Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/984/gBDVMi-trqxbRd1q-M_iIaJfBKI.roa
File:                     gBDVMi-trqxbRd1q-M_iIaJfBKI.roa (raw, json)
Hash identifier:          Xyz5GsGUAlqhODROe16nBcvmkSRgcjKA76ob2ZN+MYQ=
Subject key identifier:   80:10:D5:32:2F:AD:AE:AC:5B:45:DD:6A:F8:CF:E2:21:A2:5F:04:A2
Certificate issuer:       /CN=37D74CF78B0031D2AA5C9AED388E7C0438C61692
Certificate serial:       37
Authority key identifier: 37:D7:4C:F7:8B:00:31:D2:AA:5C:9A:ED:38:8E:7C:04:38:C6:16:92
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/N9dM94sAMdKqXJrtOI58BDjGFpI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/984/gBDVMi-trqxbRd1q-M_iIaJfBKI.roa
Signing time:             Tue 01 Jul 2025 01:33:29 +0000
ROA not before:           Tue 01 Jul 2025 01:33:29 +0000
ROA not after:            Mon 15 Jun 2026 01:30:02 +0000
asID:                     45677
IP address blocks:        180.148.184.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/984/N9dM94sAMdKqXJrtOI58BDjGFpI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/984/N9dM94sAMdKqXJrtOI58BDjGFpI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/N9dM94sAMdKqXJrtOI58BDjGFpI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 55 (0x37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37D74CF78B0031D2AA5C9AED388E7C0438C61692
        Validity
            Not Before: Jul  1 01:33:29 2025 GMT
            Not After : Jun 15 01:30:02 2026 GMT
        Subject: CN=8010D5322FADAEAC5B45DD6AF8CFE221A25F04A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:4b:4f:2e:73:47:df:ff:b9:77:28:0a:c3:31:
                    90:e5:48:84:3c:e5:fe:f1:fe:f1:7a:aa:03:fa:ab:
                    20:4a:2d:b1:a8:fa:37:4e:1d:52:00:79:60:44:d8:
                    f9:e7:51:46:6d:57:ef:55:de:9a:86:0f:3a:d4:09:
                    46:88:ec:a1:5f:82:37:d7:3d:3f:64:b2:1c:91:8a:
                    39:57:52:34:eb:a8:49:b7:3e:cc:2a:63:98:9d:7d:
                    bc:7b:a0:b3:fb:0f:b4:42:67:ff:13:cf:10:94:59:
                    11:a7:31:0c:73:34:ea:64:12:8a:62:29:42:e7:bf:
                    8b:fc:08:0d:a1:bf:29:e5:3e:76:8a:17:88:c8:8a:
                    2c:6c:45:8e:90:1d:df:97:fe:30:41:2c:08:69:f0:
                    ee:61:59:b1:fe:a1:ff:52:5e:8b:f2:9b:1d:8c:48:
                    32:19:28:64:72:f1:ff:3a:08:0b:0c:8b:9c:6c:50:
                    c1:3c:2b:53:49:e2:d4:63:da:a0:41:2f:11:c5:35:
                    e7:98:11:b0:f4:a6:03:5d:3f:ee:b7:dc:63:0c:3f:
                    a3:7e:20:77:39:9c:7d:1c:5f:5e:ea:f4:91:cc:02:
                    4a:b4:9e:56:92:98:ae:b3:c0:d9:49:9b:dc:df:27:
                    ec:70:c9:a5:5e:53:ef:f9:ee:60:34:35:fc:be:d4:
                    af:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:10:D5:32:2F:AD:AE:AC:5B:45:DD:6A:F8:CF:E2:21:A2:5F:04:A2
            X509v3 Authority Key Identifier:
                keyid:37:D7:4C:F7:8B:00:31:D2:AA:5C:9A:ED:38:8E:7C:04:38:C6:16:92

