Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/50/myd3FBiFk3oWPt5QAKWQZL_xXfw.roa
File:                     myd3FBiFk3oWPt5QAKWQZL_xXfw.roa (raw, json)
Hash identifier:          /shZxYYVkfTb1E8snzGvQrIFbBYBu5zbl1Z+Z732XWY=
Subject key identifier:   9B:27:77:14:18:85:93:7A:16:3E:DE:50:00:A5:90:64:BF:F1:5D:FC
Certificate issuer:       /CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
Certificate serial:       CA
Authority key identifier: 1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/myd3FBiFk3oWPt5QAKWQZL_xXfw.roa
Signing time:             Fri 01 Aug 2025 01:37:56 +0000
ROA not before:           Fri 01 Aug 2025 01:37:56 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     4685
IP address blocks:        220.150.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 202 (0xca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
        Validity
            Not Before: Aug  1 01:37:56 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=9B2777141885937A163EDE5000A59064BFF15DFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:5c:e7:3d:7a:55:0c:27:f1:c3:7d:2c:b4:10:
                    8a:b2:6a:35:35:74:05:27:55:b3:09:5e:6d:af:37:
                    8b:f3:1f:03:bd:f6:da:0d:c4:a4:09:2a:41:a6:d6:
                    4f:d1:61:b4:98:d9:54:69:ef:23:04:43:8d:55:d6:
                    5e:38:2d:89:37:34:19:37:16:ce:2d:b1:b2:b4:34:
                    31:12:cf:ed:b8:03:20:f7:78:c4:ef:d0:b4:3c:18:
                    18:e0:99:89:3b:75:01:a1:a8:73:34:0f:95:af:03:
                    2f:ba:a8:30:98:c5:b4:1d:f1:19:69:21:2b:b5:ac:
                    67:ed:bd:6e:52:a1:0e:a5:dd:cd:a7:df:b7:9b:b0:
                    24:83:aa:a0:e2:0a:5a:ba:78:0f:86:c0:98:90:3c:
                    e8:4c:97:21:b6:aa:d8:30:06:8b:11:bb:7a:6a:6d:
                    c4:36:d5:36:ba:2d:23:82:3f:66:9d:fe:14:cf:7b:
                    0c:f6:40:5b:cd:70:82:65:8e:fb:72:60:09:2b:3f:
                    46:f9:0a:0d:64:cc:e1:54:92:b3:2a:9c:24:f8:00:
                    4c:9e:30:82:81:d5:8e:3b:6b:23:76:1b:2e:a0:3b:
                    f8:9e:61:28:95:70:18:82:e3:69:c9:7d:e7:a4:37:
                    6e:96:f2:29:c3:43:9b:c7:b7:12:0d:02:65:2f:2d:
                    e4:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:27:77:14:18:85:93:7A:16:3E:DE:50:00:A5:90:64:BF:F1:5D:FC
            X509v3 Authority Key Identifier:
                keyid:1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/myd3FBiFk3oWPt5QAKWQZL_xXfw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.150.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         32:8b:ce:40:7f:4d:17:8e:70:c8:74:67:af:54:3f:68:b4:60:
