Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/H5CcJYdym_QDM6P25byYrvPb3EM.roa
File:                     H5CcJYdym_QDM6P25byYrvPb3EM.roa (raw, json)
Hash identifier:          MaPT1CaDCyE5zmmFUrxax9P+0DtZnvYKbmRrkYJiZF8=
Subject key identifier:   1F:90:9C:25:87:72:9B:F4:03:33:A3:F6:E5:BC:98:AE:F3:DB:DC:43
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       0379
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/H5CcJYdym_QDM6P25byYrvPb3EM.roa
Signing time:             Fri 01 Aug 2025 01:47:18 +0000
ROA not before:           Fri 01 Aug 2025 01:47:18 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     4721
IP address blocks:        114.134.192.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 889 (0x379)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Aug  1 01:47:18 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=1F909C2587729BF40333A3F6E5BC98AEF3DBDC43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ca:70:1f:a6:28:dc:bb:b1:4b:84:21:0f:5f:
                    86:fe:a8:23:79:f9:29:f9:0d:24:d2:50:73:84:b7:
                    fd:1f:be:5b:dd:b9:01:f2:87:6d:8d:73:d7:19:fe:
                    de:ff:2d:8a:8b:e3:92:63:11:98:69:7e:a4:c3:cc:
                    00:cd:82:46:d9:61:35:4a:26:1f:f0:fa:37:9a:6c:
                    d3:a5:49:41:92:60:15:50:a1:43:18:d1:71:76:83:
                    48:5a:26:cd:46:de:00:08:24:a7:95:f2:07:cd:2c:
                    03:9c:40:7c:69:ce:24:13:06:22:66:c2:d8:b5:b5:
                    ba:47:18:e3:cd:35:ee:99:4e:8d:9d:76:25:ef:5a:
                    15:2a:84:58:ef:ea:3e:47:d1:75:2b:64:97:d1:7a:
                    94:16:db:29:fb:71:61:79:ce:1d:77:72:9c:85:b0:
                    42:a6:d3:bd:49:2b:1e:a6:38:c3:43:4c:81:9f:5c:
                    9a:17:97:51:b1:9c:aa:1b:36:fd:dd:57:e4:d4:96:
                    82:b1:b7:21:38:a3:a9:3a:b2:81:eb:4b:62:40:86:
                    44:8a:2d:5e:f8:b1:87:62:2a:29:98:ca:2c:b1:11:
                    66:88:2c:0b:5e:d6:db:02:d3:c4:db:1a:59:5b:27:
                    14:ca:71:4e:3a:a4:42:23:11:d1:a8:b2:81:f5:da:
                    3a:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:90:9C:25:87:72:9B:F4:03:33:A3:F6:E5:BC:98:AE:F3:DB:DC:43
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/H5CcJYdym_QDM6P25byYrvPb3EM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.134.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         59:fe:cb:92:f3:63:17:14:4f:6f:5a:33:d9:9b:cb:c7:2f:93:
         89:60:2f:60:d4:db:61:6a:82:8d:fc:01:15:99:94:cc:9d:bb:
         33:45:91:26:63:82:cc:5a:7b:45:51:8c:e0:79:73:ec:7d:9d:
         53:a5:41:a9:c9:7c:85:c9:b8:d6:fe:23:7d:25:2d:4b:fe:3f:
         c9:fb:3b:2c:60:66:84:97:d1:fb:8c:92:1d:c9:7a:0b:e9:0c:
         5e:da:f1:b2:4a:2e:df:19:60:8b:54:f3:d1:f8:bf:f3:1f:4c:
         a1:47:54:55:58:bb:75:50:6c:6b:f7:c8:51:79:5b:3f:a7:20:
         77:bb:eb:5f:0d:c3:20:0e:c0:27:4d:4b:7b:de:a5:38:8c:f0:
         b2:4c:5b:9f:43:1e:44:29:bf:9b:e2:8e:5a:aa:f7:0b:ad:59:
         62:a6:bd:27:f0:f4:35:0b:2c:3e:55:cd:7c:ad:3c:1f:f5:78:
         6f:ab:60:ce:d8:a7:a0:92:b2:91:c8:d0:e9:0c:fe:7b:28:6d:
         7e:8c:38:cc:b5:61:eb:89:9b:e2:17:0b:30:9f:87:2a:42:e9:
         e3:74:e7:3c:d2:31:8f:26:47:b9:2f:02:f8:58:bb:bb:ca:9a:
         af:6e:af:95:19:96:9f:15:c8:a6:b0:8d:12:cc:46:b4:52:9f:
         26:9b:4b:fe
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICA3kwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yNTA4MDEw
MTQ3MThaFw0yNjA3MzAwNjI5MDhaMDMxMTAvBgNVBAMTKDFGOTA5QzI1ODc3MjlC
RjQwMzMzQTNGNkU1QkM5OEFFRjNEQkRDNDMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDCynAfpijcu7FLhCEPX4b+qCN5+Sn5DSTSUHOEt/0fvlvduQHy
h22Nc9cZ/t7/LYqL45JjEZhpfqTDzADNgkbZYTVKJh/w+jeabNOlSUGSYBVQoUMY
0XF2g0haJs1G3gAIJKeV8gfNLAOcQHxpziQTBiJmwti1tbpHGOPNNe6ZTo2ddiXv
WhUqhFjv6j5H0XUrZJfRepQW2yn7cWF5zh13cpyFsEKm071JKx6mOMNDTIGfXJoX
l1GxnKobNv3dV+TUloKxtyE4o6k6soHrS2JAhkSKLV74sYdiKimYyiyxEWaILAte
1tsC08TbGllbJxTKcU46pEIjEdGosoH12jonAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUH5CcJYdym/QDM6P25byYrvPb3EMwHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z
p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE
djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvNjcxL0g1Q2NKWWR5bV9RRE02UDI1YnlZcnZQYjNFTS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAZyhsAwDQYJKoZIhvcNAQELBQADggEBAFn+y5LzYxcUT29aM9mby8cvk4lg
L2DU22Fqgo38ARWZlMyduzNFkSZjgsxae0VRjOB5c+x9nVOlQanJfIXJuNb+I30l
LUv+P8n7OyxgZoSX0fuMkh3JegvpDF7a8bJKLt8ZYItU89H4v/MfTKFHVFVYu3VQ
bGv3yFF5Wz+nIHe7618NwyAOwCdNS3vepTiM8LJMW59DHkQpv5vijlqq9wutWWKm
vSfw9DULLD5VzXytPB/1eG+rYM7Yp6CSspHI0OkM/nsobX6MOMy1YeuJm+IXCzCf
hypC6eN05zzSMY8mR7kvAvhYu7vKmq9ur5UZlp8VyKawjRLMRrRSnyabS/4=
-----END CERTIFICATE-----
Generated at Mon Aug 11 13:37:36 2025 by rpki-client