Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/604/qKUzlkEnsOxZf_XsoJckC4ISqZg.roa
File:                     qKUzlkEnsOxZf_XsoJckC4ISqZg.roa (raw, json)
Hash identifier:          D9o3c62fED7K8RSvsr7QY+XfR38+Z+SQVye8D8aPObk=
Subject key identifier:   A8:A5:33:96:41:27:B0:EC:59:7F:F5:EC:A0:97:24:0B:82:12:A9:98
Certificate issuer:       /CN=84F94F26AD23CBA93655AE34D806A8CE0A4C5907
Certificate serial:       33
Authority key identifier: 84:F9:4F:26:AD:23:CB:A9:36:55:AE:34:D8:06:A8:CE:0A:4C:59:07
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hPlPJq0jy6k2Va402AaozgpMWQc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/604/qKUzlkEnsOxZf_XsoJckC4ISqZg.roa
Signing time:             Tue 01 Jul 2025 01:32:16 +0000
ROA not before:           Tue 01 Jul 2025 01:32:16 +0000
ROA not after:            Mon 15 Jun 2026 01:30:02 +0000
asID:                     17682
IP address blocks:        219.100.56.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/604/hPlPJq0jy6k2Va402AaozgpMWQc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/604/hPlPJq0jy6k2Va402AaozgpMWQc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hPlPJq0jy6k2Va402AaozgpMWQc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 51 (0x33)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84F94F26AD23CBA93655AE34D806A8CE0A4C5907
        Validity
            Not Before: Jul  1 01:32:16 2025 GMT
            Not After : Jun 15 01:30:02 2026 GMT
        Subject: CN=A8A533964127B0EC597FF5ECA097240B8212A998
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:2a:fb:d0:eb:99:a2:46:16:49:00:67:65:60:
                    3c:a4:2b:db:77:44:27:22:e1:2e:21:c4:d7:72:88:
                    29:b8:67:25:61:54:f9:51:2a:c2:58:87:a4:6e:41:
                    40:dc:11:73:cd:bd:91:c3:7f:bb:ed:f2:b2:ee:02:
                    86:34:81:48:fa:44:95:1f:72:bb:5c:09:b7:8c:b8:
                    4e:34:55:a9:9f:d7:01:52:8a:2e:ab:e7:dc:c7:7b:
                    3f:27:71:b8:51:f4:70:d8:82:b0:c5:8e:70:e6:8e:
                    59:cd:e9:18:aa:71:44:26:c6:fe:14:1c:43:6c:5a:
                    4f:ca:ee:eb:56:e0:a1:cf:97:f7:2c:c3:44:88:c4:
                    46:8a:22:9b:36:27:40:5f:13:0e:56:4f:aa:e6:45:
                    58:6d:f1:01:4a:a1:8a:c5:af:f4:36:8c:83:d8:3e:
                    a1:fc:01:51:bc:26:ef:ea:a5:0b:55:4f:b3:d9:6f:
                    a4:f2:30:90:12:bc:aa:74:68:f6:cf:b8:fc:66:29:
                    99:59:68:69:4c:6f:cb:4d:ab:3a:f9:83:30:b9:52:
                    d0:97:76:38:24:77:36:fd:70:5d:98:11:f1:a6:1f:
                    c8:5f:89:16:6b:b2:fd:1d:e3:29:8e:19:30:69:14:
                    32:43:1c:bc:d0:e0:5a:25:90:89:ed:0c:3b:52:b7:
                    eb:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:A5:33:96:41:27:B0:EC:59:7F:F5:EC:A0:97:24:0B:82:12:A9:98
            X509v3 Authority Key Identifier:
