Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/2005/sAt0YC8daPcW5_kE7ZIwFhfR6hE.roa
File:                     sAt0YC8daPcW5_kE7ZIwFhfR6hE.roa (raw, json)
Hash identifier:          JXPDMEfawTkpcZdatvNDluEpOIiqEoJdWnD+HczXWeA=
Subject key identifier:   B0:0B:74:60:2F:1D:68:F7:16:E7:F9:04:ED:92:30:16:17:D1:EA:11
Certificate issuer:       /CN=0DF81D1E559B0F1955274E1E362C50C70362F461
Certificate serial:       2F
Authority key identifier: 0D:F8:1D:1E:55:9B:0F:19:55:27:4E:1E:36:2C:50:C7:03:62:F4:61
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DfgdHlWbDxlVJ04eNixQxwNi9GE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2005/sAt0YC8daPcW5_kE7ZIwFhfR6hE.roa
Signing time:             Fri 01 Aug 2025 01:30:42 +0000
ROA not before:           Fri 01 Aug 2025 01:30:42 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     0
IP address blocks:        160.195.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2005/DfgdHlWbDxlVJ04eNixQxwNi9GE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2005/DfgdHlWbDxlVJ04eNixQxwNi9GE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DfgdHlWbDxlVJ04eNixQxwNi9GE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 47 (0x2f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DF81D1E559B0F1955274E1E362C50C70362F461
        Validity
            Not Before: Aug  1 01:30:42 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=B00B74602F1D68F716E7F904ED92301617D1EA11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:57:4d:bf:5c:dc:32:15:91:88:f2:a2:f8:66:
                    81:66:e3:6e:18:cd:aa:8b:1b:b7:02:d4:18:75:70:
                    50:d5:66:36:0a:b6:b1:13:cc:90:79:58:74:98:76:
                    7d:e3:29:d9:c0:ad:0a:7a:eb:d0:c0:7f:bd:7f:f2:
                    84:44:83:97:32:f9:99:42:8a:d7:a2:9c:d2:5f:24:
                    b0:61:da:5b:eb:6a:41:8e:dc:80:15:8a:f5:cd:e7:
                    e5:68:4d:bf:05:5d:65:e9:4c:73:28:48:28:6a:35:
                    4e:48:69:07:4e:75:a7:0c:d7:c7:89:b6:83:b7:03:
                    eb:99:73:2b:a8:a4:a0:d9:20:f5:f2:e6:e9:79:68:
                    21:d6:fa:e8:bb:ba:4c:df:86:12:ea:00:16:f0:78:
                    6f:89:42:f4:fd:0c:fe:02:96:ac:7e:7a:51:a6:0d:
                    90:1c:c0:29:88:3d:88:b4:ae:fb:ec:fc:f3:cb:08:
                    47:28:f7:c7:30:9b:7a:b2:5c:21:ea:3d:67:a2:0b:
                    23:a4:ea:f3:d5:8b:d1:2e:22:bc:d5:e0:fb:ab:a4:
                    dc:8a:fd:ca:78:0b:cb:f2:5c:01:df:99:32:47:b0:
                    f3:f0:db:96:74:3d:21:6f:ff:80:ee:9c:5d:b8:b1:
                    b5:a3:48:e1:32:59:75:e7:db:85:5c:2e:76:ec:3f:
                    6b:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:0B:74:60:2F:1D:68:F7:16:E7:F9:04:ED:92:30:16:17:D1:EA:11
            X509v3 Authority Key Identifier:
                keyid:0D:F8:1D:1E:55:9B:0F:19:55:27:4E:1E:36:2C:50:C7:03:62:F4:61

