Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20159/q0yknwtLnYXRZaJHbuIIwWje6fA.roa
File:                     q0yknwtLnYXRZaJHbuIIwWje6fA.roa (raw, json)
Hash identifier:          s5cl18Pgbp1T/W8CcZSXNjDo46X77pj+6qzV44teZaw=
Subject key identifier:   AB:4C:A4:9F:0B:4B:9D:85:D1:65:A2:47:6E:E2:08:C1:68:DE:E9:F0
Certificate issuer:       /CN=BDB8B810AA8518F19E8EA1EE1539662736ACF0EB
Certificate serial:       2E
Authority key identifier: BD:B8:B8:10:AA:85:18:F1:9E:8E:A1:EE:15:39:66:27:36:AC:F0:EB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/vbi4EKqFGPGejqHuFTlmJzas8Os.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20159/q0yknwtLnYXRZaJHbuIIwWje6fA.roa
Signing time:             Fri 01 Aug 2025 01:31:07 +0000
ROA not before:           Fri 01 Aug 2025 01:31:07 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     131988
IP address blocks:        103.170.124.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20159/vbi4EKqFGPGejqHuFTlmJzas8Os.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20159/vbi4EKqFGPGejqHuFTlmJzas8Os.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/vbi4EKqFGPGejqHuFTlmJzas8Os.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 46 (0x2e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDB8B810AA8518F19E8EA1EE1539662736ACF0EB
        Validity
            Not Before: Aug  1 01:31:07 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=AB4CA49F0B4B9D85D165A2476EE208C168DEE9F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ae:c5:ad:3d:09:52:1c:a0:fe:64:4c:e1:86:
                    22:f2:1c:f6:d6:ef:06:aa:1a:f5:9a:3c:a5:96:22:
                    45:16:51:96:0d:a6:26:c0:45:1c:b2:e8:4b:73:f1:
                    68:4f:5b:ec:60:a1:0a:af:1e:1a:89:23:7d:96:c7:
                    02:9e:a8:6b:aa:af:c5:09:7c:d6:19:6c:fa:68:06:
                    cd:7a:44:e6:82:e0:71:b6:da:74:88:c4:ad:a3:97:
                    16:d0:09:e2:22:f4:da:58:7c:4c:55:c3:ee:b6:e6:
                    03:82:13:66:04:78:25:b4:d3:07:cb:3b:9c:d0:47:
                    08:b1:98:d6:9b:08:f5:cf:87:e0:9f:24:59:40:c2:
                    7e:c2:89:78:90:94:38:d5:51:e7:ea:52:49:95:6a:
                    5b:7e:2b:2e:3a:fb:e8:63:10:45:86:36:e4:e2:7d:
                    76:a4:7f:0d:78:73:56:f2:08:23:29:a7:68:b3:50:
                    a8:6c:91:86:0e:3a:3c:7d:12:9e:36:0b:3b:dc:ea:
                    00:19:58:25:28:5b:a4:6e:53:3f:11:02:27:6e:4c:
                    28:10:09:ab:ff:aa:44:d0:d2:91:54:a9:72:69:d4:
                    c0:74:50:bf:92:f3:da:4c:a5:23:46:89:ee:a8:18:
                    26:e0:b6:ba:7e:36:66:20:d6:fd:85:3f:8c:cd:9e:
                    2f:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:4C:A4:9F:0B:4B:9D:85:D1:65:A2:47:6E:E2:08:C1:68:DE:E9:F0
            X509v3 Authority Key Identifier:
