Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/68/gHsG94MnbYNNnnQMqB6cGFzbr7o.roa
File:                     gHsG94MnbYNNnnQMqB6cGFzbr7o.roa (raw, json)
Hash identifier:          wD7OUJtS+1EpnmJWmf6cEZ+OPp4XdAPydx/h3fyLp4Y=
Subject key identifier:   80:7B:06:F7:83:27:6D:83:4D:9E:74:0C:A8:1E:9C:18:5C:DB:AF:BA
Certificate issuer:       /CN=65DE52E64BE43E328AA69F3AB2D347F8833EC637
Certificate serial:       79
Authority key identifier: 65:DE:52:E6:4B:E4:3E:32:8A:A6:9F:3A:B2:D3:47:F8:83:3E:C6:37
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/gHsG94MnbYNNnnQMqB6cGFzbr7o.roa
Signing time:             Fri 01 Aug 2025 01:31:15 +0000
ROA not before:           Fri 01 Aug 2025 01:31:15 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     9374
IP address blocks:        183.181.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121 (0x79)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65DE52E64BE43E328AA69F3AB2D347F8833EC637
        Validity
            Not Before: Aug  1 01:31:15 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=807B06F783276D834D9E740CA81E9C185CDBAFBA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:b2:fc:d2:79:89:79:0b:1b:6a:ee:b9:ba:5f:
                    76:e6:1e:42:b8:4c:90:9d:d2:1c:7f:d1:8d:3f:5e:
                    f3:eb:71:72:c8:53:76:26:8c:12:84:e9:62:87:3f:
                    bd:6c:85:8f:24:00:3b:0c:62:a2:2c:a6:00:aa:c6:
                    98:69:d3:27:42:ed:95:41:c0:a6:83:e4:6d:4f:c2:
                    29:34:15:03:f3:bf:00:85:85:36:b7:04:fe:20:24:
                    3a:f7:a7:df:77:56:e9:14:13:91:0f:5b:32:da:b2:
                    66:c6:d1:e2:44:c9:12:a2:86:78:80:d1:a8:2c:96:
                    e8:e0:3f:23:56:e2:20:d0:6b:4a:b7:75:24:69:3e:
                    f9:81:35:1f:66:28:e4:cc:a6:bb:51:49:55:6e:b8:
                    58:82:cd:74:ef:6b:b0:33:f9:98:b9:74:25:a1:5a:
                    b7:f1:68:2b:1f:93:56:fd:41:d5:39:f6:05:bc:08:
                    ff:01:9e:62:70:36:8a:b1:f3:0c:7d:45:ed:d9:08:
                    c6:45:1a:b5:78:89:4b:17:5f:4a:e8:23:78:d6:fd:
                    b9:08:13:f4:b1:73:7a:36:bf:47:7e:b0:12:2c:db:
                    3f:ef:f1:69:2f:b5:b7:35:94:30:14:14:55:bf:ed:
                    23:95:40:34:dd:82:b2:48:35:8a:1f:0a:d1:b9:ea:
                    9f:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:7B:06:F7:83:27:6D:83:4D:9E:74:0C:A8:1E:9C:18:5C:DB:AF:BA
            X509v3 Authority Key Identifier:
                keyid:65:DE:52:E6:4B:E4:3E:32:8A:A6:9F:3A:B2:D3:47:F8:83:3E:C6:37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/gHsG94MnbYNNnnQMqB6cGFzbr7o.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.181.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         3d:75:69:f9:81:48:74:fe:10:76:79:80:47:88:07:1f:6f:3e:
         2b:3f:8e:c0:f0:97:9a:e5:b9:f3:1a:76:29:dd:6f:83:8a:34:
         9a:64:5b:e3:9d:41:02:0f:b8:df:23:ac:46:79:51:62:09:e0:
         8d:23:92:74:b3:ff:63:51:5a:60:3a:05:85:7f:74:e5:95:02:
         45:f4:6b:ce:3e:63:6d:12:74:09:4a:88:e9:6f:ad:c4:b8:fd:
         22:a7:58:ae:61:e8:df:81:01:fe:1b:90:2f:e1:d2:5f:3a:d1:
         3a:02:6b:ed:49:c5:13:7b:87:3a:19:d6:2c:99:19:ca:f5:c7:
         12:a8:a6:de:da:09:f6:33:97:79:b7:5f:bb:f6:ad:00:30:dd:
         6f:70:44:f3:d8:d7:9b:db:ad:c0:08:1f:b7:ec:8f:3c:db:64:
         66:dc:bc:e4:17:8d:2d:ef:cc:a6:88:c0:2d:a8:f1:98:3b:22:
         ad:7e:e9:c8:21:4a:52:cf:31:62:6a:d4:2e:cc:9d:6d:29:28:
         a9:3e:fe:07:4d:c7:e0:af:39:87:1e:aa:b6:1e:79:ff:5c:89:
         e4:50:5b:6d:90:18:a3:92:4f:35:b6:f7:ef:3a:36:27:b7:8d:
         e3:db:09:76:ea:92:a5:aa:7b:e7:3a:0f:3f:ae:4a:12:c3:1d:
         d2:27:ec:3f
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgIBeTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2NURF
NTJFNjRCRTQzRTMyOEFBNjlGM0FCMkQzNDdGODgzM0VDNjM3MB4XDTI1MDgwMTAx
MzExNVoXDTI2MDczMDA2MjkwOFowMzExMC8GA1UEAxMoODA3QjA2Rjc4MzI3NkQ4
MzREOUU3NDBDQTgxRTlDMTg1Q0RCQUZCQTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAOuy/NJ5iXkLG2ruubpfduYeQrhMkJ3SHH/RjT9e8+txcshTdiaM
EoTpYoc/vWyFjyQAOwxioiymAKrGmGnTJ0LtlUHApoPkbU/CKTQVA/O/AIWFNrcE
/iAkOven33dW6RQTkQ9bMtqyZsbR4kTJEqKGeIDRqCyW6OA/I1biINBrSrd1JGk+
+YE1H2Yo5Mymu1FJVW64WILNdO9rsDP5mLl0JaFat/FoKx+TVv1B1Tn2BbwI/wGe
YnA2irHzDH1F7dkIxkUatXiJSxdfSugjeNb9uQgT9LFzeja/R36wEizbP+/xaS+1
tzWUMBQUVb/tI5VANN2Cskg1ih8K0bnqn0MCAwEAAaOCAiIwggIeMB0GA1UdDgQW
BBSAewb3gydtg02edAyoHpwYXNuvujAfBgNVHSMEGDAWgBRl3lLmS+Q+Moqmnzqy
00f4gz7GNzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGUGA1UdHwReMFwwWqBY
oFaGVHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNjgvWmQ1UzVrdmtQaktLcHA4NnN0TkgtSU0teGpjLmNybDBtBggrBgEF
BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p
Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvWmQ1UzVrdmtQaktLcHA4NnN0TkgtSU0t
eGpjLmNlcjAOBgNVHQ8BAf8EBAMCB4AwgboGCCsGAQUFBwELBIGtMIGqMGAGCCsG
AQUFBzALhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzY4L2dIc0c5NE1uYllOTm5uUU1xQjZjR0Z6YnI3by5yb2EwRgYI
KwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRw
L2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAa3tcAwDQYJKoZIhvcNAQELBQADggEBAD11afmBSHT+EHZ5gEeIBx9vPis/jsDw
l5rlufMadindb4OKNJpkW+OdQQIPuN8jrEZ5UWIJ4I0jknSz/2NRWmA6BYV/dOWV
AkX0a84+Y20SdAlKiOlvrcS4/SKnWK5h6N+BAf4bkC/h0l860ToCa+1JxRN7hzoZ
1iyZGcr1xxKopt7aCfYzl3m3X7v2rQAw3W9wRPPY15vbrcAIH7fsjzzbZGbcvOQX
jS3vzKaIwC2o8Zg7Iq1+6cghSlLPMWJq1C7MnW0pKKk+/gdNx+CvOYceqrYeef9c
ieRQW22QGKOSTzW29+86Nie3jePbCXbqkqWqe+c6Dz+uShLDHdIn7D8=
-----END CERTIFICATE-----
Generated at Mon Aug 11 15:17:06 2025 by rpki-client