Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/P8rTet0Yl5aAdhQXIvdfTEbAS00.roa
File:                     P8rTet0Yl5aAdhQXIvdfTEbAS00.roa (raw, json)
Hash identifier:          qYyC7BEh5ztU3VOjXn8NSp0KXJm2NHYlzd/WGz2Ibc4=
Subject key identifier:   3F:CA:D3:7A:DD:18:97:96:80:76:14:17:22:F7:5F:4C:46:C0:4B:4D
Certificate issuer:       /CN=296966DD720C30575F62D8FD4149458A90AACAA4
Certificate serial:       82
Authority key identifier: 29:69:66:DD:72:0C:30:57:5F:62:D8:FD:41:49:45:8A:90:AA:CA:A4
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KWlm3XIMMFdfYtj9QUlFipCqyqQ.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/P8rTet0Yl5aAdhQXIvdfTEbAS00.roa
Signing time:             Tue 01 Jul 2025 01:34:34 +0000
ROA not before:           Tue 01 Jul 2025 01:34:34 +0000
ROA not after:            Mon 15 Jun 2026 01:30:02 +0000
asID:                     2497
IP address blocks:        172.122.0.0/15 maxlen: 15
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KWlm3XIMMFdfYtj9QUlFipCqyqQ.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KWlm3XIMMFdfYtj9QUlFipCqyqQ.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KWlm3XIMMFdfYtj9QUlFipCqyqQ.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 130 (0x82)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=296966DD720C30575F62D8FD4149458A90AACAA4
        Validity
            Not Before: Jul  1 01:34:34 2025 GMT
            Not After : Jun 15 01:30:02 2026 GMT
        Subject: CN=3FCAD37ADD1897968076141722F75F4C46C04B4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e1:88:54:2e:03:59:a8:72:fd:48:9c:be:ca:
                    7c:61:85:b1:9d:68:d2:77:c7:eb:d4:25:fc:3a:c3:
                    70:18:97:91:62:74:6a:0d:7f:e4:f0:9e:dc:a2:b7:
                    f1:a8:69:51:e2:a1:aa:8c:37:00:7c:7b:4a:10:f0:
                    60:5b:ac:27:2c:eb:f5:7d:29:77:10:0e:e8:d3:a4:
                    f1:83:aa:73:fa:b5:40:ab:b7:5d:ec:4a:7d:27:f4:
                    53:d2:19:ed:29:8a:02:c1:2b:18:55:19:76:80:00:
                    84:0d:d2:22:dc:c3:02:2a:c7:60:5d:2a:67:59:fb:
                    60:04:69:0f:e4:47:ac:59:d9:54:1d:d0:32:bb:8d:
                    29:c9:45:ad:5a:4c:46:35:88:1c:9a:5f:85:e8:59:
                    4e:53:0c:eb:b3:aa:fc:f8:ac:46:ea:a4:54:fe:1a:
                    fb:c3:40:02:e5:38:96:1d:d0:c0:0e:31:48:ab:32:
                    a4:2b:7c:df:6e:4e:1e:68:e3:62:97:47:bf:b6:2e:
                    bd:de:b1:a0:7d:69:e6:c9:78:cb:44:f4:06:f1:7a:
                    f3:45:9e:d6:5a:aa:26:ea:ac:a2:0c:12:4d:e4:0b:
                    91:da:c3:4a:f6:68:fc:51:bd:b4:dc:cc:e8:aa:b1:
                    93:4b:4f:38:69:cd:fc:50:bb:27:82:04:aa:87:e2:
                    3b:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:CA:D3:7A:DD:18:97:96:80:76:14:17:22:F7:5F:4C:46:C0:4B:4D
            X509v3 Authority Key Identifier:
                keyid:29:69:66:DD:72:0C:30:57:5F:62:D8:FD:41:49:45:8A:90:AA:CA:A4

