Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/21042/b0mWRhEVj7dihBDzN0Im4Rl_iDs.roa
File:                     b0mWRhEVj7dihBDzN0Im4Rl_iDs.roa (raw, json)
Hash identifier:          wV2TIXsRYb+XIgz0f4JZ+o3FrrK2jIfLkhOx+9V4zEw=
Subject key identifier:   6F:49:96:46:11:15:8F:B7:62:84:10:F3:37:42:26:E1:19:7F:88:3B
Certificate issuer:       /CN=4F3E6396C9D76CBDF4ED2D5DE7A2A760214C9837
Certificate serial:       61
Authority key identifier: 4F:3E:63:96:C9:D7:6C:BD:F4:ED:2D:5D:E7:A2:A7:60:21:4C:98:37
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tz5jlsnXbL307S1d56KnYCFMmDc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21042/b0mWRhEVj7dihBDzN0Im4Rl_iDs.roa
Signing time:             Fri 01 Aug 2025 01:34:33 +0000
ROA not before:           Fri 01 Aug 2025 01:34:33 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     15830
IP address blocks:        14.102.192.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21042/Tz5jlsnXbL307S1d56KnYCFMmDc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21042/Tz5jlsnXbL307S1d56KnYCFMmDc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tz5jlsnXbL307S1d56KnYCFMmDc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 97 (0x61)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F3E6396C9D76CBDF4ED2D5DE7A2A760214C9837
        Validity
            Not Before: Aug  1 01:34:33 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=6F49964611158FB7628410F3374226E1197F883B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:67:5d:11:08:d0:5a:8c:29:bf:3a:06:36:02:
                    fd:86:a4:44:47:46:d6:97:74:c4:15:17:0c:01:cf:
                    9f:b1:71:d9:df:63:df:f5:39:e6:62:56:49:09:df:
                    27:54:36:1b:d7:14:a3:a5:82:ae:e4:49:f6:ce:a2:
                    70:3b:0b:f3:ff:75:8f:7b:60:50:11:db:8a:90:15:
                    37:ff:0d:7a:93:3e:36:42:91:2e:cd:bc:40:ba:d3:
                    b6:11:81:aa:21:54:fd:24:13:6a:81:ca:71:a9:3a:
                    ec:4b:17:bb:b2:28:cd:c6:5d:c1:9f:61:54:66:a1:
                    62:23:fc:13:e8:62:a6:cf:78:74:c2:04:b4:e6:ec:
                    43:95:b1:3c:2a:e5:9a:3a:12:7a:e1:b1:c0:69:72:
                    ab:71:12:b8:e0:3e:27:c0:2d:63:da:e3:78:ed:77:
                    88:22:07:94:93:5f:2a:c7:70:29:f5:63:f5:c9:d6:
                    9c:64:9c:21:41:6c:e9:5e:b3:21:3d:47:08:f9:28:
                    2e:b5:6b:02:73:b9:3f:22:54:5e:08:c1:ec:36:3d:
                    04:0d:23:4f:41:c7:88:68:a9:5b:6e:d7:03:91:01:
                    a0:e3:38:4f:6e:75:95:af:be:a2:c7:0a:44:86:09:
                    fc:2d:51:6f:84:6e:de:db:8a:38:f3:33:29:af:de:
                    5e:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:49:96:46:11:15:8F:B7:62:84:10:F3:37:42:26:E1:19:7F:88:3B
            X509v3 Authority Key Identifier:
                keyid:4F:3E:63:96:C9:D7:6C:BD:F4:ED:2D:5D:E7:A2:A7:60:21:4C:98:37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21042/Tz5jlsnXbL307S1d56KnYCFMmDc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tz5jlsnXbL307S1d56KnYCFMmDc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21042/b0mWRhEVj7dihBDzN0Im4Rl_iDs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  14.102.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         9c:0a:a8:ae:08:a4:76:e0:1a:53:b4:5d:2c:5f:4e:31:d9:18:
         ca:d4:c7:d5:35:34:3b:ed:10:08:84:92:1e:4b:3b:fe:03:8e:
         43:cc:88:4a:be:f0:c0:5a:92:50:e8:47:8f:0d:dc:14:92:c7:
         96:b5:1b:54:9d:72:e5:6a:28:0c:d1:80:3c:4a:d8:3a:12:1b:
         a3:18:4d:2d:c9:e9:e6:ec:7b:ba:82:67:79:2d:4f:30:89:be:
         bc:ab:8c:bf:52:a6:fa:8e:e6:7d:09:14:6c:a3:99:f2:26:18:
         72:ee:ac:11:3f:bc:cc:41:45:88:95:cc:30:5d:c1:88:f6:4c:
         23:3b:f5:29:3e:62:da:f9:fc:37:70:32:e0:ad:00:be:5a:13:
         08:f2:10:16:56:4d:4a:86:7e:b3:03:6c:cc:8b:be:fa:61:48:
         51:2e:7c:b8:bc:26:23:21:54:2a:98:d4:5d:9a:f3:3f:b5:f2:
         9b:2e:11:2b:e7:c9:ba:08:ae:dd:ca:99:00:e0:17:6e:7d:5c:
         0f:38:42:7e:2c:aa:42:ab:6d:92:94:0c:fc:85:6d:ec:a9:10:
         6c:5d:6c:d2:c6:ea:a3:6a:5d:4a:35:b9:f0:4f:cd:ed:e7:95:
         83:17:37:d8:90:42:56:49:e5:aa:e7:52:59:07:ae:03:df:e8:
         3d:12:49:85
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIBYTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0RjNF
NjM5NkM5RDc2Q0JERjRFRDJENURFN0EyQTc2MDIxNEM5ODM3MB4XDTI1MDgwMTAx
MzQzM1oXDTI2MDczMDA2MjkwOFowMzExMC8GA1UEAxMoNkY0OTk2NDYxMTE1OEZC
NzYyODQxMEYzMzc0MjI2RTExOTdGODgzQjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALZnXREI0FqMKb86BjYC/YakREdG1pd0xBUXDAHPn7Fx2d9j3/U5
5mJWSQnfJ1Q2G9cUo6WCruRJ9s6icDsL8/91j3tgUBHbipAVN/8NepM+NkKRLs28
QLrTthGBqiFU/SQTaoHKcak67EsXu7IozcZdwZ9hVGahYiP8E+hips94dMIEtObs
Q5WxPCrlmjoSeuGxwGlyq3ESuOA+J8AtY9rjeO13iCIHlJNfKsdwKfVj9cnWnGSc
IUFs6V6zIT1HCPkoLrVrAnO5PyJUXgjB7DY9BA0jT0HHiGipW27XA5EBoOM4T251
la++oscKRIYJ/C1Rb4Ru3tuKOPMzKa/eXsUCAwEAAaOCAigwggIkMB0GA1UdDgQW
BBRvSZZGERWPt2KEEPM3QibhGX+IOzAfBgNVHSMEGDAWgBRPPmOWyddsvfTtLV3n
oqdgIUyYNzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjEwNDIvVHo1amxzblhiTDMwN1MxZDU2S25ZQ0ZNbURjLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvVHo1amxzblhiTDMwN1MxZDU2S25Z
Q0ZNbURjLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzIxMDQyL2IwbVdSaEVWajdkaWhCRHpOMEltNFJsX2lEcy5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAUOZsAwDQYJKoZIhvcNAQELBQADggEBAJwKqK4IpHbgGlO0XSxfTjHZ
GMrUx9U1NDvtEAiEkh5LO/4DjkPMiEq+8MBaklDoR48N3BSSx5a1G1SdcuVqKAzR
gDxK2DoSG6MYTS3J6ebse7qCZ3ktTzCJvryrjL9SpvqO5n0JFGyjmfImGHLurBE/
vMxBRYiVzDBdwYj2TCM79Sk+Ytr5/DdwMuCtAL5aEwjyEBZWTUqGfrMDbMyLvvph
SFEufLi8JiMhVCqY1F2a8z+18psuESvnyboIrt3KmQDgF259XA84Qn4sqkKrbZKU
DPyFbeypEGxdbNLG6qNqXUo1ufBPze3nlYMXN9iQQlZJ5arnUlkHrgPf6D0SSYU=
-----END CERTIFICATE-----
Generated at Mon Aug 11 10:34:31 2025 by rpki-client