Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/713/3CJYWmE_6Q8aHaYPkyVoial1Ilw.roa
File:                     3CJYWmE_6Q8aHaYPkyVoial1Ilw.roa (raw, json)
Hash identifier:          aPaR7Ck8WLT8HEPQeWkKhXDMxP0/omdHDZUhVz4BDdo=
Subject key identifier:   DC:22:58:5A:61:3F:E9:0F:1A:1D:A6:0F:93:25:68:89:A9:75:22:5C
Certificate issuer:       /CN=1F288A2285024E148A27E45FE5AC90D28B303D4B
Certificate serial:       38
Authority key identifier: 1F:28:8A:22:85:02:4E:14:8A:27:E4:5F:E5:AC:90:D2:8B:30:3D:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/713/3CJYWmE_6Q8aHaYPkyVoial1Ilw.roa
Signing time:             Fri 01 Aug 2025 01:32:11 +0000
ROA not before:           Fri 01 Aug 2025 01:32:11 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     18121
IP address blocks:        202.88.48.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/713/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/713/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 56 (0x38)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F288A2285024E148A27E45FE5AC90D28B303D4B
        Validity
            Not Before: Aug  1 01:32:11 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=DC22585A613FE90F1A1DA60F93256889A975225C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:7d:ca:54:06:a7:40:b3:a1:09:f5:56:d7:10:
                    c4:95:ab:9b:14:6a:4b:cf:68:de:48:0a:69:08:f5:
                    76:c1:92:51:69:d8:73:80:45:d9:10:42:12:ab:42:
                    26:d1:46:2f:84:1f:a0:ae:de:fd:01:9e:99:80:f1:
                    87:0b:c9:e4:78:30:0f:b7:24:9f:bb:29:fd:b4:94:
                    fe:ab:22:43:25:b8:0c:ce:40:f8:08:b0:9c:b2:0b:
                    17:06:9c:9b:64:00:1f:6c:bb:b7:42:f9:57:68:8e:
                    64:c9:16:b5:25:aa:c2:fb:b5:29:89:55:64:d3:74:
                    27:cc:24:a6:e7:e0:df:51:ce:f2:8c:bf:e7:b1:e5:
                    62:62:1a:3d:b7:28:d2:a2:8a:71:e7:c9:0c:d6:60:
                    6f:87:c5:1d:ff:50:35:a7:1d:7c:81:fc:19:57:bd:
                    cf:94:86:75:35:5e:08:45:7d:2e:84:a7:2a:aa:5e:
                    91:f5:0f:61:8b:37:54:99:2b:fa:de:2b:00:8b:8a:
                    aa:7d:27:e5:f8:15:12:2d:ac:0c:1f:8e:b3:2c:5e:
                    d1:7a:42:77:77:73:a9:50:19:b4:94:28:4b:dd:3a:
                    36:ed:e7:f7:a1:0f:41:af:35:de:60:8d:20:24:6d:
                    ee:f1:7a:8a:59:44:3e:ed:fd:ca:9d:5d:97:fa:11:
                    3e:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:22:58:5A:61:3F:E9:0F:1A:1D:A6:0F:93:25:68:89:A9:75:22:5C
            X509v3 Authority Key Identifier:
