Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/939/dHzp1X5gXiOWS_MYD1JIClM8_l8.roa
File:                     dHzp1X5gXiOWS_MYD1JIClM8_l8.roa (raw, json)
Hash identifier:          hFDcrY4Y/5F35It1sUm1MGqQmPMTTo2A1uzTVtdPevs=
Subject key identifier:   74:7C:E9:D5:7E:60:5E:23:96:4B:F3:18:0F:52:48:0A:53:3C:FE:5F
Certificate issuer:       /CN=7C60295C85FF37E2DCF75AF014D44AD3BF8C33A4
Certificate serial:       D0
Authority key identifier: 7C:60:29:5C:85:FF:37:E2:DC:F7:5A:F0:14:D4:4A:D3:BF:8C:33:A4
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/dHzp1X5gXiOWS_MYD1JIClM8_l8.roa
Signing time:             Thu 01 May 2025 01:29:08 +0000
ROA not before:           Thu 01 May 2025 01:29:08 +0000
ROA not after:            Wed 15 Apr 2026 01:30:03 +0000
asID:                     2518
IP address blocks:        119.244.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 May 2025 10:41:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 208 (0xd0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C60295C85FF37E2DCF75AF014D44AD3BF8C33A4
        Validity
            Not Before: May  1 01:29:08 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=747CE9D57E605E23964BF3180F52480A533CFE5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:36:d5:03:0d:83:02:76:d7:cb:e0:3d:c3:33:
                    47:60:f4:66:0f:9c:7a:e2:1c:30:d7:93:98:94:2a:
                    91:95:5f:ba:34:94:56:8e:28:c4:ed:6a:d0:5d:2f:
                    5f:14:79:88:9b:a5:be:18:4c:1f:ab:19:c3:71:ed:
                    92:d5:07:b8:bf:45:53:4c:18:9a:27:84:9a:02:7a:
                    1d:e5:f1:01:b4:9d:b9:72:8f:94:b7:f8:d2:30:bb:
                    0b:08:f0:c3:dc:c5:74:5e:88:36:bc:03:5d:6a:fe:
                    8a:65:d6:7c:73:e7:bf:d3:8a:2b:d9:9e:ae:c8:6f:
                    22:94:45:7a:4a:f3:b0:be:f7:8b:67:d8:31:25:d6:
                    a9:5a:89:a6:d6:fc:65:87:4b:cf:db:4e:4a:8f:0f:
                    78:01:ab:65:fb:26:61:2e:bc:de:38:99:71:e3:bc:
                    bb:88:55:00:62:0d:13:45:e1:9b:85:25:fa:89:b3:
                    69:4d:5d:98:4f:a6:9c:67:91:1f:e3:d8:54:e1:59:
                    75:2e:01:3c:e7:84:3e:7d:72:15:25:11:4f:ae:66:
                    6e:76:c6:78:83:df:c3:e8:08:fe:b7:70:ca:e4:29:
                    ec:ee:22:fb:7f:c6:fb:25:7f:33:6f:ea:93:54:78:
                    c9:6c:e5:78:25:64:1b:6b:64:9a:09:e5:c8:03:62:
                    f2:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:7C:E9:D5:7E:60:5E:23:96:4B:F3:18:0F:52:48:0A:53:3C:FE:5F
            X509v3 Authority Key Identifier:
                keyid:7C:60:29:5C:85:FF:37:E2:DC:F7:5A:F0:14:D4:4A:D3:BF:8C:33:A4

