Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/454/AoB-fD6EXoFV8IJLqA-lkxbaVyU.roa
File:                     AoB-fD6EXoFV8IJLqA-lkxbaVyU.roa (raw, json)
Hash identifier:          nFhNzeC3riYqXxDTlr4VOWOGbXhA2ZXFzEX0CCoaAl0=
Subject key identifier:   02:80:7E:7C:3E:84:5E:81:55:F0:82:4B:A8:0F:A5:93:16:DA:57:25
Certificate issuer:       /CN=AD4741F0349FBC15A708E28A2CE307906CAC5DE0
Certificate serial:       6B
Authority key identifier: AD:47:41:F0:34:9F:BC:15:A7:08:E2:8A:2C:E3:07:90:6C:AC:5D:E0
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/AoB-fD6EXoFV8IJLqA-lkxbaVyU.roa
Signing time:             Fri 01 Aug 2025 01:30:52 +0000
ROA not before:           Fri 01 Aug 2025 01:30:52 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     10000
IP address blocks:        114.134.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 107 (0x6b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD4741F0349FBC15A708E28A2CE307906CAC5DE0
        Validity
            Not Before: Aug  1 01:30:52 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=02807E7C3E845E8155F0824BA80FA59316DA5725
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:fd:70:33:9b:01:3e:c3:76:38:ca:72:33:22:
                    5b:66:84:78:1c:d3:a7:85:8a:57:37:16:42:a1:d9:
                    e3:80:83:db:94:99:10:39:c8:cd:5a:31:23:29:f7:
                    6a:96:89:62:88:0a:e8:30:99:f9:b2:b4:ab:ca:22:
                    3a:15:1b:7b:34:18:58:48:a3:1d:5f:98:34:38:a3:
                    38:16:ec:80:04:3c:63:07:79:94:19:c1:c4:8f:6f:
                    fa:07:9f:a9:30:0c:41:21:45:77:2f:09:37:8c:b0:
                    de:e4:5e:50:3d:03:8b:e0:16:83:dd:d1:69:cc:fa:
                    65:9e:10:a3:cc:f7:bc:b4:61:b3:99:41:3c:c0:61:
                    66:ba:a1:82:9c:33:54:4c:36:fb:51:61:05:d8:82:
                    56:bc:6b:f4:36:ea:ce:67:ab:82:2d:b9:ad:57:20:
                    74:63:b3:41:78:a2:e4:93:c5:67:53:bd:d8:9f:c7:
                    b4:19:e7:3d:97:21:3e:53:87:db:1f:69:a7:3e:62:
                    b6:8b:2f:f8:32:b2:0e:5b:59:fe:48:e9:d3:02:9f:
                    a5:7a:e3:62:7d:8b:84:e1:e1:e3:7a:eb:9d:65:36:
                    68:52:1f:21:d4:67:68:02:9e:18:5d:87:57:cf:44:
                    37:d7:e9:de:95:4e:f5:ba:29:f4:d2:7d:d5:47:b7:
                    88:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:80:7E:7C:3E:84:5E:81:55:F0:82:4B:A8:0F:A5:93:16:DA:57:25
            X509v3 Authority Key Identifier:
                keyid:AD:47:41:F0:34:9F:BC:15:A7:08:E2:8A:2C:E3:07:90:6C:AC:5D:E0