                keyid:84:F9:4F:26:AD:23:CB:A9:36:55:AE:34:D8:06:A8:CE:0A:4C:59:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/604/hPlPJq0jy6k2Va402AaozgpMWQc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hPlPJq0jy6k2Va402AaozgpMWQc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/604/qKUzlkEnsOxZf_XsoJckC4ISqZg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.100.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         be:dc:83:cc:8f:24:50:57:7c:68:05:ca:fb:4b:f6:c2:b8:bf:
         01:4f:6b:45:69:22:3a:59:d5:b5:0f:fe:96:8c:a3:3b:8d:10:
         01:f0:15:69:aa:b9:c6:5e:b8:92:43:78:bb:4a:eb:d4:81:f8:
         c6:d5:c4:7a:5f:74:43:0a:b5:c6:d4:ef:cd:48:b9:be:da:bd:
         ea:7a:78:85:b3:f5:89:37:d5:28:84:7f:18:f8:40:ad:79:52:
         0e:d9:87:49:d9:37:75:a8:95:20:2f:74:9d:6d:9e:4a:53:3f:
         35:21:0e:0b:ba:24:a5:d0:59:33:51:51:2d:0e:e1:ca:5a:f0:
         46:60:00:37:bf:80:5b:57:e7:5c:27:89:ee:f6:43:98:3f:c8:
         19:c3:0d:86:37:53:a0:63:e4:75:c3:49:01:19:33:d3:8c:58:
         e1:ab:15:c0:e5:6d:2c:ce:ab:b1:dc:a3:8a:5b:cf:fa:4d:d4:
         0e:4e:91:a0:b2:65:28:ae:2b:6a:64:d7:f3:ca:bf:4b:fc:23:
         bd:c3:25:b9:2e:72:56:02:6f:68:b7:55:d6:d0:c0:b9:18:13:
         46:2a:40:98:1f:e4:c1:ca:8b:b4:96:ac:39:2c:66:cc:be:4d:
         00:75:74:4b:84:3e:75:52:e2:55:0e:ce:88:86:a5:86:5d:a3:
         c1:a0:aa:4c
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBMzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4NEY5
NEYyNkFEMjNDQkE5MzY1NUFFMzREODA2QThDRTBBNEM1OTA3MB4XDTI1MDcwMTAx
MzIxNloXDTI2MDYxNTAxMzAwMlowMzExMC8GA1UEAxMoQThBNTMzOTY0MTI3QjBF
QzU5N0ZGNUVDQTA5NzI0MEI4MjEyQTk5ODCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMsq+9DrmaJGFkkAZ2VgPKQr23dEJyLhLiHE13KIKbhnJWFU+VEq
wliHpG5BQNwRc829kcN/u+3ysu4ChjSBSPpElR9yu1wJt4y4TjRVqZ/XAVKKLqvn
3Md7PydxuFH0cNiCsMWOcOaOWc3pGKpxRCbG/hQcQ2xaT8ru61bgoc+X9yzDRIjE
RooimzYnQF8TDlZPquZFWG3xAUqhisWv9DaMg9g+ofwBUbwm7+qlC1VPs9lvpPIw
kBK8qnRo9s+4/GYpmVloaUxvy02rOvmDMLlS0Jd2OCR3Nv1wXZgR8aYfyF+JFmuy
/R3jKY4ZMGkUMkMcvNDgWiWQie0MO1K366ECAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBSopTOWQSew7Fl/9eyglyQLghKpmDAfBgNVHSMEGDAWgBSE+U8mrSPLqTZVrjTY
BqjOCkxZBzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNjA0L2hQbFBKcTBqeTZrMlZhNDAyQWFvemdwTVdRYy5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2hQbFBKcTBqeTZrMlZhNDAyQWFvemdw
TVdRYy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC82MDQvcUtVemxrRW5zT3haZl9Yc29KY2tDNElTcVpnLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAttkODANBgkqhkiG9w0BAQsFAAOCAQEAvtyDzI8kUFd8aAXK+0v2wri/AU9r
RWkiOlnVtQ/+loyjO40QAfAVaaq5xl64kkN4u0rr1IH4xtXEel90Qwq1xtTvzUi5
vtq96np4hbP1iTfVKIR/GPhArXlSDtmHSdk3daiVIC90nW2eSlM/NSEOC7okpdBZ
M1FRLQ7hylrwRmAAN7+AW1fnXCeJ7vZDmD/IGcMNhjdToGPkdcNJARkz04xY4asV
wOVtLM6rsdyjilvP+k3UDk6RoLJlKK4ramTX88q/S/wjvcMluS5yVgJvaLdV1tDA
uRgTRipAmB/kwcqLtJasOSxmzL5NAHV0S4Q+dVLiVQ7OiIalhl2jwaCqTA==
-----END CERTIFICATE-----
Generated at Sat Jul 5 09:08:48 2025 by rpki-client