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2005/DfgdHlWbDxlVJ04eNixQxwNi9GE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DfgdHlWbDxlVJ04eNixQxwNi9GE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2005/sAt0YC8daPcW5_kE7ZIwFhfR6hE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.195.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         07:b3:8a:55:42:a9:3e:87:d9:3d:8f:bf:36:ed:53:ee:77:be:
         43:77:6c:9b:c2:ed:ad:a1:0f:5a:0e:39:b9:2d:98:e5:dc:45:
         12:ea:4f:56:cb:ff:ab:12:cd:cd:78:c7:a0:1e:c3:ba:e9:b4:
         23:0b:27:23:10:77:25:00:23:6b:8a:e4:ac:2c:a5:66:c5:d2:
         32:8c:7b:5c:79:c7:35:d3:6c:6b:27:56:7c:75:eb:8b:0c:e4:
         9d:f2:d2:22:93:ef:cd:1e:31:0b:f4:f3:0d:70:57:f7:d5:00:
         31:18:13:43:e9:f7:23:73:b4:78:f9:f9:46:dc:cd:a9:c9:15:
         73:19:37:54:22:3c:33:21:32:95:41:0c:e3:ae:5a:b6:8f:87:
         52:e4:d6:82:cc:13:3b:b0:cf:e8:e3:8e:82:4c:64:14:f0:9b:
         af:b2:af:07:06:16:86:06:e3:98:aa:0c:9a:fc:24:79:10:54:
         f9:97:31:bb:a5:6e:86:2d:44:27:10:aa:78:d0:0f:38:d7:db:
         0b:86:9b:44:e5:2c:b0:6b:0b:e0:74:88:d2:c4:4b:28:2d:ed:
         28:40:8e:dd:bf:f3:36:74:b3:12:35:07:8b:25:f6:d1:70:b2:
         79:30:c5:5e:e2:50:28:c4:3f:7a:eb:cf:b4:09:7d:d0:bb:d1:
         03:00:1c:5b
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgIBLzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygwREY4
MUQxRTU1OUIwRjE5NTUyNzRFMUUzNjJDNTBDNzAzNjJGNDYxMB4XDTI1MDgwMTAx
MzA0MloXDTI2MDczMDA2MjkwOFowMzExMC8GA1UEAxMoQjAwQjc0NjAyRjFENjhG
NzE2RTdGOTA0RUQ5MjMwMTYxN0QxRUExMTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANdXTb9c3DIVkYjyovhmgWbjbhjNqosbtwLUGHVwUNVmNgq2sRPM
kHlYdJh2feMp2cCtCnrr0MB/vX/yhESDlzL5mUKK16Kc0l8ksGHaW+tqQY7cgBWK
9c3n5WhNvwVdZelMcyhIKGo1TkhpB051pwzXx4m2g7cD65lzK6ikoNkg9fLm6Xlo
Idb66Lu6TN+GEuoAFvB4b4lC9P0M/gKWrH56UaYNkBzAKYg9iLSu++z888sIRyj3
xzCberJcIeo9Z6ILI6Tq89WL0S4ivNXg+6uk3Ir9yngLy/JcAd+ZMkew8/DblnQ9
IW//gO6cXbixtaNI4TJZdefbhVwuduw/a/UCAwEAAaOCAiUwggIhMB0GA1UdDgQW
BBSwC3RgLx1o9xbn+QTtkjAWF9HqETAfBgNVHSMEGDAWgBQN+B0eVZsPGVUnTh42
LFDHA2L0YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa
oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAwNS9EZmdkSGxXYkR4bFZKMDRlTml4UXh3Tmk5R0UuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EZmdkSGxXYkR4bFZKMDRlTml4UXh3
Tmk5R0UuY2VyMA4GA1UdDwEB/wQEAwIHgDCBvAYIKwYBBQUHAQsEga8wgawwYgYI
KwYBBQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMjAwNS9zQXQwWUM4ZGFQY1c1X2tFN1pJd0ZoZlI2aEUucm9h
MEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAv
cnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIA
ATAFAwMAoMMwDQYJKoZIhvcNAQELBQADggEBAAezilVCqT6H2T2PvzbtU+53vkN3
bJvC7a2hD1oOObktmOXcRRLqT1bL/6sSzc14x6Aew7rptCMLJyMQdyUAI2uK5Kws
pWbF0jKMe1x5xzXTbGsnVnx164sM5J3y0iKT780eMQv08w1wV/fVADEYE0Pp9yNz
tHj5+UbczanJFXMZN1QiPDMhMpVBDOOuWraPh1Lk1oLMEzuwz+jjjoJMZBTwm6+y
rwcGFoYG45iqDJr8JHkQVPmXMbulboYtRCcQqnjQDzjX2wuGm0TlLLBrC+B0iNLE
Sygt7ShAjt2/8zZ0sxI1B4sl9tFwsnkwxV7iUCjEP3rrz7QJfdC70QMAHFs=
-----END CERTIFICATE-----
Generated at Mon Aug 11 02:08:12 2025 by rpki-client