Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/21042/zrq3t3SWD3emvlRkWvQ079KrWFA.roa
File:                     zrq3t3SWD3emvlRkWvQ079KrWFA.roa (raw, json)
Hash identifier:          9UfgP6sRLwhN4gs73A9YBHdI/dgU2K5p3UR3jjvgQXY=
Subject key identifier:   CE:BA:B7:B7:74:96:0F:77:A6:BE:54:64:5A:F4:34:EF:D2:AB:58:50
Certificate issuer:       /CN=4F3E6396C9D76CBDF4ED2D5DE7A2A760214C9837
Certificate serial:       65
Authority key identifier: 4F:3E:63:96:C9:D7:6C:BD:F4:ED:2D:5D:E7:A2:A7:60:21:4C:98:37
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tz5jlsnXbL307S1d56KnYCFMmDc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21042/zrq3t3SWD3emvlRkWvQ079KrWFA.roa
Signing time:             Fri 01 Aug 2025 01:34:35 +0000
ROA not before:           Fri 01 Aug 2025 01:34:35 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     15830
IP address blocks:        180.214.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21042/Tz5jlsnXbL307S1d56KnYCFMmDc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21042/Tz5jlsnXbL307S1d56KnYCFMmDc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tz5jlsnXbL307S1d56KnYCFMmDc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101 (0x65)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F3E6396C9D76CBDF4ED2D5DE7A2A760214C9837
        Validity
            Not Before: Aug  1 01:34:35 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=CEBAB7B774960F77A6BE54645AF434EFD2AB5850
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:75:a7:08:7e:e9:53:e7:90:f2:a7:ef:a7:09:
                    61:d1:a3:0d:ac:90:90:94:bf:91:22:fd:c9:79:32:
                    b1:dd:32:e8:67:73:6d:ae:58:df:7e:29:d0:35:56:
                    99:4f:72:c3:ec:3f:b2:c7:55:1e:19:62:27:eb:01:
                    74:d2:d7:88:b3:eb:16:8a:7f:07:f2:97:a8:b6:cb:
                    bc:ef:b5:97:56:df:9c:c8:f3:cf:e7:f6:d4:81:5c:
                    30:9f:fc:c5:c8:08:8c:d6:e3:39:72:f6:5b:1f:3e:
                    e2:dc:90:ed:ac:42:e7:af:96:9c:73:ef:63:be:ce:
                    eb:f5:d2:9e:03:99:da:42:8d:54:00:ba:e1:b6:5f:
                    3e:6e:ec:d8:29:e0:25:eb:6e:87:d0:f9:b1:89:d9:
                    57:85:71:64:ec:fa:71:da:20:7e:ab:96:bf:e6:02:
                    9b:1e:35:eb:bb:43:72:f3:6c:d9:f7:f1:e5:55:46:
                    3f:3e:b1:0f:ea:f5:f6:ea:59:93:bb:7f:65:78:c2:
                    fe:73:73:fd:1a:30:aa:b7:dd:30:21:34:f9:82:ba:
                    f8:b8:81:19:ab:ae:b4:47:bc:27:6d:97:7a:9a:5a:
                    49:95:5a:ff:00:b1:df:8f:63:07:ed:8b:62:e3:ea:
                    ce:95:cf:af:01:55:54:a8:89:3a:ba:15:ec:bf:b6:
                    76:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:BA:B7:B7:74:96:0F:77:A6:BE:54:64:5A:F4:34:EF:D2:AB:58:50
            X509v3 Authority Key Identifier:
                keyid:4F:3E:63:96:C9:D7:6C:BD:F4:ED:2D:5D:E7:A2:A7:60:21:4C:98:37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21042/Tz5jlsnXbL307S1d56KnYCFMmDc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tz5jlsnXbL307S1d56KnYCFMmDc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21042/zrq3t3SWD3emvlRkWvQ079KrWFA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.214.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         11:31:0b:6d:49:4e:b0:44:10:d7:ef:a6:b9:2f:b8:59:7b:2b:
         c8:50:2e:2e:8b:63:61:c6:b8:5d:25:24:e8:50:1e:bb:0a:97:
         94:fa:66:47:9d:19:22:11:09:c3:88:bb:d3:3d:9e:12:54:ad:
         ee:08:ae:86:46:5d:66:a4:c0:3d:3f:1f:6c:81:41:6b:a1:1b:
         90:87:e4:ce:d7:9c:cd:d8:b8:1f:67:e8:7a:83:30:c6:33:d0:
         2d:46:0a:71:b8:af:5e:d4:d4:25:fe:bb:9f:0b:83:09:aa:0c:
         8c:97:f8:86:99:4d:f2:2c:5c:86:16:12:0e:41:49:6e:58:6e:
         53:e3:4e:f7:da:29:27:e5:01:64:f7:c5:6f:81:cf:c6:bc:a1:
         10:92:99:58:32:b7:e5:9c:b1:03:70:ad:10:fd:30:6c:50:8d:
         29:66:74:4a:f6:21:80:42:65:d8:95:5a:6e:89:a3:c0:79:85:
         ec:ba:ba:c0:fa:91:e3:3d:33:0f:e7:00:5b:e4:bc:49:8e:fb:
         5e:50:c1:f5:b7:07:1e:44:c7:ef:3d:a0:ab:63:39:8f:2f:cc:
         e9:29:13:a8:61:97:7a:0b:87:af:a3:06:96:ef:41:bc:d0:73:
         3c:33:0f:1e:0d:be:bd:25:f2:7d:16:65:f3:47:b1:89:7f:3f:
         7e:7f:11:31
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIBZTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0RjNF
NjM5NkM5RDc2Q0JERjRFRDJENURFN0EyQTc2MDIxNEM5ODM3MB4XDTI1MDgwMTAx
MzQzNVoXDTI2MDczMDA2MjkwOFowMzExMC8GA1UEAxMoQ0VCQUI3Qjc3NDk2MEY3
N0E2QkU1NDY0NUFGNDM0RUZEMkFCNTg1MDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAK51pwh+6VPnkPKn76cJYdGjDayQkJS/kSL9yXkysd0y6Gdzba5Y
334p0DVWmU9yw+w/ssdVHhliJ+sBdNLXiLPrFop/B/KXqLbLvO+1l1bfnMjzz+f2
1IFcMJ/8xcgIjNbjOXL2Wx8+4tyQ7axC56+WnHPvY77O6/XSngOZ2kKNVAC64bZf
Pm7s2CngJetuh9D5sYnZV4VxZOz6cdogfquWv+YCmx4167tDcvNs2ffx5VVGPz6x
D+r19upZk7t/ZXjC/nNz/RowqrfdMCE0+YK6+LiBGauutEe8J22XeppaSZVa/wCx
349jB+2LYuPqzpXPrwFVVKiJOroV7L+2dmUCAwEAAaOCAigwggIkMB0GA1UdDgQW
BBTOure3dJYPd6a+VGRa9DTv0qtYUDAfBgNVHSMEGDAWgBRPPmOWyddsvfTtLV3n
oqdgIUyYNzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjEwNDIvVHo1amxzblhiTDMwN1MxZDU2S25ZQ0ZNbURjLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvVHo1amxzblhiTDMwN1MxZDU2S25Z
Q0ZNbURjLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzIxMDQyL3pycTN0M1NXRDNlbXZsUmtXdlEwNzlLcldGQS5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAa01gAwDQYJKoZIhvcNAQELBQADggEBABExC21JTrBEENfvprkvuFl7
K8hQLi6LY2HGuF0lJOhQHrsKl5T6ZkedGSIRCcOIu9M9nhJUre4IroZGXWakwD0/
H2yBQWuhG5CH5M7XnM3YuB9n6HqDMMYz0C1GCnG4r17U1CX+u58LgwmqDIyX+IaZ
TfIsXIYWEg5BSW5YblPjTvfaKSflAWT3xW+Bz8a8oRCSmVgyt+WcsQNwrRD9MGxQ
jSlmdEr2IYBCZdiVWm6Jo8B5hey6usD6keM9Mw/nAFvkvEmO+15QwfW3Bx5Ex+89
oKtjOY8vzOkpE6hhl3oLh6+jBpbvQbzQczwzDx4Nvr0l8n0WZfNHsYl/P35/ETE=
-----END CERTIFICATE-----
Generated at Mon Aug 11 04:43:22 2025 by rpki-client