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/984/N9dM94sAMdKqXJrtOI58BDjGFpI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/N9dM94sAMdKqXJrtOI58BDjGFpI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/984/gBDVMi-trqxbRd1q-M_iIaJfBKI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.148.184.0/21

    Signature Algorithm: sha256WithRSAEncryption
         09:49:4a:0e:fd:af:b6:de:88:c0:1d:97:29:cd:8d:df:d2:f1:
         fc:5c:a6:95:b6:cb:a6:ca:c8:08:eb:12:cb:14:76:79:4e:47:
         8f:59:77:a3:f6:9f:71:f2:73:f8:f6:70:8c:cc:70:c2:b0:c1:
         d2:f1:fa:29:7b:01:8f:7b:a1:32:2d:11:42:a9:55:fd:98:a3:
         06:be:ed:9d:12:f8:e9:f6:b5:ce:ee:59:6b:30:55:26:43:74:
         47:75:0a:69:4a:ea:14:96:aa:18:69:2b:18:de:f4:f1:d3:37:
         bb:6f:72:9c:7e:38:5e:e3:83:2a:fb:da:e0:40:5d:fc:f1:b2:
         41:a1:41:cc:ce:3c:61:0b:f2:00:3e:a9:6d:f4:5a:e7:41:5d:
         98:b2:a1:6a:7b:55:53:60:af:25:d1:d5:87:fe:38:c7:7d:89:
         f8:7e:53:49:5e:e6:57:31:30:85:7d:dd:8c:b7:19:85:8d:0d:
         03:4b:17:dd:ad:20:d0:2f:6a:e7:96:61:c4:e6:29:8d:c7:21:
         5a:0f:a3:4c:56:e4:59:c4:bf:39:39:8f:a1:6a:76:39:7d:e2:
         d2:6f:b7:15:e9:9e:0f:b8:d8:5f:d8:10:96:4a:34:d4:39:32:
         bd:b1:77:87:28:61:a2:3c:77:71:e6:86:df:b5:e4:ef:c1:a9:
         16:b3:3e:f9
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBNzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygzN0Q3
NENGNzhCMDAzMUQyQUE1QzlBRUQzODhFN0MwNDM4QzYxNjkyMB4XDTI1MDcwMTAx
MzMyOVoXDTI2MDYxNTAxMzAwMlowMzExMC8GA1UEAxMoODAxMEQ1MzIyRkFEQUVB
QzVCNDVERDZBRjhDRkUyMjFBMjVGMDRBMjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAOlLTy5zR9//uXcoCsMxkOVIhDzl/vH+8XqqA/qrIEotsaj6N04d
UgB5YETY+edRRm1X71XemoYPOtQJRojsoV+CN9c9P2SyHJGKOVdSNOuoSbc+zCpj
mJ19vHugs/sPtEJn/xPPEJRZEacxDHM06mQSimIpQue/i/wIDaG/KeU+dooXiMiK
LGxFjpAd35f+MEEsCGnw7mFZsf6h/1Jei/KbHYxIMhkoZHLx/zoICwyLnGxQwTwr
U0ni1GPaoEEvEcU155gRsPSmA10/7rfcYww/o34gdzmcfRxfXur0kcwCSrSeVpKY
rrPA2Umb3N8n7HDJpV5T7/nuYDQ1/L7UrycCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBSAENUyL62urFtF3Wr4z+Ihol8EojAfBgNVHSMEGDAWgBQ310z3iwAx0qpcmu04
jnwEOMYWkjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvOTg0L045ZE05NHNBTWRLcVhKcnRPSTU4QkRqR0ZwSS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL045ZE05NHNBTWRLcVhKcnRPSTU4QkRq
R0ZwSS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC85ODQvZ0JEVk1pLXRycXhiUmQxcS1NX2lJYUpmQktJLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEA7SUuDANBgkqhkiG9w0BAQsFAAOCAQEACUlKDv2vtt6IwB2XKc2N39Lx/Fym
lbbLpsrICOsSyxR2eU5Hj1l3o/afcfJz+PZwjMxwwrDB0vH6KXsBj3uhMi0RQqlV
/ZijBr7tnRL46fa1zu5ZazBVJkN0R3UKaUrqFJaqGGkrGN708dM3u29ynH44XuOD
Kvva4EBd/PGyQaFBzM48YQvyAD6pbfRa50FdmLKhantVU2CvJdHVh/44x32J+H5T
SV7mVzEwhX3djLcZhY0NA0sX3a0g0C9q55ZhxOYpjcchWg+jTFbkWcS/OTmPoWp2
OX3i0m+3FemeD7jYX9gQlko01DkyvbF3hyhhojx3ceaG37Xk78GpFrM++Q==
-----END CERTIFICATE-----
Generated at Sat Jul 5 06:03:03 2025 by rpki-client