Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/802/JCvPbDtPQPo4Bzv7qGNEiwwBGuU.roa
File:                     JCvPbDtPQPo4Bzv7qGNEiwwBGuU.roa (raw, json)
Hash identifier:          NRxJAUVPp6wEdJD4Q1FpLQqEd6Yi0IDleyFRkOJXHZk=
Subject key identifier:   24:2B:CF:6C:3B:4F:40:FA:38:07:3B:FB:A8:63:44:8B:0C:01:1A:E5
Certificate issuer:       /CN=2362B2E3E478DCBAD6F42A4511290CFC373C24C6
Certificate serial:       2F
Authority key identifier: 23:62:B2:E3:E4:78:DC:BA:D6:F4:2A:45:11:29:0C:FC:37:3C:24:C6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/I2Ky4-R43LrW9CpFESkM_Dc8JMY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/802/JCvPbDtPQPo4Bzv7qGNEiwwBGuU.roa
Signing time:             Tue 01 Jul 2025 01:31:38 +0000
ROA not before:           Tue 01 Jul 2025 01:31:38 +0000
ROA not after:            Mon 15 Jun 2026 01:30:02 +0000
asID:                     23791
IP address blocks:        118.102.48.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/802/I2Ky4-R43LrW9CpFESkM_Dc8JMY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/802/I2Ky4-R43LrW9CpFESkM_Dc8JMY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/I2Ky4-R43LrW9CpFESkM_Dc8JMY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 47 (0x2f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2362B2E3E478DCBAD6F42A4511290CFC373C24C6
        Validity
            Not Before: Jul  1 01:31:38 2025 GMT
            Not After : Jun 15 01:30:02 2026 GMT
        Subject: CN=242BCF6C3B4F40FA38073BFBA863448B0C011AE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:89:d5:0c:76:20:99:6e:2e:1d:73:e7:2b:85:
                    80:d3:50:92:4d:30:78:f6:6c:fb:b2:15:25:05:fe:
                    e0:34:fb:30:18:bf:e7:71:4f:34:08:88:cb:c1:d0:
                    1b:df:ad:ef:51:98:2b:da:74:32:fa:71:08:2a:2f:
                    1d:39:90:e0:6d:4c:d8:32:97:94:86:6c:0a:6a:a8:
                    84:00:0e:60:c8:97:cb:86:68:60:93:35:96:09:8e:
                    1b:f9:00:cd:85:27:28:a9:d3:c1:e9:62:ed:cb:dd:
                    e6:11:7d:35:e3:3a:00:72:92:1f:49:0f:eb:f0:7c:
                    74:af:88:c8:ac:06:ca:8d:12:b1:cc:b6:ec:3b:dc:
                    8e:ab:71:95:77:3c:7f:99:fd:3d:f7:91:fd:4d:4e:
                    09:0c:36:e3:a4:be:3a:2c:97:5a:97:46:35:99:db:
                    79:38:a8:ab:38:06:44:cd:48:2e:d7:96:2d:8e:9e:
                    ab:af:26:c3:1d:b9:3f:e9:d5:05:d9:19:d1:26:d7:
                    3d:b7:6d:1d:7d:88:4a:91:13:4a:1b:fe:f0:a7:3d:
                    b8:2f:b3:d5:4b:d4:51:2f:f8:c0:a0:54:cc:71:f4:
                    b0:eb:ba:44:66:c1:15:86:94:87:9f:0b:45:f1:93:
                    cd:78:ac:95:db:ee:b7:ce:1b:67:55:be:36:07:91:
                    2b:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:2B:CF:6C:3B:4F:40:FA:38:07:3B:FB:A8:63:44:8B:0C:01:1A:E5
            X509v3 Authority Key Identifier:
                keyid:23:62:B2:E3:E4:78:DC:BA:D6:F4:2A:45:11:29:0C:FC:37:3C:24:C6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/802/I2Ky4-R43LrW9CpFESkM_Dc8JMY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/I2Ky4-R43LrW9CpFESkM_Dc8JMY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/802/JCvPbDtPQPo4Bzv7qGNEiwwBGuU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.102.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         d2:71:ca:73:07:79:fc:68:42:e4:01:7f:12:30:65:9a:f7:64:
         78:12:4d:5a:b3:c2:c8:51:82:b6:25:f3:e9:f3:6d:7f:89:c8:
         8e:bd:71:52:5d:f7:53:ee:e4:63:d8:56:4b:8e:bb:ce:52:2c:
         78:ae:cb:e5:a2:91:9e:c1:99:ad:bf:a6:b9:c7:2c:29:59:96:
         21:27:32:c8:6f:a1:d9:4e:10:1e:9a:3c:a3:7b:03:e4:83:8c:
         02:6c:1e:97:3d:06:27:91:a2:c8:ee:c2:94:04:6f:d8:14:2e:
         39:48:1d:9d:a2:6e:cd:64:92:c2:0c:1c:5b:af:42:46:84:ee:
         e8:de:16:6b:89:a7:96:30:87:8b:9f:f2:7b:ac:f9:26:35:c8:
         8f:23:3f:25:ec:da:72:70:1e:cf:96:fc:e4:14:63:e1:a0:2c:
         a6:b5:c7:d3:12:c8:d1:48:b9:20:f1:09:e4:46:5c:47:6a:63:
         9a:20:f9:76:13:53:95:a0:30:e5:55:a3:bf:a1:e9:4a:a8:4e:
         c6:e6:84:f3:a2:07:ff:f8:2b:bd:8b:f4:dd:67:51:1b:d6:ec:
         9d:48:fc:70:70:aa:58:15:5c:82:3f:f0:ef:f2:09:bc:2b:7a:
         0e:28:55:a3:77:a8:78:4a:3c:73:24:ca:6c:02:e4:39:ba:eb:
         97:8d:d6:f6
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBLzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygyMzYy
QjJFM0U0NzhEQ0JBRDZGNDJBNDUxMTI5MENGQzM3M0MyNEM2MB4XDTI1MDcwMTAx
MzEzOFoXDTI2MDYxNTAxMzAwMlowMzExMC8GA1UEAxMoMjQyQkNGNkMzQjRGNDBG
QTM4MDczQkZCQTg2MzQ0OEIwQzAxMUFFNTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANGJ1Qx2IJluLh1z5yuFgNNQkk0wePZs+7IVJQX+4DT7MBi/53FP
NAiIy8HQG9+t71GYK9p0MvpxCCovHTmQ4G1M2DKXlIZsCmqohAAOYMiXy4ZoYJM1
lgmOG/kAzYUnKKnTweli7cvd5hF9NeM6AHKSH0kP6/B8dK+IyKwGyo0Sscy27Dvc
jqtxlXc8f5n9PfeR/U1OCQw246S+OiyXWpdGNZnbeTioqzgGRM1ILteWLY6eq68m
wx25P+nVBdkZ0SbXPbdtHX2ISpETShv+8Kc9uC+z1UvUUS/4wKBUzHH0sOu6RGbB
FYaUh58LRfGTzXisldvut84bZ1W+NgeRKzcCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBQkK89sO09A+jgHO/uoY0SLDAEa5TAfBgNVHSMEGDAWgBQjYrLj5Hjcutb0KkUR
KQz8NzwkxjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvODAyL0kyS3k0LVI0M0xyVzlDcEZFU2tNX0RjOEpNWS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0kyS3k0LVI0M0xyVzlDcEZFU2tNX0Rj
OEpNWS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC84MDIvSkN2UGJEdFBRUG80Qnp2N3FHTkVpd3dCR3VVLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBHZmMDANBgkqhkiG9w0BAQsFAAOCAQEA0nHKcwd5/GhC5AF/EjBlmvdkeBJN
WrPCyFGCtiXz6fNtf4nIjr1xUl33U+7kY9hWS467zlIseK7L5aKRnsGZrb+muccs
KVmWIScyyG+h2U4QHpo8o3sD5IOMAmwelz0GJ5GiyO7ClARv2BQuOUgdnaJuzWSS
wgwcW69CRoTu6N4Wa4mnljCHi5/ye6z5JjXIjyM/JezacnAez5b85BRj4aAsprXH
0xLI0Ui5IPEJ5EZcR2pjmiD5dhNTlaAw5VWjv6HpSqhOxuaE86IH//grvYv03WdR
G9bsnUj8cHCqWBVcgj/w7/IJvCt6DihVo3eoeEo8cyTKbALkObrrl43W9g==
-----END CERTIFICATE-----
Generated at Sat Jul 5 09:51:00 2025 by rpki-client