Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20042/hcObqLZLO9c32KfiFmQImDC2k8M.roa
File:                     hcObqLZLO9c32KfiFmQImDC2k8M.roa (raw, json)
Hash identifier:          +fH8UaNbBQB7H13041Eo009AFhx1Xyvia0TEmaeVPjE=
Subject key identifier:   85:C3:9B:A8:B6:4B:3B:D7:37:D8:A7:E2:16:64:08:98:30:B6:93:C3
Certificate issuer:       /CN=961BC18512722AAF9A90D898ADEA9AF7793C2543
Certificate serial:       91
Authority key identifier: 96:1B:C1:85:12:72:2A:AF:9A:90:D8:98:AD:EA:9A:F7:79:3C:25:43
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/hcObqLZLO9c32KfiFmQImDC2k8M.roa
Signing time:             Fri 01 Aug 2025 01:29:59 +0000
ROA not before:           Fri 01 Aug 2025 01:29:59 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     15830
IP address blocks:        202.53.16.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 145 (0x91)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=961BC18512722AAF9A90D898ADEA9AF7793C2543
        Validity
            Not Before: Aug  1 01:29:59 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=85C39BA8B64B3BD737D8A7E21664089830B693C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ca:39:9d:4f:90:5a:32:49:5a:26:e2:5b:54:
                    b3:61:36:e4:ee:a4:18:08:38:20:0c:6a:91:15:48:
                    f9:02:1c:dc:df:6a:39:1e:82:b5:e4:e8:d0:e8:70:
                    79:4b:da:85:2c:e6:06:aa:4e:14:0a:eb:8a:18:90:
                    ba:b8:00:e5:6c:28:10:bc:b8:35:08:4e:df:65:21:
                    c1:cf:99:25:0e:ac:cd:e0:8b:01:b4:bc:b4:5b:22:
                    11:88:6e:0e:3f:6f:c3:ea:e3:f0:fa:d5:17:5b:af:
                    88:b9:4a:33:f8:d3:fa:67:52:e4:05:85:84:2c:f0:
                    ca:01:c5:dd:95:3d:1f:78:bf:ad:47:eb:de:d5:32:
                    df:ca:93:8f:0b:7e:24:c6:e2:3e:81:7a:a0:d9:ff:
                    66:b8:6f:eb:a8:c4:39:28:e2:1d:6c:61:b4:bc:cf:
                    8e:a4:a4:5b:2f:04:7f:b3:06:2b:1d:52:1d:d0:a5:
                    df:ed:1d:0c:b7:8d:25:a7:fa:1d:26:88:b2:51:f7:
                    30:1e:d6:32:ec:03:2e:1a:12:e5:44:6d:87:2f:1f:
                    da:a3:97:2b:28:c1:8f:a6:76:6d:a5:f8:17:9e:45:
                    fa:83:42:25:47:76:96:52:73:8d:eb:1f:16:ca:6a:
                    8f:57:77:24:c6:f8:40:48:a3:d9:a2:52:ca:b1:e7:
                    59:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:C3:9B:A8:B6:4B:3B:D7:37:D8:A7:E2:16:64:08:98:30:B6:93:C3
            X509v3 Authority Key Identifier:
                keyid:96:1B:C1:85:12:72:2A:AF:9A:90:D8:98:AD:EA:9A:F7:79:3C:25:43