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/dHzp1X5gXiOWS_MYD1JIClM8_l8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.244.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         00:a4:42:30:4b:0d:f8:cf:18:d3:cd:62:b8:6e:83:5f:d4:5a:
         f8:c2:12:d2:61:12:21:45:85:56:d2:4a:55:eb:0c:ed:dc:24:
         ca:01:f7:3e:1a:e9:13:8c:b8:cb:28:34:dc:7d:6a:a7:da:2c:
         da:95:2e:0b:fb:3f:64:c4:c2:45:e0:1e:ae:0f:ef:0c:83:f6:
         df:d2:97:f4:96:69:a1:9b:04:09:a8:31:97:22:8f:83:1e:64:
         f8:4a:52:19:f0:3a:53:7e:40:bd:eb:3a:cb:a0:c3:f9:02:df:
         e3:59:82:d3:82:41:36:13:aa:dc:a5:81:fa:e5:27:8c:72:e8:
         17:1a:5a:b9:7b:8f:23:b7:b8:cd:cd:6f:90:14:f6:26:11:a3:
         80:e4:9b:e4:50:84:48:1b:79:01:e1:aa:55:44:d4:68:72:24:
         76:96:5e:26:ad:92:51:71:7a:2e:eb:c2:70:d7:70:59:ea:a3:
         d5:ed:fe:98:0b:75:8d:57:69:5d:40:3e:90:71:df:82:1b:a3:
         91:de:02:d0:e2:cd:bd:0b:41:2f:94:47:b0:05:5d:db:ee:e2:
         03:9d:68:d1:21:6c:54:7b:c6:7f:6c:d3:02:22:fd:03:a1:78:
         04:a5:91:71:32:4c:a5:57:0d:d1:e3:1a:ee:22:14:65:47:7f:
         3f:f8:7a:1e
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgICANAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoN0M2
MDI5NUM4NUZGMzdFMkRDRjc1QUYwMTRENDRBRDNCRjhDMzNBNDAeFw0yNTA1MDEw
MTI5MDhaFw0yNjA0MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDc0N0NFOUQ1N0U2MDVF
MjM5NjRCRjMxODBGNTI0ODBBNTMzQ0ZFNUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDjNtUDDYMCdtfL4D3DM0dg9GYPnHriHDDXk5iUKpGVX7o0lFaO
KMTtatBdL18UeYibpb4YTB+rGcNx7ZLVB7i/RVNMGJonhJoCeh3l8QG0nblyj5S3
+NIwuwsI8MPcxXReiDa8A11q/opl1nxz57/TiivZnq7IbyKURXpK87C+94tn2DEl
1qlaiabW/GWHS8/bTkqPD3gBq2X7JmEuvN44mXHjvLuIVQBiDRNF4ZuFJfqJs2lN
XZhPppxnkR/j2FThWXUuATznhD59chUlEU+uZm52xniD38PoCP63cMrkKezuIvt/
xvslfzNv6pNUeMls5XglZBtrZJoJ5cgDYvLxAgMBAAGjggIjMIICHzAdBgNVHQ4E
FgQUdHzp1X5gXiOWS/MYD1JIClM8/l8wHwYDVR0jBBgwFoAUfGApXIX/N+Lc91rw
FNRK07+MM6QwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzkzOS9mR0FwWElYX04tTGM5MXJ3Rk5SSzA3LU1NNlEuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9mR0FwWElYX04tTGM5MXJ3Rk5SSzA3
LU1NNlEuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvOTM5L2RIenAxWDVnWGlPV1NfTVlEMUpJQ2xNOF9sOC5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwB39DANBgkqhkiG9w0BAQsFAAOCAQEAAKRCMEsN+M8Y081iuG6DX9Ra+MIS
0mESIUWFVtJKVesM7dwkygH3PhrpE4y4yyg03H1qp9os2pUuC/s/ZMTCReAerg/v
DIP239KX9JZpoZsECagxlyKPgx5k+EpSGfA6U35Aves6y6DD+QLf41mC04JBNhOq
3KWB+uUnjHLoFxpauXuPI7e4zc1vkBT2JhGjgOSb5FCESBt5AeGqVUTUaHIkdpZe
Jq2SUXF6LuvCcNdwWeqj1e3+mAt1jVdpXUA+kHHfghujkd4C0OLNvQtBL5RHsAVd
2+7iA51o0SFsVHvGf2zTAiL9A6F4BKWRcTJMpVcN0eMa7iIUZUd/P/h6Hg==
-----END CERTIFICATE-----
Generated at Sun May 18 14:29:00 2025 by rpki-client