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/AoB-fD6EXoFV8IJLqA-lkxbaVyU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.134.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         12:08:71:ce:26:a9:ab:f5:05:22:28:da:f6:98:cd:82:35:63:
         60:c1:aa:0b:08:fc:e2:11:dd:da:49:4e:a7:63:68:9c:00:d9:
         ba:1f:81:5c:38:ea:f7:0f:bb:c9:22:b0:97:9b:22:70:8a:df:
         00:88:f9:7e:6e:af:6f:5a:2b:e6:43:df:b7:13:6c:06:aa:cd:
         1d:b3:cb:62:53:70:67:e8:e6:ec:3d:40:11:bc:21:07:4e:ce:
         b6:72:f2:19:ef:71:66:d5:6e:b1:22:a5:da:cd:2c:27:6a:6f:
         80:0f:7e:e2:cf:a4:d7:c4:cc:59:10:da:a1:0c:e8:d7:c8:29:
         0c:37:37:8a:47:24:2e:a8:8f:c2:e8:f6:a5:7c:59:90:29:cb:
         70:e2:ca:bd:ae:ed:28:7c:eb:fa:e3:68:65:ff:39:8a:3c:8f:
         b7:f7:ea:ce:97:71:ae:48:d1:49:30:b7:ed:db:ab:90:d3:a9:
         e9:c4:0b:15:9c:30:5f:0c:68:00:77:7b:bf:fb:0c:98:dc:8d:
         1f:dc:32:c0:2e:bc:42:1b:c4:12:40:6c:60:75:ad:43:73:38:
         04:a2:cd:44:80:2d:ff:97:40:d4:ba:7c:b0:e1:6c:93:6d:2f:
         74:9c:33:2a:01:09:6a:a8:93:d6:03:ff:d1:6f:10:1a:9f:3c:
         fd:ce:e2:a2
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBazANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhBRDQ3
NDFGMDM0OUZCQzE1QTcwOEUyOEEyQ0UzMDc5MDZDQUM1REUwMB4XDTI1MDgwMTAx
MzA1MloXDTI2MDczMDA2MjkwOFowMzExMC8GA1UEAxMoMDI4MDdFN0MzRTg0NUU4
MTU1RjA4MjRCQTgwRkE1OTMxNkRBNTcyNTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALP9cDObAT7DdjjKcjMiW2aEeBzTp4WKVzcWQqHZ44CD25SZEDnI
zVoxIyn3apaJYogK6DCZ+bK0q8oiOhUbezQYWEijHV+YNDijOBbsgAQ8Ywd5lBnB
xI9v+gefqTAMQSFFdy8JN4yw3uReUD0Di+AWg93Racz6ZZ4Qo8z3vLRhs5lBPMBh
ZrqhgpwzVEw2+1FhBdiCVrxr9Dbqzmergi25rVcgdGOzQXii5JPFZ1O92J/HtBnn
PZchPlOH2x9ppz5itosv+DKyDltZ/kjp0wKfpXrjYn2LhOHh43rrnWU2aFIfIdRn
aAKeGF2HV89EN9fp3pVO9bop9NJ91Ue3iKECAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBQCgH58PoRegVXwgkuoD6WTFtpXJTAfBgNVHSMEGDAWgBStR0HwNJ+8FacI4oos
4weQbKxd4DAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNDU0L3JVZEI4RFNmdkJXbkNPS0tMT01Ia0d5c1hlQS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3JVZEI4RFNmdkJXbkNPS0tMT01Ia0d5
c1hlQS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC80NTQvQW9CLWZENkVYb0ZWOElKTHFBLWxreGJhVnlVLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBXKGgDANBgkqhkiG9w0BAQsFAAOCAQEAEghxziapq/UFIija9pjNgjVjYMGq
Cwj84hHd2klOp2NonADZuh+BXDjq9w+7ySKwl5sicIrfAIj5fm6vb1or5kPftxNs
BqrNHbPLYlNwZ+jm7D1AEbwhB07OtnLyGe9xZtVusSKl2s0sJ2pvgA9+4s+k18TM
WRDaoQzo18gpDDc3ikckLqiPwuj2pXxZkCnLcOLKva7tKHzr+uNoZf85ijyPt/fq
zpdxrkjRSTC37durkNOp6cQLFZwwXwxoAHd7v/sMmNyNH9wywC68QhvEEkBsYHWt
Q3M4BKLNRIAt/5dA1Lp8sOFsk20vdJwzKgEJaqiT1gP/0W8QGp88/c7iog==
-----END CERTIFICATE-----
Generated at Mon Aug 11 10:44:27 2025 by rpki-client