Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/939/xy_YsYjeVIWQQfZjt03mMTpsiPg.roa
File:                     xy_YsYjeVIWQQfZjt03mMTpsiPg.roa (raw, json)
Hash identifier:          aUuSbMFg2+9tpfbkghleA3Td0mR5nt2DG+EKx29obHE=
Subject key identifier:   C7:2F:D8:B1:88:DE:54:85:90:41:F6:63:B7:4D:E6:31:3A:6C:88:F8
Certificate issuer:       /CN=7C60295C85FF37E2DCF75AF014D44AD3BF8C33A4
Certificate serial:       D1
Authority key identifier: 7C:60:29:5C:85:FF:37:E2:DC:F7:5A:F0:14:D4:4A:D3:BF:8C:33:A4
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/xy_YsYjeVIWQQfZjt03mMTpsiPg.roa
Signing time:             Thu 01 May 2025 01:29:08 +0000
ROA not before:           Thu 01 May 2025 01:29:08 +0000
ROA not after:            Wed 15 Apr 2026 01:30:03 +0000
asID:                     2518
IP address blocks:        210.147.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 May 2025 15:52:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 209 (0xd1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C60295C85FF37E2DCF75AF014D44AD3BF8C33A4
        Validity
            Not Before: May  1 01:29:08 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=C72FD8B188DE54859041F663B74DE6313A6C88F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c7:15:01:cb:8c:db:76:84:fc:6d:53:82:21:
                    e0:68:fa:c5:72:4d:51:34:62:22:93:96:ba:4f:f3:
                    31:31:bc:0c:bc:4f:5e:43:32:d6:8c:ca:09:66:0c:
                    3d:42:98:34:c7:b1:94:eb:d8:67:89:b2:5b:c1:2d:
                    a4:be:67:4d:c7:cd:99:e6:79:97:bb:37:57:1e:c7:
                    cb:7a:6c:90:13:e7:64:58:d1:d2:d1:ce:23:19:0e:
                    0c:6c:da:60:63:aa:fa:23:c8:63:be:65:38:57:5b:
                    87:7f:ce:52:e3:b3:79:60:9a:7d:b2:f8:3d:e7:14:
                    0c:79:e2:ec:55:77:44:49:3b:de:88:f2:76:22:13:
                    29:fc:cf:b2:9c:e2:7d:14:05:ab:b5:77:02:71:02:
                    90:fc:ae:c9:79:2f:79:da:4f:db:bd:d2:f1:3a:51:
                    b8:44:64:f0:05:bd:05:bc:6a:2d:84:a2:e9:b2:2b:
                    09:77:40:69:05:16:ec:44:41:ab:ef:b5:a3:08:57:
                    77:f9:cd:ce:21:e8:49:a9:80:c8:fd:7a:dd:c3:88:
                    11:f8:7d:79:b1:a2:79:a7:01:d4:9c:94:f4:21:57:
                    62:f4:0e:75:05:88:a2:a2:0f:5b:cc:5f:8a:9c:23:
                    42:44:5b:66:8e:ed:40:a2:ba:a8:e1:ee:cf:2a:85:
                    d4:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:2F:D8:B1:88:DE:54:85:90:41:F6:63:B7:4D:E6:31:3A:6C:88:F8
            X509v3 Authority Key Identifier:
                keyid:7C:60:29:5C:85:FF:37:E2:DC:F7:5A:F0:14:D4:4A:D3:BF:8C:33:A4