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KWlm3XIMMFdfYtj9QUlFipCqyqQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KWlm3XIMMFdfYtj9QUlFipCqyqQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/P8rTet0Yl5aAdhQXIvdfTEbAS00.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.122.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         95:16:c1:84:7a:d6:69:68:07:71:dd:46:94:e2:63:1e:37:ce:
         11:26:38:f8:74:6f:91:4b:6f:67:d1:1b:d1:37:85:9d:2d:d2:
         b1:7f:82:bf:af:e1:13:37:e1:f6:07:54:23:a3:68:bc:d7:08:
         e9:ba:78:9b:54:db:2c:c5:ff:50:84:c2:fe:b5:86:bb:42:91:
         f3:66:32:ee:b1:fd:15:e8:cf:9d:c7:77:00:64:12:11:f5:93:
         44:a5:10:a0:42:ce:bc:3a:34:00:36:4c:a4:51:25:dd:82:27:
         0a:ab:9c:39:05:d5:99:d9:27:28:32:b2:b0:8d:db:0e:dc:00:
         b7:e1:7c:55:52:ff:2d:04:b9:fa:b2:fd:c4:e3:8a:9a:e6:4e:
         1e:4b:e2:96:ac:da:1c:ca:7f:48:6e:12:da:97:ce:b1:66:6b:
         61:2a:1a:6c:ed:6a:05:f0:cf:f7:52:4e:36:c8:3a:a7:0a:6b:
         e1:7c:c9:4e:13:a8:91:29:be:60:29:65:16:ca:dc:c6:3e:ec:
         d2:1a:ca:08:b8:c2:fa:71:74:9a:f2:d0:27:f4:51:41:79:95:
         10:9b:17:f4:70:19:83:39:34:3e:c0:b9:8f:f3:67:1e:61:8a:
         10:8e:f6:f5:48:d9:50:74:93:66:0a:4f:33:ab:70:65:db:ba:
         13:4d:a9:ac
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgICAIIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjk2
OTY2REQ3MjBDMzA1NzVGNjJEOEZENDE0OTQ1OEE5MEFBQ0FBNDAeFw0yNTA3MDEw
MTM0MzRaFw0yNjA2MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDNGQ0FEMzdBREQxODk3
OTY4MDc2MTQxNzIyRjc1RjRDNDZDMDRCNEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDC4YhULgNZqHL9SJy+ynxhhbGdaNJ3x+vUJfw6w3AYl5FidGoN
f+Twntyit/GoaVHioaqMNwB8e0oQ8GBbrCcs6/V9KXcQDujTpPGDqnP6tUCrt13s
Sn0n9FPSGe0pigLBKxhVGXaAAIQN0iLcwwIqx2BdKmdZ+2AEaQ/kR6xZ2VQd0DK7
jSnJRa1aTEY1iByaX4XoWU5TDOuzqvz4rEbqpFT+GvvDQALlOJYd0MAOMUirMqQr
fN9uTh5o42KXR7+2Lr3esaB9aebJeMtE9AbxevNFntZaqibqrKIMEk3kC5Haw0r2
aPxRvbTczOiqsZNLTzhpzfxQuyeCBKqH4ju9AgMBAAGjggIfMIICGzAdBgNVHQ4E
FgQUP8rTet0Yl5aAdhQXIvdfTEbAS00wHwYDVR0jBBgwFoAUKWlm3XIMMFdfYtj9
QUlFipCqyqQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBkBgNVHR8EXTBbMFmg
V6BVhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzYvS1dsbTNYSU1NRmRmWXRqOVFVbEZpcENxeXFRLmNybDBtBggrBgEF
BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p
Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvS1dsbTNYSU1NRmRmWXRqOVFVbEZpcENx
eXFRLmNlcjAOBgNVHQ8BAf8EBAMCB4AwgbkGCCsGAQUFBwELBIGsMIGpMF8GCCsG
AQUFBzALhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzYvUDhyVGV0MFlsNWFBZGhRWEl2ZGZURWJBUzAwLnJvYTBGBggr
BgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3JyZHAv
YXAvbm90aWZpY2F0aW9uLnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMD
Aax6MA0GCSqGSIb3DQEBCwUAA4IBAQCVFsGEetZpaAdx3UaU4mMeN84RJjj4dG+R
S29n0RvRN4WdLdKxf4K/r+ETN+H2B1Qjo2i81wjpunibVNssxf9QhML+tYa7QpHz
ZjLusf0V6M+dx3cAZBIR9ZNEpRCgQs68OjQANkykUSXdgicKq5w5BdWZ2ScoMrKw
jdsO3AC34XxVUv8tBLn6sv3E44qa5k4eS+KWrNocyn9IbhLal86xZmthKhps7WoF
8M/3Uk42yDqnCmvhfMlOE6iRKb5gKWUWytzGPuzSGsoIuML6cXSa8tAn9FFBeZUQ
mxf0cBmDOTQ+wLmP82ceYYoQjvb1SNlQdJNmCk8zq3Bl27oTTams
-----END CERTIFICATE-----
Generated at Thu Jul 3 09:23:41 2025 by rpki-client