Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/653/SRIZjc7wUQOL79nK4aNNKGJbEs4.roa
File:                     SRIZjc7wUQOL79nK4aNNKGJbEs4.roa (raw, json)
Hash identifier:          i7cp94ZMT4kf74qRLI2YLt+XCiWBdvJNUXfsHxDDQZ8=
Subject key identifier:   49:12:19:8D:CE:F0:51:03:8B:EF:D9:CA:E1:A3:4D:28:62:5B:12:CE
Certificate issuer:       /CN=EE5C4F77377D7F5075C64BA4B57998BC79326C5E
Certificate serial:       1B
Authority key identifier: EE:5C:4F:77:37:7D:7F:50:75:C6:4B:A4:B5:79:98:BC:79:32:6C:5E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7lxPdzd9f1B1xkuktXmYvHkybF4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/653/SRIZjc7wUQOL79nK4aNNKGJbEs4.roa
Signing time:             Wed 02 Apr 2025 04:53:29 +0000
ROA not before:           Wed 02 Apr 2025 04:53:29 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     17931
IP address blocks:        203.191.136.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/653/7lxPdzd9f1B1xkuktXmYvHkybF4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/653/7lxPdzd9f1B1xkuktXmYvHkybF4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7lxPdzd9f1B1xkuktXmYvHkybF4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 18:34:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27 (0x1b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE5C4F77377D7F5075C64BA4B57998BC79326C5E
        Validity
            Not Before: Apr  2 04:53:29 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=4912198DCEF051038BEFD9CAE1A34D28625B12CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:68:49:eb:e9:77:8b:a4:e5:14:55:5b:26:b7:
                    03:a6:18:b7:d6:de:c6:af:91:60:a2:ee:6d:b3:bd:
                    de:59:0d:c9:2a:8c:e9:85:03:ed:97:bd:a9:e4:95:
                    d3:33:27:5f:33:62:e3:fe:a3:a1:a6:47:cc:93:4f:
                    f2:37:e1:09:5d:94:be:4c:8e:49:04:15:ea:33:99:
                    0f:73:f7:41:29:ad:ff:f1:ef:96:9d:a0:79:53:89:
                    b9:06:53:dd:fb:06:b2:67:a3:67:58:ea:40:73:22:
                    84:db:39:76:19:32:4e:56:d1:01:1d:e7:dc:21:80:
                    25:f6:8c:29:ec:6e:bb:9b:ad:f5:a2:02:05:0d:a3:
                    ac:0a:fa:b0:3e:8f:99:61:91:fe:d0:82:0b:f3:a9:
                    23:48:53:e4:18:e2:97:81:7c:69:18:32:37:28:e3:
                    b1:3d:06:0e:66:44:ce:1a:4e:bf:ec:43:ea:a3:c2:
                    dd:eb:2c:fc:48:5d:1a:e3:91:1d:10:64:3a:06:0d:
                    d4:d3:60:f5:55:bf:6a:f3:6c:68:d2:f8:c1:b4:7e:
                    b9:27:72:dd:3e:9f:ba:1b:bb:04:1a:08:47:67:a9:
                    d5:de:4a:e0:1d:f3:5f:4f:34:79:9b:24:0f:bf:c2:
                    bb:05:7e:20:73:7d:e2:79:e9:51:4b:ad:58:d9:6a:
                    c1:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:12:19:8D:CE:F0:51:03:8B:EF:D9:CA:E1:A3:4D:28:62:5B:12:CE
            X509v3 Authority Key Identifier:
