Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1091/G0rI23tPyJclWKpcyZ2Dmzok3d4.roa
File:                     G0rI23tPyJclWKpcyZ2Dmzok3d4.roa (raw, json)
Hash identifier:          u5L9kP555TqlJ7i9uyK59zDmBFTgq6lrBq8igBAjMm0=
Subject key identifier:   1B:4A:C8:DB:7B:4F:C8:97:25:58:AA:5C:C9:9D:83:9B:3A:24:DD:DE
Certificate issuer:       /CN=8C86E32ECE9A3C850FEBEA69641F3544273D5371
Certificate serial:       16
Authority key identifier: 8C:86:E3:2E:CE:9A:3C:85:0F:EB:EA:69:64:1F:35:44:27:3D:53:71
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jIbjLs6aPIUP6-ppZB81RCc9U3E.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1091/G0rI23tPyJclWKpcyZ2Dmzok3d4.roa
Signing time:             Thu 31 Jul 2025 09:07:53 +0000
ROA not before:           Thu 31 Jul 2025 09:07:53 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     16509
IP address blocks:        138.101.0.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1091/jIbjLs6aPIUP6-ppZB81RCc9U3E.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1091/jIbjLs6aPIUP6-ppZB81RCc9U3E.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jIbjLs6aPIUP6-ppZB81RCc9U3E.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 22 (0x16)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C86E32ECE9A3C850FEBEA69641F3544273D5371
        Validity
            Not Before: Jul 31 09:07:53 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=1B4AC8DB7B4FC8972558AA5CC99D839B3A24DDDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:27:72:3c:4a:15:ea:ba:db:e7:7a:33:f5:bc:
                    24:71:f8:29:ce:03:75:4e:39:5b:01:8a:32:9d:92:
                    1d:8d:cb:b1:2f:e0:b7:44:21:2f:b7:e5:e7:53:9e:
                    4c:27:ba:0d:82:22:f6:72:09:0b:8d:3e:ca:9d:89:
                    de:2d:d3:70:f8:21:e7:af:3e:7c:ee:21:d8:e4:fe:
                    7f:d1:87:dc:ae:4e:44:b3:02:ab:d9:81:57:47:f2:
                    65:d5:90:47:b5:03:bc:13:f8:b3:3d:25:93:0a:5d:
                    99:bc:70:61:bd:6d:1f:65:06:ea:bd:d1:a5:0f:25:
                    20:a7:50:12:d6:07:56:2d:61:b2:03:3e:e5:e9:c5:
                    eb:c7:d8:aa:71:b4:78:ef:f3:33:02:60:0e:4d:16:
                    38:3a:21:4f:f2:a1:ff:b4:27:dd:3d:8a:bc:da:7c:
                    c6:3e:cd:3b:6b:14:43:21:2e:0b:06:ef:27:91:71:
                    10:6a:0b:25:02:a5:e9:ce:92:8b:d2:e4:75:79:e1:
                    52:b8:e5:b7:95:13:f8:2e:ad:90:95:ca:0b:a6:f9:
                    fb:df:20:57:6a:79:a1:dd:d7:ce:65:41:70:59:14:
                    62:eb:af:1d:9c:62:f3:d0:ab:52:72:53:bc:f6:e3:
                    cb:da:e5:76:66:b8:79:e0:f7:43:30:fc:cc:3f:48:
                    02:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:4A:C8:DB:7B:4F:C8:97:25:58:AA:5C:C9:9D:83:9B:3A:24:DD:DE
            X509v3 Authority Key Identifier:
                keyid:8C:86:E3:2E:CE:9A:3C:85:0F:EB:EA:69:64:1F:35:44:27:3D:53:71