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/hcObqLZLO9c32KfiFmQImDC2k8M.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.53.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         57:be:68:33:a2:54:ec:86:d0:1a:c4:a2:e9:c9:a2:4f:0a:8e:
         23:64:85:c7:4c:53:89:c2:20:8f:7e:64:96:fd:9a:ab:a7:5e:
         68:1a:5e:11:cd:20:04:47:9c:02:6d:a5:3b:25:3f:ab:08:e0:
         11:82:d4:4a:89:b5:ea:95:4e:1e:fb:2d:7d:ba:3d:40:63:e4:
         d9:df:50:48:62:9c:96:ef:34:97:b8:00:a3:47:c1:e2:fb:ec:
         18:42:23:1a:93:e8:53:cf:6b:78:db:91:02:67:70:30:1b:4d:
         70:25:37:ab:12:24:52:5c:6d:35:4c:b2:3a:8f:25:e7:ec:bb:
         38:60:02:b0:7e:37:fd:de:a6:16:2f:6e:6a:f6:ca:4e:11:e1:
         f6:14:a2:b0:c0:92:3b:04:e9:8d:df:87:aa:d8:41:30:eb:fd:
         57:6c:29:74:84:d9:71:7b:8e:da:62:1f:c0:bb:cf:49:b3:17:
         74:f1:40:f8:81:1e:4d:46:6d:81:cb:21:f6:0a:bf:ef:e4:cb:
         01:03:c8:77:a3:b3:da:bf:6b:7b:8c:1f:ae:63:de:d3:f3:70:
         3a:a0:97:5b:99:4f:f0:25:ba:fc:4f:14:9f:fe:fe:9b:56:20:
         d4:18:3d:df:28:33:51:d5:d8:e5:a7:4d:a8:08:bf:7e:e3:94:
         06:8a:de:c3
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgICAJEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTYx
QkMxODUxMjcyMkFBRjlBOTBEODk4QURFQTlBRjc3OTNDMjU0MzAeFw0yNTA4MDEw
MTI5NTlaFw0yNjA3MzAwNjI5MDhaMDMxMTAvBgNVBAMTKDg1QzM5QkE4QjY0QjNC
RDczN0Q4QTdFMjE2NjQwODk4MzBCNjkzQzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC6yjmdT5BaMklaJuJbVLNhNuTupBgIOCAMapEVSPkCHNzfajke
grXk6NDocHlL2oUs5gaqThQK64oYkLq4AOVsKBC8uDUITt9lIcHPmSUOrM3giwG0
vLRbIhGIbg4/b8Pq4/D61Rdbr4i5SjP40/pnUuQFhYQs8MoBxd2VPR94v61H697V
Mt/Kk48LfiTG4j6BeqDZ/2a4b+uoxDko4h1sYbS8z46kpFsvBH+zBisdUh3Qpd/t
HQy3jSWn+h0miLJR9zAe1jLsAy4aEuVEbYcvH9qjlysowY+mdm2l+BeeRfqDQiVH
dpZSc43rHxbKao9XdyTG+EBIo9miUsqx51nxAgMBAAGjggIoMIICJDAdBgNVHQ4E
FgQUhcObqLZLO9c32KfiFmQImDC2k8MwHwYDVR0jBBgwFoAUlhvBhRJyKq+akNiY
reqa93k8JUMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzIwMDQyL2xodkJoUkp5S3EtYWtOaVlyZXFhOTNrOEpVTS5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2xodkJoUkp5S3EtYWtOaVlyZXFh
OTNrOEpVTS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8yMDA0Mi9oY09icUxaTE85YzMyS2ZpRm1RSW1EQzJrOE0u
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQEyjUQMA0GCSqGSIb3DQEBCwUAA4IBAQBXvmgzolTshtAaxKLpyaJP
Co4jZIXHTFOJwiCPfmSW/Zqrp15oGl4RzSAER5wCbaU7JT+rCOARgtRKibXqlU4e
+y19uj1AY+TZ31BIYpyW7zSXuACjR8Hi++wYQiMak+hTz2t425ECZ3AwG01wJTer
EiRSXG01TLI6jyXn7Ls4YAKwfjf93qYWL25q9spOEeH2FKKwwJI7BOmN34eq2EEw
6/1XbCl0hNlxe47aYh/Au89Jsxd08UD4gR5NRm2ByyH2Cr/v5MsBA8h3o7Pav2t7
jB+uY97T83A6oJdbmU/wJbr8TxSf/v6bViDUGD3fKDNR1djlp02oCL9+45QGit7D
-----END CERTIFICATE-----
Generated at Sun Aug 10 05:49:53 2025 by rpki-client