15:60:6f:
         79:5b:55:7d
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgICAdUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjk4
M0NGRDVGOENBRkEwMDY4RDJFQkEyNUVEMEY3MDEyNDRCMTJGOTAeFw0yNTA3MDEw
MTQyMjhaFw0yNjA2MTUwMTMwMDJaMDMxMTAvBgNVBAMTKEQ3MTAwRUM4QTU3NzQx
OEFERkU1MUM1ODRDMEE1MjhFNzc4OTM5NkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDYno5UOQimCkWnzVbmjP/O9lEZDQWRFW6NnEqLUnz3Xx0KHNjh
LThuUqQGlFHffK8oXxPlfhFm+OPL02E5f1s1FhnGY05NhbBZou9A+pgT/YAyF8pi
QkuojqBvp5od7XIjBr2KH4yJg5frDtVUnasBrQfwepPyrxbapi400m4h7WoJtQxY
FggZTc+RQDZar4X2mLK6SKKPtckSSUFLjT8f+094F1ImGNvJkSAFolUfnTU3YgoK
N7St9YTvLAzhM5ULE+ruL3Q4mQeeznPvBSrMR4UwliorxjM+lhcbKf4oncLjV4Hu
ydFWAdzoiKNXHChlm1Ogq6Ha0vAspaQCiNWZAgMBAAGjggIfMIICGzAdBgNVHQ4E
FgQU1xAOyKV3QYrf5RxYTApSjneJOW4wHwYDVR0jBBgwFoAUKYPP1fjK+gBo0uui
XtD3ASRLEvkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBkBgNVHR8EXTBbMFmg
V6BVhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzYvS1lQUDFmakstZ0JvMHV1aVh0RDNBU1JMRXZrLmNybDBtBggrBgEF
BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p
Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvS1lQUDFmakstZ0JvMHV1aVh0RDNBU1JM
RXZrLmNlcjAOBgNVHQ8BAf8EBAMCB4AwgbkGCCsGAQUFBwELBIGsMIGpMF8GCCsG
AQUFBzALhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzYvMXhBT3lLVjNRWXJmNVJ4WVRBcFNqbmVKT1c0LnJvYTBGBggr
BgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3JyZHAv
YXAvbm90aWZpY2F0aW9uLnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMD
ANKAMA0GCSqGSIb3DQEBCwUAA4IBAQCQKEF4r723avDpw3vdaZaiX+TXB/6VptQu
/HCgweMBS0g3kVPFOTCLVaLzbEZ9G8s8jc0TuvJasJT3B6jywOMv/OIQcVXmHU8s
8JsMn5iQ65MTbTzTrB5B9bmycpaZFkr5Syo2T1OeHjvWTvmJgVdrRLatXjJ1ptul
r9nc3YASoByBSP/wXVCsNezbA19iVzXeJ0gaLIJcoFGbPoK4EC/sUrLgfOEzW8Cs
9VAVPqhZ7AOXsJXVXy6MwDpr0TUEZYUca3AuqbApAKLbYavwOE0UfM1uoJlbcQcB
K5IOFC2ZgMOWmXbN23dYimaNIpuD1lj5MuQGEdMOOhYVYG95W1V9
-----END CERTIFICATE-----
Generated at Thu Jul 3 12:23:03 2025 by rpki-client