Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20042/wcQX41105GX6DmOLczCVYhTzx3g.roa
File:                     wcQX41105GX6DmOLczCVYhTzx3g.roa (raw, json)
Hash identifier:          ykjc5YWMyt8w0l9hegCdxqBLOK777khogq25fKG/Y2o=
Subject key identifier:   C1:C4:17:E3:5D:74:E4:65:FA:0E:63:8B:73:30:95:62:14:F3:C7:78
Certificate issuer:       /CN=961BC18512722AAF9A90D898ADEA9AF7793C2543
Certificate serial:       85
Authority key identifier: 96:1B:C1:85:12:72:2A:AF:9A:90:D8:98:AD:EA:9A:F7:79:3C:25:43
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/wcQX41105GX6DmOLczCVYhTzx3g.roa
Signing time:             Fri 01 Aug 2025 01:29:52 +0000
ROA not before:           Fri 01 Aug 2025 01:29:52 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     15830
IP address blocks:        115.69.192.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 133 (0x85)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=961BC18512722AAF9A90D898ADEA9AF7793C2543
        Validity
            Not Before: Aug  1 01:29:52 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=C1C417E35D74E465FA0E638B7330956214F3C778
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:34:1e:19:fe:af:79:16:34:7a:a3:4f:56:db:
                    50:74:9b:52:59:48:02:e7:62:09:a9:46:dc:08:1d:
                    f4:51:81:82:0e:fd:e7:79:9f:4a:7c:93:9d:b7:c7:
                    0d:5c:21:6e:a5:26:ab:cc:5a:09:5b:16:ca:a5:d4:
                    4f:c0:27:c2:be:9e:5a:67:cb:92:e0:24:6a:40:a8:
                    35:d2:6d:32:35:4e:60:ba:14:03:c1:95:19:82:7a:
                    8c:c9:0e:21:8a:26:18:a7:6f:9d:e0:1b:97:3b:ec:
                    8e:5e:8f:7f:e3:9e:6b:17:08:a5:fd:2c:60:c9:24:
                    65:45:75:d3:74:64:74:6c:19:02:74:15:df:80:a2:
                    3a:99:d1:78:39:73:98:88:59:89:e4:a2:58:13:1e:
                    c1:35:06:00:0d:3f:1e:3a:4b:f6:28:78:76:0c:c8:
                    47:57:f4:ed:b3:75:57:c6:fb:0a:87:81:c1:f7:77:
                    35:81:df:d4:7b:66:73:f4:b8:fb:18:ab:5c:09:f9:
                    5f:ec:1b:e1:13:12:70:36:51:fb:35:d5:1c:4c:2f:
                    20:aa:1c:6e:39:a4:36:bd:8d:c9:2c:66:de:f4:04:
                    c6:53:b3:0c:b4:0e:33:9c:ae:8e:c2:83:a9:43:4f:
                    6a:1a:90:5d:a8:73:d9:89:b3:7a:69:67:f2:fb:b8:
                    a2:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:C4:17:E3:5D:74:E4:65:FA:0E:63:8B:73:30:95:62:14:F3:C7:78
            X509v3 Authority Key Identifier:
                keyid:96:1B:C1:85:12:72:2A:AF:9A:90:D8:98:AD:EA:9A:F7:79:3C:25:43

