Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/50/2n4KH6H083MNY7s45d8-8k-tTXQ.roa
File:                     2n4KH6H083MNY7s45d8-8k-tTXQ.roa (raw, json)
Hash identifier:          ubT+EDYbdlh8DVvhPISyEmfMlOV4DnJisZbi1PO7VQo=
Subject key identifier:   DA:7E:0A:1F:A1:F4:F3:73:0D:63:BB:38:E5:DF:3E:F2:4F:AD:4D:74
Certificate issuer:       /CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
Certificate serial:       AE
Authority key identifier: 1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/2n4KH6H083MNY7s45d8-8k-tTXQ.roa
Signing time:             Fri 01 Aug 2025 01:31:38 +0000
ROA not before:           Fri 01 Aug 2025 01:31:38 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     4685
IP address blocks:        218.219.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 174 (0xae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
        Validity
            Not Before: Aug  1 01:31:38 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=DA7E0A1FA1F4F3730D63BB38E5DF3EF24FAD4D74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:02:09:ef:10:8f:bb:52:e9:16:8b:17:a0:32:
                    19:09:36:1c:29:ed:25:b4:6d:3e:e4:ab:a4:3f:ef:
                    98:85:ea:40:18:10:a3:c7:ff:74:0c:6a:02:10:4f:
                    c6:62:75:2a:d3:2b:79:f5:57:cc:1c:bc:3c:63:1a:
                    38:b4:66:2e:d7:6e:54:67:40:93:de:26:bb:f7:1f:
                    c1:5a:85:af:3a:b5:48:c2:5f:64:8a:46:01:b2:a0:
                    40:ea:bf:80:f6:f7:64:98:9b:f1:27:c6:ce:c2:50:
                    ef:46:af:91:5f:e9:e0:b4:b6:35:ca:b7:3a:5a:2a:
                    2f:13:d0:fa:70:7b:01:63:aa:62:45:0c:65:01:44:
                    36:56:b6:b3:82:28:b6:4b:4a:fb:c5:02:db:8f:f2:
                    d2:a8:c2:9d:77:b6:fc:6d:ca:bf:43:9b:ca:db:6f:
                    79:d1:7a:da:43:52:83:1f:48:3b:90:97:78:d3:bb:
                    35:87:9c:f0:0f:cf:a3:1d:c0:3d:14:d1:f4:7a:5b:
                    31:80:22:37:b8:9c:27:43:62:1e:26:5e:05:2a:df:
                    e1:27:1c:21:f0:61:23:79:d9:31:67:5c:0f:89:fb:
                    9a:72:fd:57:48:68:87:ae:4a:d8:75:ea:8f:6f:e3:
                    a7:cb:92:bc:06:62:fb:a1:4d:96:d3:a1:c9:23:4e:
                    9e:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:7E:0A:1F:A1:F4:F3:73:0D:63:BB:38:E5:DF:3E:F2:4F:AD:4D:74
            X509v3 Authority Key Identifier:
                keyid:1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/2n4KH6H083MNY7s45d8-8k-tTXQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.219.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         d8:78:de:b0:b1:29:81:f6:af:f6:1d:52:38:77:04:ba:b4:18:
         75:2b:aa:00:d1:16:65:81:62:6f:45:03:7a:68:be:e5:b3:d9:
         99:a4:41:3f:5b:7f:f9:89:6b:cd:e4:45:32:22:e6:5f:0d:3f:
         5f:0b:43:1e:01:0a:2b:b7:50:d5:c9:0b:f4:6f:06:7f:bf:d3:
         0c:c2:54:4a:85:42:2d:da:77:bd:27:91:9b:3c:2c:14:f4:6f:
         fc:bd:d4:89:7f:8c:e9:cd:2a:73:fb:8d:26:c8:0d:b0:2e:95:
         af:01:28:40:4d:65:ac:85:86:00:8e:75:a4:ef:2b:eb:22:7d:
         06:ac:0d:fa:6d:4d:9e:33:0b:65:9d:b8:ef:b3:19:c7:1d:28:
         57:8f:76:c0:3d:a0:34:f2:18:8d:25:f6:eb:ac:68:b1:5c:df:
         f3:99:9f:54:86:00:23:a9:33:93:7e:d9:3f:b6:39:c4:6b:26:
         81:48:2b:f0:d4:21:c0:79:32:49:bb:77:48:b0:f6:7a:97:8c:
         0c:74:61:ac:92:ca:bd:33:a2:75:39:7e:db:6a:57:7f:ab:71:
         75:48:4f:8a:a1:a6:db:66:a1:1e:b3:1a:65:a4:b6:b4:be:ea:
         b0:15:0d:07:20:40:6a:9f:4f:42:ce:d5:77:98:8d:7c:8e:6c:
         7d:53:4f:7c
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgICAK4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMUJF
M0FCMEY4REIyNjVBQkIyMjg3RTc1MTUxRTdGNUE5M0IyQzczNjAeFw0yNTA4MDEw
MTMxMzhaFw0yNjA3MzAwNjI5MDhaMDMxMTAvBgNVBAMTKERBN0UwQTFGQTFGNEYz
NzMwRDYzQkIzOEU1REYzRUYyNEZBRDRENzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDGAgnvEI+7UukWixegMhkJNhwp7SW0bT7kq6Q/75iF6kAYEKPH
/3QMagIQT8ZidSrTK3n1V8wcvDxjGji0Zi7XblRnQJPeJrv3H8Faha86tUjCX2SK
RgGyoEDqv4D292SYm/Enxs7CUO9Gr5Ff6eC0tjXKtzpaKi8T0PpwewFjqmJFDGUB
RDZWtrOCKLZLSvvFAtuP8tKowp13tvxtyr9Dm8rbb3nRetpDUoMfSDuQl3jTuzWH
nPAPz6MdwD0U0fR6WzGAIje4nCdDYh4mXgUq3+EnHCHwYSN52TFnXA+J+5py/VdI
aIeuSth16o9v46fLkrwGYvuhTZbTockjTp5pAgMBAAGjggIiMIICHjAdBgNVHQ4E
FgQU2n4KH6H083MNY7s45d8+8k+tTXQwHwYDVR0jBBgwFoAUG+OrD42yZauyKH51
FR5/WpOyxzYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBgNVHR8EXjBcMFqg
WKBWhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzUwL0ctT3JENDJ5WmF1eUtINTFGUjVfV3BPeXh6WS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0ctT3JENDJ5WmF1eUtINTFGUjVfV3BP
eXh6WS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG6BggrBgEFBQcBCwSBrTCBqjBgBggr
BgEFBQcwC4ZUcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC81MC8ybjRLSDZIMDgzTU5ZN3M0NWQ4LThrLXRUWFEucm9hMEYG
CCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJk
cC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQG2tvAMA0GCSqGSIb3DQEBCwUAA4IBAQDYeN6wsSmB9q/2HVI4dwS6tBh1K6oA
0RZlgWJvRQN6aL7ls9mZpEE/W3/5iWvN5EUyIuZfDT9fC0MeAQort1DVyQv0bwZ/
v9MMwlRKhUIt2ne9J5GbPCwU9G/8vdSJf4zpzSpz+40myA2wLpWvAShATWWshYYA
jnWk7yvrIn0GrA36bU2eMwtlnbjvsxnHHShXj3bAPaA08hiNJfbrrGixXN/zmZ9U
hgAjqTOTftk/tjnEayaBSCvw1CHAeTJJu3dIsPZ6l4wMdGGsksq9M6J1OX7bald/
q3F1SE+KoabbZqEesxplpLa0vuqwFQ0HIEBqn09CztV3mI18jmx9U098
-----END CERTIFICATE-----
Generated at Mon Aug 11 13:16:23 2025 by rpki-client