Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20042/6gRM3zZltqc0O-trdPtmt0kicaA.roa
File:                     6gRM3zZltqc0O-trdPtmt0kicaA.roa (raw, json)
Hash identifier:          aBSlh6qu3GD+NRHiQ4fGQ8rsS50ndTQ0zJx7xeNtfQs=
Subject key identifier:   EA:04:4C:DF:36:65:B6:A7:34:3B:EB:6B:74:FB:66:B7:49:22:71:A0
Certificate issuer:       /CN=961BC18512722AAF9A90D898ADEA9AF7793C2543
Certificate serial:       94
Authority key identifier: 96:1B:C1:85:12:72:2A:AF:9A:90:D8:98:AD:EA:9A:F7:79:3C:25:43
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/6gRM3zZltqc0O-trdPtmt0kicaA.roa
Signing time:             Fri 01 Aug 2025 01:30:01 +0000
ROA not before:           Fri 01 Aug 2025 01:30:01 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     15830
IP address blocks:        219.122.0.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 148 (0x94)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=961BC18512722AAF9A90D898ADEA9AF7793C2543
        Validity
            Not Before: Aug  1 01:30:01 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=EA044CDF3665B6A7343BEB6B74FB66B7492271A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:f4:53:c8:86:e5:60:61:6e:29:05:7c:7c:91:
                    38:76:c8:67:2f:1c:f0:d5:ea:66:0c:69:d2:31:14:
                    89:23:40:f4:d2:32:b2:dd:83:2c:2e:59:ef:9f:3b:
                    53:b6:33:f0:49:cf:04:be:19:b2:39:a1:6e:7a:64:
                    fa:f3:d9:f7:08:75:f5:96:0d:6c:a7:be:57:84:59:
                    0a:56:cf:da:05:59:85:0c:4e:3b:03:67:ba:b4:5f:
                    79:ad:69:05:b4:63:14:07:13:f5:93:f3:8c:4e:af:
                    72:dd:06:ca:b2:f4:e1:3a:55:fd:65:0c:3d:63:f1:
                    99:58:54:d1:40:3d:53:60:9e:df:0e:58:28:9f:bf:
                    05:c6:80:e7:4e:21:bc:84:9b:44:cd:ae:2d:7f:31:
                    76:f1:53:fb:24:a3:50:92:3c:2d:c8:8f:4b:e5:a0:
                    32:e0:d3:3a:c0:ea:10:dc:d5:15:3c:15:a7:98:e4:
                    08:2b:9d:ef:99:d7:96:af:13:f1:e8:d7:9e:96:38:
                    33:0c:97:22:c4:fc:9c:c2:ee:d6:19:86:70:c2:78:
                    02:1c:27:56:17:80:78:0b:74:5d:e4:5b:3d:39:e7:
                    c9:0f:35:6b:44:df:de:da:34:97:2c:90:06:86:68:
                    c9:a0:3e:79:30:4b:2e:8d:2c:5c:01:80:f8:b7:ef:
                    2c:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:04:4C:DF:36:65:B6:A7:34:3B:EB:6B:74:FB:66:B7:49:22:71:A0
            X509v3 Authority Key Identifier:
                keyid:96:1B:C1:85:12:72:2A:AF:9A:90:D8:98:AD:EA:9A:F7:79:3C:25:43

