Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/602/B_ad4IkZdNyHMus5sXUbTDOozs4.roa
File:                     B_ad4IkZdNyHMus5sXUbTDOozs4.roa (raw, json)
Hash identifier:          n/2hqPlQAGY/nlds/bftoUQWR+/9FNkmL9WbU4UHlHk=
Subject key identifier:   07:F6:9D:E0:89:19:74:DC:87:32:EB:39:B1:75:1B:4C:33:A8:CE:CE
Certificate issuer:       /CN=4EFF1AB6EADA273BA066DB0F77B79D6A0D901542
Certificate serial:       7D
Authority key identifier: 4E:FF:1A:B6:EA:DA:27:3B:A0:66:DB:0F:77:B7:9D:6A:0D:90:15:42
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tv8aturaJzugZtsPd7edag2QFUI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/B_ad4IkZdNyHMus5sXUbTDOozs4.roa
Signing time:             Thu 01 May 2025 01:32:29 +0000
ROA not before:           Thu 01 May 2025 01:32:29 +0000
ROA not after:            Wed 15 Apr 2026 01:30:03 +0000
asID:                     17675
IP address blocks:        61.211.160.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/Tv8aturaJzugZtsPd7edag2QFUI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/Tv8aturaJzugZtsPd7edag2QFUI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tv8aturaJzugZtsPd7edag2QFUI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 23 May 2025 16:54:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125 (0x7d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4EFF1AB6EADA273BA066DB0F77B79D6A0D901542
        Validity
            Not Before: May  1 01:32:29 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=07F69DE0891974DC8732EB39B1751B4C33A8CECE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:15:30:e4:c2:e5:8a:8f:bb:10:08:4f:e4:00:
                    2b:52:f7:6d:3d:e2:af:63:36:ea:ee:b9:39:9e:36:
                    9c:45:c2:6f:70:b8:5a:a0:e8:cf:bf:e7:69:6f:93:
                    8f:39:bf:7a:e8:d2:1a:7f:f8:2a:6b:6d:a0:f2:f1:
                    d5:db:d5:b5:69:f3:7f:61:17:e0:cf:ac:57:6c:71:
                    dc:29:81:ee:92:12:71:36:b6:48:ad:d5:ba:4e:e4:
                    4d:a2:9d:bb:01:68:54:7e:f8:b6:32:23:16:32:6d:
                    ac:51:bf:4d:8f:8f:9a:97:d9:a0:9b:76:7e:d5:80:
                    5e:5c:53:af:ba:db:c5:29:9f:04:04:99:a2:9d:c7:
                    2a:82:a6:89:2a:ea:61:ec:60:fa:09:67:f3:cd:6d:
                    8f:6a:a7:16:a6:b8:bb:29:89:e0:cc:f7:38:13:b5:
                    46:da:1d:9b:85:54:bf:a5:8e:ca:46:01:e4:a5:3f:
                    70:1d:f2:53:11:64:bb:23:4b:ea:2b:a7:c4:d6:90:
                    5c:95:f5:56:5f:1b:fa:6d:bd:55:7e:1e:1f:26:8b:
                    69:d7:e4:ae:d1:d9:fd:ef:5b:6d:c0:f4:18:86:fd:
                    36:11:6c:ae:2c:ca:d4:2c:f7:b4:d0:02:ea:ff:75:
                    95:cd:61:51:8c:b5:be:1a:c4:b1:f0:07:1d:3d:57:
                    50:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:F6:9D:E0:89:19:74:DC:87:32:EB:39:B1:75:1B:4C:33:A8:CE:CE
            X509v3 Authority Key Identifier:
                keyid:4E:FF:1A:B6:EA:DA:27:3B:A0:66:DB:0F:77:B7:9D:6A:0D:90:15:42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/Tv8aturaJzugZtsPd7edag2QFUI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tv8aturaJzugZtsPd7edag2QFUI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/B_ad4IkZdNyHMus5sXUbTDOozs4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.211.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         ba:30:2d:43:de:d9:3b:2d:f0:8f:6b:c0:25:32:26:9d:25:1f:
         d7:19:2a:e1:d7:22:23:87:12:d1:85:27:14:86:32:fa:a3:8a:
         dc:f9:af:ca:cf:43:3b:47:1c:3c:f1:ea:28:a4:66:55:27:1b:
         15:0b:29:52:f2:cd:57:bd:6e:0b:3f:7e:4f:01:82:e3:ca:b1:
         8b:b3:8d:d9:ac:f5:c9:4b:17:a2:43:c7:ca:28:9b:f1:00:56:
         35:cf:56:85:71:6e:83:55:be:6a:17:a3:b7:fe:89:a9:94:e1:
         c1:7b:d7:5c:4c:47:53:37:4b:ad:bf:95:bf:92:54:8b:53:42:
         1e:ed:21:c1:d1:38:15:90:d4:dd:23:2d:b3:44:4d:37:2e:eb:
         38:ad:3c:ab:cb:5e:66:02:f3:36:11:d9:a0:b7:9d:80:48:09:
         cd:cf:73:d0:30:1e:da:cb:4f:02:8a:fc:f3:fc:fa:ce:9f:fd:
         b2:4f:fb:33:ff:f6:72:c4:92:9d:9e:f6:58:22:c1:53:7a:12:
         40:c2:33:78:7e:1f:69:22:49:48:ab:a5:6a:96:38:73:08:22:
         86:d2:0a:50:b3:cc:05:da:54:0b:2a:33:c2:89:95:58:3f:0a:
         aa:98:e4:16:a8:e5:91:86:3a:87:40:af:3f:2f:25:34:b4:4c:
         58:e3:58:f4
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBfTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0RUZG
MUFCNkVBREEyNzNCQTA2NkRCMEY3N0I3OUQ2QTBEOTAxNTQyMB4XDTI1MDUwMTAx
MzIyOVoXDTI2MDQxNTAxMzAwM1owMzExMC8GA1UEAxMoMDdGNjlERTA4OTE5NzRE
Qzg3MzJFQjM5QjE3NTFCNEMzM0E4Q0VDRTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKoVMOTC5YqPuxAIT+QAK1L3bT3ir2M26u65OZ42nEXCb3C4WqDo
z7/naW+Tjzm/eujSGn/4KmttoPLx1dvVtWnzf2EX4M+sV2xx3CmB7pIScTa2SK3V
uk7kTaKduwFoVH74tjIjFjJtrFG/TY+PmpfZoJt2ftWAXlxTr7rbxSmfBASZop3H
KoKmiSrqYexg+gln881tj2qnFqa4uymJ4Mz3OBO1Rtodm4VUv6WOykYB5KU/cB3y
UxFkuyNL6iunxNaQXJX1Vl8b+m29VX4eHyaLadfkrtHZ/e9bbcD0GIb9NhFsrizK
1Cz3tNAC6v91lc1hUYy1vhrEsfAHHT1XUHECAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBQH9p3giRl03Icy6zmxdRtMM6jOzjAfBgNVHSMEGDAWgBRO/xq26tonO6Bm2w93
t51qDZAVQjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNjAyL1R2OGF0dXJhSnp1Z1p0c1BkN2VkYWcyUUZVSS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1R2OGF0dXJhSnp1Z1p0c1BkN2VkYWcy
UUZVSS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC82MDIvQl9hZDRJa1pkTnlITXVzNXNYVWJURE9venM0LnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBD3ToDANBgkqhkiG9w0BAQsFAAOCAQEAujAtQ97ZOy3wj2vAJTImnSUf1xkq
4dciI4cS0YUnFIYy+qOK3Pmvys9DO0ccPPHqKKRmVScbFQspUvLNV71uCz9+TwGC
48qxi7ON2az1yUsXokPHyiib8QBWNc9WhXFug1W+ahejt/6JqZThwXvXXExHUzdL
rb+Vv5JUi1NCHu0hwdE4FZDU3SMts0RNNy7rOK08q8teZgLzNhHZoLedgEgJzc9z
0DAe2stPAor88/z6zp/9sk/7M//2csSSnZ72WCLBU3oSQMIzeH4faSJJSKulapY4
cwgihtIKULPMBdpUCyozwomVWD8KqpjkFqjlkYY6h0CvPy8lNLRMWONY9A==
-----END CERTIFICATE-----
Generated at Fri May 16 18:29:21 2025 by rpki-client