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/xy_YsYjeVIWQQfZjt03mMTpsiPg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.147.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         5a:64:50:ae:92:d8:70:29:8d:1a:98:8a:be:f8:98:13:89:57:
         d3:ee:19:68:c6:96:69:06:eb:87:23:b2:1b:9e:d7:eb:29:e8:
         f6:86:7d:92:70:ce:ef:95:8b:b1:95:6f:94:75:81:38:88:4a:
         bf:da:82:0c:4f:13:d2:fb:81:2b:16:92:bf:79:17:43:aa:af:
         ae:0e:0b:b7:df:c8:00:bc:24:51:a4:dc:4e:7b:e0:76:20:b0:
         20:7d:cb:dc:60:0c:6e:1e:23:e9:47:40:83:0a:cc:a6:6f:08:
         37:c0:fa:97:9b:16:07:1a:45:56:46:34:bc:d9:bc:e5:8e:2c:
         ff:23:ed:cf:57:94:a4:d3:fe:13:af:85:bc:ec:f6:13:16:22:
         ba:08:87:6e:b3:9a:a2:d6:7c:d9:76:10:5b:60:47:5a:b4:2b:
         36:49:b9:73:1e:14:99:e2:ee:56:23:1b:af:bc:07:28:88:7f:
         e5:f9:b4:a9:2c:aa:43:d2:70:36:75:96:dc:e6:8c:05:d3:be:
         f4:94:d3:4a:25:33:b6:35:09:08:3e:1d:79:bd:b5:75:f2:88:
         62:41:23:fb:e6:54:9e:8e:d0:37:b1:2a:9b:85:55:fe:8f:07:
         df:88:31:de:83:5d:44:bf:bb:d5:56:eb:c9:2e:c3:db:f5:57:
         28:e1:a3:a5
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgICANEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoN0M2
MDI5NUM4NUZGMzdFMkRDRjc1QUYwMTRENDRBRDNCRjhDMzNBNDAeFw0yNTA1MDEw
MTI5MDhaFw0yNjA0MTUwMTMwMDNaMDMxMTAvBgNVBAMTKEM3MkZEOEIxODhERTU0
ODU5MDQxRjY2M0I3NERFNjMxM0E2Qzg4RjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQClxxUBy4zbdoT8bVOCIeBo+sVyTVE0YiKTlrpP8zExvAy8T15D
MtaMyglmDD1CmDTHsZTr2GeJslvBLaS+Z03HzZnmeZe7N1cex8t6bJAT52RY0dLR
ziMZDgxs2mBjqvojyGO+ZThXW4d/zlLjs3lgmn2y+D3nFAx54uxVd0RJO96I8nYi
Eyn8z7Kc4n0UBau1dwJxApD8rsl5L3naT9u90vE6UbhEZPAFvQW8ai2EoumyKwl3
QGkFFuxEQavvtaMIV3f5zc4h6EmpgMj9et3DiBH4fXmxonmnAdSclPQhV2L0DnUF
iKKiD1vMX4qcI0JEW2aO7UCiuqjh7s8qhdQzAgMBAAGjggIjMIICHzAdBgNVHQ4E
FgQUxy/YsYjeVIWQQfZjt03mMTpsiPgwHwYDVR0jBBgwFoAUfGApXIX/N+Lc91rw
FNRK07+MM6QwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzkzOS9mR0FwWElYX04tTGM5MXJ3Rk5SSzA3LU1NNlEuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9mR0FwWElYX04tTGM5MXJ3Rk5SSzA3
LU1NNlEuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvOTM5L3h5X1lzWWplVklXUVFmWmp0MDNtTVRwc2lQZy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwDSkzANBgkqhkiG9w0BAQsFAAOCAQEAWmRQrpLYcCmNGpiKvviYE4lX0+4Z
aMaWaQbrhyOyG57X6yno9oZ9knDO75WLsZVvlHWBOIhKv9qCDE8T0vuBKxaSv3kX
Q6qvrg4Lt9/IALwkUaTcTnvgdiCwIH3L3GAMbh4j6UdAgwrMpm8IN8D6l5sWBxpF
VkY0vNm85Y4s/yPtz1eUpNP+E6+FvOz2ExYiugiHbrOaotZ82XYQW2BHWrQrNkm5
cx4UmeLuViMbr7wHKIh/5fm0qSyqQ9JwNnWW3OaMBdO+9JTTSiUztjUJCD4deb21
dfKIYkEj++ZUno7QN7Eqm4VV/o8H34gx3oNdRL+71VbryS7D2/VXKOGjpQ==
-----END CERTIFICATE-----
Generated at Sun May 18 19:34:41 2025 by rpki-client