                keyid:EE:5C:4F:77:37:7D:7F:50:75:C6:4B:A4:B5:79:98:BC:79:32:6C:5E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/653/7lxPdzd9f1B1xkuktXmYvHkybF4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7lxPdzd9f1B1xkuktXmYvHkybF4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/653/SRIZjc7wUQOL79nK4aNNKGJbEs4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.191.136.0/21

    Signature Algorithm: sha256WithRSAEncryption
         7c:1b:df:c0:57:13:ad:cf:76:60:2f:8e:b5:b7:7c:ce:a2:b0:
         f7:53:66:98:a9:3c:50:f4:19:8a:c3:dd:78:b7:56:d6:2d:8f:
         ee:1f:25:37:35:fb:76:cc:b5:52:ad:c8:8a:55:b8:fc:06:66:
         9b:63:83:9d:de:7a:48:3f:be:92:43:67:aa:cb:f3:ff:ba:23:
         4c:9f:e8:fb:74:d3:09:7b:78:e0:d6:88:67:1f:0b:98:20:13:
         1b:dc:bd:21:35:91:17:04:95:ba:77:19:43:55:bd:06:b6:fc:
         fa:76:8d:ff:9a:13:49:79:7e:35:22:07:7e:ba:d0:8e:34:40:
         5c:44:f8:e6:af:ec:c6:b6:59:0e:17:57:88:52:96:b3:c2:33:
         9f:1e:8c:d5:87:85:87:52:0d:f8:67:b0:82:b9:8e:48:f6:7e:
         8c:21:a1:71:6c:f7:9b:c2:bc:b7:a7:e0:3a:e3:1e:bb:22:54:
         60:af:0c:d6:a9:3d:ac:6b:6f:cf:78:fd:1a:78:8a:ee:16:d3:
         11:0a:1a:da:dc:ab:cd:6f:8e:24:23:ab:f5:69:22:e4:3e:1f:
         e8:66:19:f1:09:20:d1:89:3e:0f:d8:53:17:5a:28:cd:05:0c:
         2f:ce:15:bf:43:8f:88:f3:de:e4:3a:7b:2e:cd:44:22:af:b4:
         94:26:37:75
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBGzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhFRTVD
NEY3NzM3N0Q3RjUwNzVDNjRCQTRCNTc5OThCQzc5MzI2QzVFMB4XDTI1MDQwMjA0
NTMyOVoXDTI2MDMxNTAxMzAwM1owMzExMC8GA1UEAxMoNDkxMjE5OERDRUYwNTEw
MzhCRUZEOUNBRTFBMzREMjg2MjVCMTJDRTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAL9oSevpd4uk5RRVWya3A6YYt9bexq+RYKLubbO93lkNySqM6YUD
7Ze9qeSV0zMnXzNi4/6joaZHzJNP8jfhCV2UvkyOSQQV6jOZD3P3QSmt//Hvlp2g
eVOJuQZT3fsGsmejZ1jqQHMihNs5dhkyTlbRAR3n3CGAJfaMKexuu5ut9aICBQ2j
rAr6sD6PmWGR/tCCC/OpI0hT5Bjil4F8aRgyNyjjsT0GDmZEzhpOv+xD6qPC3ess
/EhdGuORHRBkOgYN1NNg9VW/avNsaNL4wbR+uSdy3T6fuhu7BBoIR2ep1d5K4B3z
X080eZskD7/CuwV+IHN94nnpUUutWNlqwXMCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBRJEhmNzvBRA4vv2crho00oYlsSzjAfBgNVHSMEGDAWgBTuXE93N31/UHXGS6S1
eZi8eTJsXjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNjUzLzdseFBkemQ5ZjFCMXhrdWt0WG1ZdkhreWJGNC5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzdseFBkemQ5ZjFCMXhrdWt0WG1Zdkhr
eWJGNC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC82NTMvU1JJWmpjN3dVUU9MNzluSzRhTk5LR0piRXM0LnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEA8u/iDANBgkqhkiG9w0BAQsFAAOCAQEAfBvfwFcTrc92YC+Otbd8zqKw91Nm
mKk8UPQZisPdeLdW1i2P7h8lNzX7dsy1Uq3IilW4/AZmm2ODnd56SD++kkNnqsvz
/7ojTJ/o+3TTCXt44NaIZx8LmCATG9y9ITWRFwSVuncZQ1W9Brb8+naN/5oTSXl+
NSIHfrrQjjRAXET45q/sxrZZDhdXiFKWs8Iznx6M1YeFh1IN+GewgrmOSPZ+jCGh
cWz3m8K8t6fgOuMeuyJUYK8M1qk9rGtvz3j9GniK7hbTEQoa2tyrzW+OJCOr9Wki
5D4f6GYZ8Qkg0Yk+D9hTF1oozQUML84Vv0OPiPPe5Dp7Ls1EIq+0lCY3dQ==
-----END CERTIFICATE-----
Generated at Sat Apr 26 20:34:58 2025 by rpki-client