                keyid:1F:28:8A:22:85:02:4E:14:8A:27:E4:5F:E5:AC:90:D2:8B:30:3D:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/713/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/713/3CJYWmE_6Q8aHaYPkyVoial1Ilw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.88.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         93:2d:d8:91:cc:33:0b:66:fa:6a:8f:2d:4f:b8:85:05:21:da:
         5d:7f:c3:97:7d:fa:34:cc:79:19:e4:af:10:b9:c1:77:90:6c:
         29:b3:06:71:86:be:1c:c5:16:c5:8c:ae:77:38:1c:c4:ad:77:
         00:6c:33:45:7c:e3:ae:b6:9a:4d:05:e5:9b:aa:7f:66:96:87:
         6d:59:df:7f:0e:a2:48:f3:cd:9d:1b:e4:f9:41:10:18:3e:bb:
         a5:dd:f5:38:33:7d:54:7a:06:76:79:30:5d:e2:0d:9f:0f:07:
         6e:18:34:12:0d:fc:f7:c2:d8:6a:0f:2e:cb:61:92:56:7d:ff:
         de:2a:3e:38:f2:c2:99:0d:f0:6d:3c:8e:6f:59:77:24:11:ba:
         fb:68:ff:24:9a:f7:da:b3:fb:ea:0a:02:0e:1b:49:24:0e:4d:
         82:d2:f7:83:e2:ab:54:6d:59:c7:2e:6e:eb:66:24:38:8d:97:
         9f:2e:2b:bb:97:b1:d2:ea:da:73:ef:b6:87:1a:36:63:f6:be:
         66:5d:28:51:38:e1:b4:f7:11:0a:9e:c3:57:65:8c:23:b2:76:
         d8:05:02:84:34:12:15:ad:a8:45:d0:f2:e9:f7:84:37:fe:82:
         5b:1b:f9:1a:de:52:b4:c2:a8:97:f0:2e:b1:fb:2a:c0:6c:ee:
         25:d1:79:82
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBODANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxRjI4
OEEyMjg1MDI0RTE0OEEyN0U0NUZFNUFDOTBEMjhCMzAzRDRCMB4XDTI1MDgwMTAx
MzIxMVoXDTI2MDczMDA2MjkwOFowMzExMC8GA1UEAxMoREMyMjU4NUE2MTNGRTkw
RjFBMURBNjBGOTMyNTY4ODlBOTc1MjI1QzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAJZ9ylQGp0CzoQn1VtcQxJWrmxRqS89o3kgKaQj1dsGSUWnYc4BF
2RBCEqtCJtFGL4QfoK7e/QGemYDxhwvJ5HgwD7ckn7sp/bSU/qsiQyW4DM5A+Aiw
nLILFwacm2QAH2y7t0L5V2iOZMkWtSWqwvu1KYlVZNN0J8wkpufg31HO8oy/57Hl
YmIaPbco0qKKcefJDNZgb4fFHf9QNacdfIH8GVe9z5SGdTVeCEV9LoSnKqpekfUP
YYs3VJkr+t4rAIuKqn0n5fgVEi2sDB+Osyxe0XpCd3dzqVAZtJQoS906Nu3n96EP
Qa813mCNICRt7vF6illEPu39yp1dl/oRPiMCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBTcIlhaYT/pDxodpg+TJWiJqXUiXDAfBgNVHSMEGDAWgBQfKIoihQJOFIon5F/l
rJDSizA9SzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNzEzL0h5aUtJb1VDVGhTS0otUmY1YXlRMG9zd1BVcy5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0h5aUtJb1VDVGhTS0otUmY1YXlRMG9z
d1BVcy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC83MTMvM0NKWVdtRV82UThhSGFZUGt5Vm9pYWwxSWx3LnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBMpYMDANBgkqhkiG9w0BAQsFAAOCAQEAky3YkcwzC2b6ao8tT7iFBSHaXX/D
l336NMx5GeSvELnBd5BsKbMGcYa+HMUWxYyudzgcxK13AGwzRXzjrraaTQXlm6p/
ZpaHbVnffw6iSPPNnRvk+UEQGD67pd31ODN9VHoGdnkwXeINnw8Hbhg0Eg3898LY
ag8uy2GSVn3/3io+OPLCmQ3wbTyOb1l3JBG6+2j/JJr32rP76goCDhtJJA5NgtL3
g+KrVG1Zxy5u62YkOI2Xny4ru5ex0urac++2hxo2Y/a+Zl0oUTjhtPcRCp7DV2WM
I7J22AUChDQSFa2oRdDy6feEN/6CWxv5Gt5StMKol/AusfsqwGzuJdF5gg==
-----END CERTIFICATE-----
Generated at Mon Aug 11 10:32:25 2025 by rpki-client