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1091/jIbjLs6aPIUP6-ppZB81RCc9U3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jIbjLs6aPIUP6-ppZB81RCc9U3E.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1091/G0rI23tPyJclWKpcyZ2Dmzok3d4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.101.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5c:03:24:23:83:ec:03:02:2e:19:96:23:64:a8:65:e3:7b:56:
         17:f2:12:99:e3:b4:95:b9:a5:3a:77:2e:e4:b8:20:b5:40:bc:
         f7:42:8b:c6:c6:40:c5:20:b9:19:ca:d1:a1:07:d4:20:10:69:
         9a:a5:9e:a5:c7:3f:77:09:a0:be:d5:d3:72:01:4a:d6:ab:21:
         bc:6c:89:84:42:ed:c9:f3:56:0e:8b:7c:2b:be:29:db:cc:99:
         f5:59:eb:90:0c:ee:26:71:86:6c:da:da:79:de:c5:f2:2e:1a:
         d2:31:85:7e:61:ea:16:5a:c0:04:0c:52:a7:67:4d:58:a5:3c:
         90:46:4d:91:5d:be:3d:11:ca:31:8e:77:56:0e:55:38:8f:a7:
         19:eb:a6:43:f9:28:bc:6b:fd:bd:36:56:3b:e2:49:49:7e:9f:
         3c:1a:33:b9:c4:4a:5c:3f:d4:f6:da:97:7e:50:07:b7:4d:3d:
         d6:a0:20:83:92:19:c2:b6:eb:16:b8:b9:3d:38:c5:0e:c1:6c:
         8e:62:0d:67:85:6d:53:04:1c:bb:4b:8e:34:9a:84:9b:b0:42:
         52:8f:48:a2:70:ba:8f:cb:27:ec:0f:cd:87:ca:33:6c:45:f0:
         f4:34:5e:b8:dd:96:bc:c3:58:14:db:8b:a0:d9:a6:bf:55:db:
         53:8b:e5:d8
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgIBFjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4Qzg2
RTMyRUNFOUEzQzg1MEZFQkVBNjk2NDFGMzU0NDI3M0Q1MzcxMB4XDTI1MDczMTA5
MDc1M1oXDTI2MDczMDA2MjkwOFowMzExMC8GA1UEAxMoMUI0QUM4REI3QjRGQzg5
NzI1NThBQTVDQzk5RDgzOUIzQTI0RERERTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAK8ncjxKFeq62+d6M/W8JHH4Kc4DdU45WwGKMp2SHY3LsS/gt0Qh
L7fl51OeTCe6DYIi9nIJC40+yp2J3i3TcPgh568+fO4h2OT+f9GH3K5ORLMCq9mB
V0fyZdWQR7UDvBP4sz0lkwpdmbxwYb1tH2UG6r3RpQ8lIKdQEtYHVi1hsgM+5enF
68fYqnG0eO/zMwJgDk0WODohT/Kh/7Qn3T2KvNp8xj7NO2sUQyEuCwbvJ5FxEGoL
JQKl6c6Si9LkdXnhUrjlt5UT+C6tkJXKC6b5+98gV2p5od3XzmVBcFkUYuuvHZxi
89CrUnJTvPbjy9rldma4eeD3QzD8zD9IAgMCAwEAAaOCAiYwggIiMB0GA1UdDgQW
BBQbSsjbe0/IlyVYqlzJnYObOiTd3jAfBgNVHSMEGDAWgBSMhuMuzpo8hQ/r6mlk
HzVEJz1TcTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa
oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMTA5MS9qSWJqTHM2YVBJVVA2LXBwWkI4MVJDYzlVM0UuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9qSWJqTHM2YVBJVVA2LXBwWkI4MVJD
YzlVM0UuY2VyMA4GA1UdDwEB/wQEAwIHgDCBvAYIKwYBBQUHAQsEga8wgawwYgYI
KwYBBQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTA5MS9HMHJJMjN0UHlKY2xXS3BjeVoyRG16b2szZDQucm9h
MEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAv
cnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA
ATAGAwQCimUAMA0GCSqGSIb3DQEBCwUAA4IBAQBcAyQjg+wDAi4ZliNkqGXje1YX
8hKZ47SVuaU6dy7kuCC1QLz3QovGxkDFILkZytGhB9QgEGmapZ6lxz93CaC+1dNy
AUrWqyG8bImEQu3J81YOi3wrvinbzJn1WeuQDO4mcYZs2tp53sXyLhrSMYV+YeoW
WsAEDFKnZ01YpTyQRk2RXb49EcoxjndWDlU4j6cZ66ZD+Si8a/29NlY74klJfp88
GjO5xEpcP9T22pd+UAe3TT3WoCCDkhnCtusWuLk9OMUOwWyOYg1nhW1TBBy7S440
moSbsEJSj0iicLqPyyfsD82HyjNsRfD0NF643Za8w1gU24ug2aa/VdtTi+XY
-----END CERTIFICATE-----
Generated at Sat Aug 9 10:42:56 2025 by rpki-client