         23:89:d5:de:87:6d:25:22:78:96:21:5b:9e:16:99:64:17:b7:
         dd:aa:9d:e6:b9:59:72:c8:c0:b2:6d:b9:ff:67:82:cd:02:52:
         06:e0:19:d8:ff:8a:bb:91:f1:8c:01:12:1b:af:06:c7:16:eb:
         ee:b3:02:5e:d3:7f:75:3f:91:87:fe:a1:98:d6:bf:9f:38:4d:
         f6:aa:13:68:c4:c7:a5:65:10:4b:e2:19:31:e4:3f:c4:51:fb:
         05:06:9e:5a:53:6b:ef:1c:5a:9d:27:00:64:f0:c6:e7:24:81:
         4e:0e:e5:14:2d:a9:ba:95:e5:71:6c:5d:0e:6c:6c:58:64:b4:
         57:30:e5:d6:f3:d7:cf:dc:e4:8d:ae:c3:f2:26:51:6d:16:73:
         a0:ff:5d:1d:a0:7a:b9:0f:c0:a9:ea:5b:73:f6:53:26:5c:2a:
         c4:89:57:60:6e:b9:9b:9c:05:a3:6d:f7:d1:ad:ea:a6:a2:bc:
         10:a6:b3:2f:b5:1b:97:d6:f9:3f:3d:c5:39:23:eb:4d:18:f7:
         8a:ee:86:35:0c:bb:de:7f:23:74:1e:be:10:3c:b0:d1:b7:09:
         bf:d4:01:45:4d:75:e6:83:2d:46:db:55:12:ea:89:a3:96:0f:
         97:04:78:7f
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgICAMowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMUJF
M0FCMEY4REIyNjVBQkIyMjg3RTc1MTUxRTdGNUE5M0IyQzczNjAeFw0yNTA4MDEw
MTM3NTZaFw0yNjA3MzAwNjI5MDhaMDMxMTAvBgNVBAMTKDlCMjc3NzE0MTg4NTkz
N0ExNjNFREU1MDAwQTU5MDY0QkZGMTVERkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC1XOc9elUMJ/HDfSy0EIqyajU1dAUnVbMJXm2vN4vzHwO99toN
xKQJKkGm1k/RYbSY2VRp7yMEQ41V1l44LYk3NBk3Fs4tsbK0NDESz+24AyD3eMTv
0LQ8GBjgmYk7dQGhqHM0D5WvAy+6qDCYxbQd8RlpISu1rGftvW5SoQ6l3c2n37eb
sCSDqqDiClq6eA+GwJiQPOhMlyG2qtgwBosRu3pqbcQ21Ta6LSOCP2ad/hTPewz2
QFvNcIJljvtyYAkrP0b5Cg1kzOFUkrMqnCT4AEyeMIKB1Y47ayN2Gy6gO/ieYSiV
cBiC42nJfeekN26W8inDQ5vHtxINAmUvLeS7AgMBAAGjggIiMIICHjAdBgNVHQ4E
FgQUmyd3FBiFk3oWPt5QAKWQZL/xXfwwHwYDVR0jBBgwFoAUG+OrD42yZauyKH51
FR5/WpOyxzYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBgNVHR8EXjBcMFqg
WKBWhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzUwL0ctT3JENDJ5WmF1eUtINTFGUjVfV3BPeXh6WS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0ctT3JENDJ5WmF1eUtINTFGUjVfV3BP
eXh6WS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG6BggrBgEFBQcBCwSBrTCBqjBgBggr
BgEFBQcwC4ZUcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC81MC9teWQzRkJpRmszb1dQdDVRQUtXUVpMX3hYZncucm9hMEYG
CCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJk
cC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQG3JaAMA0GCSqGSIb3DQEBCwUAA4IBAQAyi85Af00XjnDIdGevVD9otGAjidXe
h20lIniWIVueFplkF7fdqp3muVlyyMCybbn/Z4LNAlIG4BnY/4q7kfGMARIbrwbH
FuvuswJe0391P5GH/qGY1r+fOE32qhNoxMelZRBL4hkx5D/EUfsFBp5aU2vvHFqd
JwBk8MbnJIFODuUULam6leVxbF0ObGxYZLRXMOXW89fP3OSNrsPyJlFtFnOg/10d
oHq5D8Cp6ltz9lMmXCrEiVdgbrmbnAWjbffRreqmorwQprMvtRuX1vk/PcU5I+tN
GPeK7oY1DLvefyN0Hr4QPLDRtwm/1AFFTXXmgy1G21US6omjlg+XBHh/
-----END CERTIFICATE-----
Generated at Mon Aug 11 13:16:16 2025 by rpki-client