                keyid:BD:B8:B8:10:AA:85:18:F1:9E:8E:A1:EE:15:39:66:27:36:AC:F0:EB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20159/vbi4EKqFGPGejqHuFTlmJzas8Os.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/vbi4EKqFGPGejqHuFTlmJzas8Os.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20159/q0yknwtLnYXRZaJHbuIIwWje6fA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.170.124.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0a:c1:40:df:32:bd:b3:60:fe:65:0b:2b:20:59:fb:4a:2c:69:
         3e:63:1b:2f:4a:cd:86:dc:be:dd:36:c0:4a:89:c2:b5:10:8b:
         77:60:f3:96:c5:23:f3:b9:b8:09:9f:b3:b0:e3:1f:cb:b2:d2:
         25:63:66:eb:73:49:a1:8a:27:99:c2:46:ad:dc:46:c6:e2:3e:
         63:4b:9e:11:48:0b:46:a6:50:1d:25:b1:1d:de:5e:2a:31:a0:
         55:f1:97:41:62:66:c4:85:4a:73:bf:7c:3d:42:a7:9e:63:9a:
         78:51:88:54:b0:c9:a8:d6:2f:f4:ae:63:e0:14:3e:a3:4d:37:
         e0:0b:34:77:a5:a8:3b:db:cb:02:f0:90:12:e8:d7:6b:a2:02:
         50:2a:2c:23:22:7e:f1:00:3b:89:01:f6:c6:b1:23:98:c7:fe:
         a7:19:ed:ed:d0:62:8e:2b:e5:4b:f1:16:3a:bf:e5:42:0d:cd:
         b8:3d:29:ee:5a:28:2e:91:da:c3:d8:e3:91:76:67:99:29:71:
         62:4d:88:e5:b7:a5:9d:60:2a:26:c2:0f:75:e5:31:39:7f:04:
         1a:42:8c:3b:1b:65:70:c2:0f:c1:a7:5c:74:ce:50:17:72:2b:
         92:6b:72:e6:9e:a0:fd:27:6d:68:df:20:b5:2b:8a:52:1b:a7:
         a3:b1:cc:de
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIBLjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhCREI4
QjgxMEFBODUxOEYxOUU4RUExRUUxNTM5NjYyNzM2QUNGMEVCMB4XDTI1MDgwMTAx
MzEwN1oXDTI2MDczMDA2MjkwOFowMzExMC8GA1UEAxMoQUI0Q0E0OUYwQjRCOUQ4
NUQxNjVBMjQ3NkVFMjA4QzE2OERFRTlGMDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMKuxa09CVIcoP5kTOGGIvIc9tbvBqoa9Zo8pZYiRRZRlg2mJsBF
HLLoS3PxaE9b7GChCq8eGokjfZbHAp6oa6qvxQl81hls+mgGzXpE5oLgcbbadIjE
raOXFtAJ4iL02lh8TFXD7rbmA4ITZgR4JbTTB8s7nNBHCLGY1psI9c+H4J8kWUDC
fsKJeJCUONVR5+pSSZVqW34rLjr76GMQRYY25OJ9dqR/DXhzVvIIIymnaLNQqGyR
hg46PH0SnjYLO9zqABlYJShbpG5TPxECJ25MKBAJq/+qRNDSkVSpcmnUwHRQv5Lz
2kylI0aJ7qgYJuC2un42ZiDW/YU/jM2eL1sCAwEAAaOCAigwggIkMB0GA1UdDgQW
BBSrTKSfC0udhdFlokdu4gjBaN7p8DAfBgNVHSMEGDAWgBS9uLgQqoUY8Z6Ooe4V
OWYnNqzw6zAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAxNTkvdmJpNEVLcUZHUEdlanFIdUZUbG1KemFzOE9zLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdmJpNEVLcUZHUEdlanFIdUZUbG1K
emFzOE9zLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzIwMTU5L3EweWtud3RMbllYUlphSkhidUlJd1dqZTZmQS5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAFnqnwwDQYJKoZIhvcNAQELBQADggEBAArBQN8yvbNg/mULKyBZ+0os
aT5jGy9KzYbcvt02wEqJwrUQi3dg85bFI/O5uAmfs7DjH8uy0iVjZutzSaGKJ5nC
Rq3cRsbiPmNLnhFIC0amUB0lsR3eXioxoFXxl0FiZsSFSnO/fD1Cp55jmnhRiFSw
yajWL/SuY+AUPqNNN+ALNHelqDvbywLwkBLo12uiAlAqLCMifvEAO4kB9saxI5jH
/qcZ7e3QYo4r5UvxFjq/5UINzbg9Ke5aKC6R2sPY45F2Z5kpcWJNiOW3pZ1gKibC
D3XlMTl/BBpCjDsbZXDCD8GnXHTOUBdyK5JrcuaeoP0nbWjfILUrilIbp6OxzN4=
-----END CERTIFICATE-----
Generated at Mon Aug 11 13:11:28 2025 by rpki-client