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/6gRM3zZltqc0O-trdPtmt0kicaA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.122.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         79:76:4f:0c:54:fa:da:60:6b:12:9a:36:55:7c:f1:c6:89:eb:
         f1:d7:fb:de:f9:34:3d:02:be:e9:3f:2c:a5:fd:06:b2:e9:3b:
         16:5b:39:01:e7:b8:a0:31:3b:22:52:16:06:80:1a:80:4c:99:
         1a:56:61:7e:98:45:14:47:51:ff:9b:d4:9b:b1:6e:67:06:24:
         88:5a:0e:d2:0d:16:03:bb:73:52:e0:d5:04:e4:ec:2b:90:80:
         c5:42:45:d6:17:db:d6:87:a2:d3:61:25:21:cd:17:a2:2a:fc:
         d5:c7:ee:de:5a:db:9c:ea:42:65:9e:f1:c9:a4:0b:34:8d:d1:
         e0:5a:69:41:b2:bb:e2:2f:f5:07:b2:09:b0:7d:18:78:e5:0b:
         49:4d:f9:f1:9c:92:7d:ef:c4:c0:c8:41:4b:ae:b6:35:b0:20:
         61:e4:dc:b6:d9:7a:0e:45:27:42:12:ec:13:98:17:64:25:b4:
         70:a5:45:6c:17:c8:33:da:71:08:7d:cc:e2:58:ad:5d:d7:8b:
         84:e8:3e:d1:c5:07:ed:cb:46:ba:33:25:89:f3:97:cc:a0:06:
         ee:45:3e:99:16:8f:d3:e0:e0:24:12:f6:ae:b0:50:f9:d6:55:
         c0:a9:20:7f:c3:a4:c4:6d:0e:ce:8b:3a:47:85:8c:dc:58:81:
         09:8f:fa:09
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgICAJQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTYx
QkMxODUxMjcyMkFBRjlBOTBEODk4QURFQTlBRjc3OTNDMjU0MzAeFw0yNTA4MDEw
MTMwMDFaFw0yNjA3MzAwNjI5MDhaMDMxMTAvBgNVBAMTKEVBMDQ0Q0RGMzY2NUI2
QTczNDNCRUI2Qjc0RkI2NkI3NDkyMjcxQTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDL9FPIhuVgYW4pBXx8kTh2yGcvHPDV6mYMadIxFIkjQPTSMrLd
gywuWe+fO1O2M/BJzwS+GbI5oW56ZPrz2fcIdfWWDWynvleEWQpWz9oFWYUMTjsD
Z7q0X3mtaQW0YxQHE/WT84xOr3LdBsqy9OE6Vf1lDD1j8ZlYVNFAPVNgnt8OWCif
vwXGgOdOIbyEm0TNri1/MXbxU/sko1CSPC3Ij0vloDLg0zrA6hDc1RU8FaeY5Agr
ne+Z15avE/Ho156WODMMlyLE/JzC7tYZhnDCeAIcJ1YXgHgLdF3kWz0558kPNWtE
397aNJcskAaGaMmgPnkwSy6NLFwBgPi37ywdAgMBAAGjggIoMIICJDAdBgNVHQ4E
FgQU6gRM3zZltqc0O+trdPtmt0kicaAwHwYDVR0jBBgwFoAUlhvBhRJyKq+akNiY
reqa93k8JUMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzIwMDQyL2xodkJoUkp5S3EtYWtOaVlyZXFhOTNrOEpVTS5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2xodkJoUkp5S3EtYWtOaVlyZXFh
OTNrOEpVTS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8yMDA0Mi82Z1JNM3pabHRxYzBPLXRyZFB0bXQwa2ljYUEu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQE23oAMA0GCSqGSIb3DQEBCwUAA4IBAQB5dk8MVPraYGsSmjZVfPHG
ievx1/ve+TQ9Ar7pPyyl/Qay6TsWWzkB57igMTsiUhYGgBqATJkaVmF+mEUUR1H/
m9SbsW5nBiSIWg7SDRYDu3NS4NUE5OwrkIDFQkXWF9vWh6LTYSUhzReiKvzVx+7e
Wtuc6kJlnvHJpAs0jdHgWmlBsrviL/UHsgmwfRh45QtJTfnxnJJ978TAyEFLrrY1
sCBh5Ny22XoORSdCEuwTmBdkJbRwpUVsF8gz2nEIfcziWK1d14uE6D7RxQfty0a6
MyWJ85fMoAbuRT6ZFo/T4OAkEvausFD51lXAqSB/w6TEbQ7OizpHhYzcWIEJj/oJ
-----END CERTIFICATE-----
Generated at Mon Aug 11 04:48:31 2025 by rpki-client