Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/nfAtjvn2ZooT2ic4wlJozyuNPhA.roa
File:                     nfAtjvn2ZooT2ic4wlJozyuNPhA.roa (raw, json)
Hash identifier:          85MXquLXv5qV+ZYeKnl2qi4nX5nWDfPl/v6yqO/VLF4=
Subject key identifier:   9D:F0:2D:8E:F9:F6:66:8A:13:DA:27:38:C2:52:68:CF:2B:8D:3E:10
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       01D4
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/nfAtjvn2ZooT2ic4wlJozyuNPhA.roa
Signing time:             Tue 01 Jul 2025 01:42:28 +0000
ROA not before:           Tue 01 Jul 2025 01:42:28 +0000
ROA not after:            Mon 15 Jun 2026 01:30:02 +0000
asID:                     2497
IP address blocks:        202.214.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 468 (0x1d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Jul  1 01:42:28 2025 GMT
            Not After : Jun 15 01:30:02 2026 GMT
        Subject: CN=9DF02D8EF9F6668A13DA2738C25268CF2B8D3E10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:57:77:5f:db:54:fb:39:da:d1:2d:df:6b:27:
                    42:84:ed:77:ba:0b:8a:97:82:65:fd:95:34:81:42:
                    2b:6b:f5:ac:22:79:c2:90:f2:49:65:b4:08:a5:e6:
                    6c:c0:be:62:74:d6:32:55:5d:32:83:bf:1e:cf:41:
                    a4:69:da:59:15:5d:54:34:30:46:3b:20:4f:11:30:
                    a5:41:85:80:ef:2a:f1:28:b3:61:7d:02:54:66:48:
                    b2:47:8b:c5:bf:e2:a4:9a:65:55:63:1c:25:b6:ea:
                    7a:da:be:46:7e:3f:e8:a9:6f:30:76:7a:6f:36:e1:
                    f7:20:ca:cd:ec:de:20:82:a9:07:8a:f8:57:42:a0:
                    90:22:ef:3b:01:23:61:3f:5a:ef:02:dd:e8:3c:e1:
                    3f:e3:09:56:d6:8e:66:ed:5e:dc:b1:a3:36:4f:71:
                    00:7d:ff:d9:f3:9e:46:5d:ac:1d:6e:de:44:eb:de:
                    cc:7c:1d:88:82:6d:e2:37:8f:ea:ab:80:2e:c5:12:
                    f5:d0:5f:1a:19:46:19:38:08:ea:86:a8:83:72:f4:
                    29:c4:3f:86:f3:5c:19:90:10:f2:61:6a:13:77:05:
                    a3:bb:78:da:d0:bf:8d:63:8e:c0:49:31:69:ef:3f:
                    ec:7c:02:38:02:85:31:94:28:65:85:56:42:84:8b:
                    b2:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:F0:2D:8E:F9:F6:66:8A:13:DA:27:38:C2:52:68:CF:2B:8D:3E:10
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/nfAtjvn2ZooT2ic4wlJozyuNPhA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.214.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         83:c4:e2:de:e4:3e:93:89:08:6e:47:6f:29:db:7c:3d:f0:95:
         e1:49:cb:17:da:23:0c:39:3a:95:eb:f6:9e:2e:25:81:5e:4a:
         7f:35:49:c7:f7:58:38:d2:72:e1:e7:d0:55:e1:1e:8b:55:26:
         d3:08:b2:76:80:4c:a1:82:bd:f6:2a:b9:a2:a6:46:1b:16:b4:
         45:43:27:49:f8:35:fb:23:8a:04:b3:22:0a:c6:79:e9:af:9b:
         4b:4c:b1:6a:f1:8b:79:ef:47:1c:08:04:91:72:98:84:7c:54:
         2a:d0:17:c8:d5:b0:0d:d7:a5:6e:c7:64:38:13:9c:f5:7d:da:
         62:11:e8:0b:e6:5c:97:1c:aa:68:e4:33:cb:a3:aa:46:22:bb:
         94:2a:8d:55:84:da:f6:2b:6f:d5:9c:b5:94:a2:42:ee:87:b0:
         68:50:f7:be:5c:f5:38:de:16:dd:6f:66:dc:96:0d:29:f6:38:
         57:01:18:7f:57:0e:5f:5b:69:e0:3d:05:3c:f1:91:ad:47:4d:
         f5:77:77:20:08:5b:6d:a3:50:62:b9:32:87:35:77:59:91:8e:
         de:b8:ed:9c:2f:73:e8:2e:dd:92:a9:1c:30:dc:71:b8:a2:43:
         b0:e3:8d:87:f3:ba:06:87:1d:9e:d7:d6:1a:70:b8:b2:4d:48:
         2b:93:58:e4
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgICAdQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjk4
M0NGRDVGOENBRkEwMDY4RDJFQkEyNUVEMEY3MDEyNDRCMTJGOTAeFw0yNTA3MDEw
MTQyMjhaFw0yNjA2MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDlERjAyRDhFRjlGNjY2
OEExM0RBMjczOEMyNTI2OENGMkI4RDNFMTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCgV3df21T7OdrRLd9rJ0KE7Xe6C4qXgmX9lTSBQitr9awiecKQ
8klltAil5mzAvmJ01jJVXTKDvx7PQaRp2lkVXVQ0MEY7IE8RMKVBhYDvKvEos2F9
AlRmSLJHi8W/4qSaZVVjHCW26nravkZ+P+ipbzB2em824fcgys3s3iCCqQeK+FdC
oJAi7zsBI2E/Wu8C3eg84T/jCVbWjmbtXtyxozZPcQB9/9nznkZdrB1u3kTr3sx8
HYiCbeI3j+qrgC7FEvXQXxoZRhk4COqGqINy9CnEP4bzXBmQEPJhahN3BaO7eNrQ
v41jjsBJMWnvP+x8AjgChTGUKGWFVkKEi7JJAgMBAAGjggIfMIICGzAdBgNVHQ4E
FgQUnfAtjvn2ZooT2ic4wlJozyuNPhAwHwYDVR0jBBgwFoAUKYPP1fjK+gBo0uui
XtD3ASRLEvkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBkBgNVHR8EXTBbMFmg
V6BVhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzYvS1lQUDFmakstZ0JvMHV1aVh0RDNBU1JMRXZrLmNybDBtBggrBgEF
BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p
Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvS1lQUDFmakstZ0JvMHV1aVh0RDNBU1JM
RXZrLmNlcjAOBgNVHQ8BAf8EBAMCB4AwgbkGCCsGAQUFBwELBIGsMIGpMF8GCCsG
AQUFBzALhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzYvbmZBdGp2bjJab29UMmljNHdsSm96eXVOUGhBLnJvYTBGBggr
BgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3JyZHAv
YXAvbm90aWZpY2F0aW9uLnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMD
AMrWMA0GCSqGSIb3DQEBCwUAA4IBAQCDxOLe5D6TiQhuR28p23w98JXhScsX2iMM
OTqV6/aeLiWBXkp/NUnH91g40nLh59BV4R6LVSbTCLJ2gEyhgr32KrmipkYbFrRF
QydJ+DX7I4oEsyIKxnnpr5tLTLFq8Yt570ccCASRcpiEfFQq0BfI1bAN16Vux2Q4
E5z1fdpiEegL5lyXHKpo5DPLo6pGIruUKo1VhNr2K2/VnLWUokLuh7BoUPe+XPU4
3hbdb2bclg0p9jhXARh/Vw5fW2ngPQU88ZGtR031d3cgCFtto1BiuTKHNXdZkY7e
uO2cL3PoLt2SqRww3HG4okOw442H87oGhx2e19YacLiyTUgrk1jk
-----END CERTIFICATE-----
Generated at Thu Jul 3 19:20:46 2025 by rpki-client