Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/882/PefEQh3iTZeG2t_bqExh5DjA72g.roa
File:                     PefEQh3iTZeG2t_bqExh5DjA72g.roa (raw, json)
Hash identifier:          qlJTVaGV3+oLeJLF74kSAzpUM8WEXmVxRZrxK4p8kf4=
Subject key identifier:   3D:E7:C4:42:1D:E2:4D:97:86:DA:DF:DB:A8:4C:61:E4:38:C0:EF:68
Certificate issuer:       /CN=B3935EEBB426B5FF872B140016A4441CDE239F3F
Certificate serial:       45
Authority key identifier: B3:93:5E:EB:B4:26:B5:FF:87:2B:14:00:16:A4:44:1C:DE:23:9F:3F
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/s5Ne67Qmtf-HKxQAFqREHN4jnz8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/PefEQh3iTZeG2t_bqExh5DjA72g.roa
Signing time:             Fri 01 Aug 2025 01:35:34 +0000
ROA not before:           Fri 01 Aug 2025 01:35:34 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     59127
IP address blocks:        180.148.144.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/s5Ne67Qmtf-HKxQAFqREHN4jnz8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/s5Ne67Qmtf-HKxQAFqREHN4jnz8.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/s5Ne67Qmtf-HKxQAFqREHN4jnz8.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 19:35:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 69 (0x45)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3935EEBB426B5FF872B140016A4441CDE239F3F
        Validity
            Not Before: Aug  1 01:35:34 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=3DE7C4421DE24D9786DADFDBA84C61E438C0EF68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:af:fd:f4:ba:52:21:5c:24:c8:b4:e1:3e:97:
                    19:af:03:78:d4:f0:f2:01:97:38:0b:bf:ad:5f:e8:
                    06:e5:04:b5:c3:d0:65:24:98:4a:dc:6d:69:f8:f0:
                    27:c8:47:3e:9a:f2:30:dc:4a:57:af:f4:0e:17:ed:
                    4f:b3:08:5a:5a:ed:77:9c:4d:7f:25:a1:1f:4a:67:
                    61:81:ff:a8:75:1f:59:63:2d:84:69:01:c4:cf:fa:
                    b4:1f:4d:ee:a2:55:fb:bc:0a:0b:68:02:fb:14:d4:
                    46:ac:72:30:78:11:64:3f:24:c9:91:75:d6:a5:37:
                    fa:4f:05:9c:a7:7f:37:d3:4e:f7:4b:24:f3:e0:b6:
                    0c:19:e3:22:fa:0d:71:48:cf:5b:44:fe:30:54:4b:
                    b8:79:9f:b1:ec:7a:c3:18:58:f9:4c:c5:e7:fe:a4:
                    64:9d:e4:c6:1e:10:be:ba:e7:dc:66:eb:af:b7:eb:
                    1d:a4:00:06:af:6b:e4:31:67:5b:29:d1:a1:ee:bd:
                    8a:9e:63:bd:5d:be:82:b1:bb:f5:1e:34:aa:04:6b:
                    6f:14:48:db:b8:72:62:34:a0:30:2b:4b:b1:ba:aa:
                    2a:10:35:88:36:13:22:a6:e8:7b:fc:37:4b:4e:dc:
                    a6:0e:44:06:65:78:78:eb:91:8f:94:f1:33:70:19:
                    ed:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:E7:C4:42:1D:E2:4D:97:86:DA:DF:DB:A8:4C:61:E4:38:C0:EF:68
            X509v3 Authority Key Identifier:
                keyid:B3:93:5E:EB:B4:26:B5:FF:87:2B:14:00:16:A4:44:1C:DE:23:9F:3F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/s5Ne67Qmtf-HKxQAFqREHN4jnz8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/s5Ne67Qmtf-HKxQAFqREHN4jnz8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/PefEQh3iTZeG2t_bqExh5DjA72g.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.148.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         3b:51:80:03:2a:31:9f:d4:e5:a5:c8:4d:8f:45:20:7a:aa:52:
         18:32:80:52:18:d2:d9:c6:de:64:f5:d3:43:d8:ea:c4:c3:1d:
         73:87:7b:24:d7:2d:2d:ed:63:3a:ea:09:89:95:12:08:f1:4b:
         40:f9:7d:9f:f9:96:73:d6:e1:76:e4:7f:32:1b:9a:82:f2:4d:
         2b:64:c6:8d:0c:16:51:46:b4:75:5e:0a:15:b6:82:3e:98:4c:
         48:a8:73:1f:c7:e6:a4:b8:27:d9:41:34:71:43:44:ef:73:62:
         a0:80:69:d1:01:26:68:a1:d2:59:af:a4:df:cd:9f:ea:c9:04:
         38:2a:77:cf:1f:ef:97:cf:b2:86:3b:54:4f:9b:58:2d:e5:94:
         79:ae:eb:16:4a:cb:c1:3c:87:fb:a5:16:1a:d2:ea:56:1e:2d:
         18:c6:2a:2f:65:63:79:b6:f3:e1:97:d7:39:5f:69:d9:b7:50:
         fa:be:bc:97:a4:66:ad:f5:df:24:8d:75:34:1c:da:0b:ba:d4:
         04:77:c2:16:4b:64:ab:f4:0f:04:18:18:90:77:c8:a1:b8:30:
         06:11:0c:8c:7c:c2:7c:3b:1b:89:44:85:ca:d4:b7:0e:53:a7:
         6f:15:1c:0a:f2:de:26:74:a4:bf:53:c7:6d:61:c2:b4:17:73:
         93:49:1c:27
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBRTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhCMzkz
NUVFQkI0MjZCNUZGODcyQjE0MDAxNkE0NDQxQ0RFMjM5RjNGMB4XDTI1MDgwMTAx
MzUzNFoXDTI2MDczMDA2MjkwOFowMzExMC8GA1UEAxMoM0RFN0M0NDIxREUyNEQ5
Nzg2REFERkRCQTg0QzYxRTQzOEMwRUY2ODCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAK6v/fS6UiFcJMi04T6XGa8DeNTw8gGXOAu/rV/oBuUEtcPQZSSY
StxtafjwJ8hHPpryMNxKV6/0DhftT7MIWlrtd5xNfyWhH0pnYYH/qHUfWWMthGkB
xM/6tB9N7qJV+7wKC2gC+xTURqxyMHgRZD8kyZF11qU3+k8FnKd/N9NO90sk8+C2
DBnjIvoNcUjPW0T+MFRLuHmfsex6wxhY+UzF5/6kZJ3kxh4Qvrrn3Gbrr7frHaQA
Bq9r5DFnWynRoe69ip5jvV2+grG79R40qgRrbxRI27hyYjSgMCtLsbqqKhA1iDYT
Iqboe/w3S07cpg5EBmV4eOuRj5TxM3AZ7acCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBQ958RCHeJNl4ba39uoTGHkOMDvaDAfBgNVHSMEGDAWgBSzk17rtCa1/4crFAAW
pEQc3iOfPzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvODgyL3M1TmU2N1FtdGYtSEt4UUFGcVJFSE40am56OC5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3M1TmU2N1FtdGYtSEt4UUFGcVJFSE40
am56OC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC84ODIvUGVmRVFoM2lUWmVHMnRfYnFFeGg1RGpBNzJnLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEA7SUkDANBgkqhkiG9w0BAQsFAAOCAQEAO1GAAyoxn9TlpchNj0UgeqpSGDKA
UhjS2cbeZPXTQ9jqxMMdc4d7JNctLe1jOuoJiZUSCPFLQPl9n/mWc9bhduR/Mhua
gvJNK2TGjQwWUUa0dV4KFbaCPphMSKhzH8fmpLgn2UE0cUNE73NioIBp0QEmaKHS
Wa+k382f6skEOCp3zx/vl8+yhjtUT5tYLeWUea7rFkrLwTyH+6UWGtLqVh4tGMYq
L2Vjebbz4ZfXOV9p2bdQ+r68l6RmrfXfJI11NBzaC7rUBHfCFktkq/QPBBgYkHfI
obgwBhEMjHzCfDsbiUSFytS3DlOnbxUcCvLeJnSkv1PHbWHCtBdzk0kcJw==
-----END CERTIFICATE-----
Generated at Sun Aug 24 02:40:09 2025 by rpki-client