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/wcQX41105GX6DmOLczCVYhTzx3g.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.69.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         68:f8:48:23:3f:b5:c1:e8:df:ec:a7:bb:34:fa:cd:32:db:fd:
         61:b7:bb:b3:b7:17:7f:40:3c:5e:d7:42:5b:79:33:eb:b8:df:
         ae:37:48:2b:e3:54:a0:61:99:e1:5a:f1:15:f2:15:ed:d3:15:
         c9:00:f7:4d:c2:ef:07:ea:22:ea:41:3e:52:d9:47:d7:24:a0:
         f9:9f:31:d5:4a:27:33:36:8f:45:99:ee:57:d0:e0:cc:04:fe:
         68:f8:35:a4:e8:da:f0:c1:19:d3:43:cf:ef:f5:fa:12:f3:c7:
         ee:22:e5:ad:77:c9:96:b2:d1:d6:4d:9f:47:ed:5a:39:af:5c:
         c9:65:fd:3a:46:c8:f2:1f:52:f6:71:62:4e:d6:6e:41:6a:be:
         4e:d0:ff:83:51:78:89:ac:37:91:64:5b:62:a8:50:6c:a1:90:
         4e:66:73:d0:70:4d:cd:e5:b3:07:3b:98:74:84:82:7b:5f:1d:
         57:14:37:ba:34:0f:c8:79:52:4b:86:e9:74:d9:e2:cd:a7:65:
         c8:1d:a7:68:fb:01:1f:98:9e:09:56:16:ff:f3:50:4a:17:f7:
         93:f3:a2:ce:b6:23:f8:93:24:9c:e5:db:f1:fd:6a:3b:1c:01:
         3c:f6:97:9e:9e:76:32:18:11:4e:a5:89:63:3f:ad:d5:ee:a4:
         45:1f:a6:74
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgICAIUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTYx
QkMxODUxMjcyMkFBRjlBOTBEODk4QURFQTlBRjc3OTNDMjU0MzAeFw0yNTA4MDEw
MTI5NTJaFw0yNjA3MzAwNjI5MDhaMDMxMTAvBgNVBAMTKEMxQzQxN0UzNUQ3NEU0
NjVGQTBFNjM4QjczMzA5NTYyMTRGM0M3NzgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCsNB4Z/q95FjR6o09W21B0m1JZSALnYgmpRtwIHfRRgYIO/ed5
n0p8k523xw1cIW6lJqvMWglbFsql1E/AJ8K+nlpny5LgJGpAqDXSbTI1TmC6FAPB
lRmCeozJDiGKJhinb53gG5c77I5ej3/jnmsXCKX9LGDJJGVFddN0ZHRsGQJ0Fd+A
ojqZ0Xg5c5iIWYnkolgTHsE1BgANPx46S/YoeHYMyEdX9O2zdVfG+wqHgcH3dzWB
39R7ZnP0uPsYq1wJ+V/sG+ETEnA2Ufs11RxMLyCqHG45pDa9jcksZt70BMZTswy0
DjOcro7Cg6lDT2oakF2oc9mJs3ppZ/L7uKIfAgMBAAGjggIoMIICJDAdBgNVHQ4E
FgQUwcQX41105GX6DmOLczCVYhTzx3gwHwYDVR0jBBgwFoAUlhvBhRJyKq+akNiY
reqa93k8JUMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzIwMDQyL2xodkJoUkp5S3EtYWtOaVlyZXFhOTNrOEpVTS5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2xodkJoUkp5S3EtYWtOaVlyZXFh
OTNrOEpVTS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8yMDA0Mi93Y1FYNDExMDVHWDZEbU9MY3pDVlloVHp4M2cu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQEc0XAMA0GCSqGSIb3DQEBCwUAA4IBAQBo+EgjP7XB6N/sp7s0+s0y
2/1ht7uztxd/QDxe10JbeTPruN+uN0gr41SgYZnhWvEV8hXt0xXJAPdNwu8H6iLq
QT5S2UfXJKD5nzHVSiczNo9Fme5X0ODMBP5o+DWk6NrwwRnTQ8/v9foS88fuIuWt
d8mWstHWTZ9H7Vo5r1zJZf06RsjyH1L2cWJO1m5Bar5O0P+DUXiJrDeRZFtiqFBs
oZBOZnPQcE3N5bMHO5h0hIJ7Xx1XFDe6NA/IeVJLhul02eLNp2XIHado+wEfmJ4J
Vhb/81BKF/eT86LOtiP4kySc5dvx/Wo7HAE89peennYyGBFOpYljP63V7qRFH6Z0
-----END CERTIFICATE-----
Generated at Mon Aug 11 07:41:32 2025 by rpki-client