Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/783/FEDDTdZTJSAuOweVHaBJzV7lnFE.roa
File:                     FEDDTdZTJSAuOweVHaBJzV7lnFE.roa (raw, json)
Hash identifier:          JoaKWVHZYX8qH3vZp2SPP5hSu5IHj3Qncm48JKGfADQ=
Subject key identifier:   14:40:C3:4D:D6:53:25:20:2E:3B:07:95:1D:A0:49:CD:5E:E5:9C:51
Certificate issuer:       /CN=CB8300B20659BB951060F60B1F4BC6091AF27639
Certificate serial:       7B
Authority key identifier: CB:83:00:B2:06:59:BB:95:10:60:F6:0B:1F:4B:C6:09:1A:F2:76:39
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y4MAsgZZu5UQYPYLH0vGCRrydjk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/FEDDTdZTJSAuOweVHaBJzV7lnFE.roa
Signing time:             Fri 01 Aug 2025 01:29:22 +0000
ROA not before:           Fri 01 Aug 2025 01:29:22 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     18144
IP address blocks:        110.74.224.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/y4MAsgZZu5UQYPYLH0vGCRrydjk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/y4MAsgZZu5UQYPYLH0vGCRrydjk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y4MAsgZZu5UQYPYLH0vGCRrydjk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123 (0x7b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB8300B20659BB951060F60B1F4BC6091AF27639
        Validity
            Not Before: Aug  1 01:29:22 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=1440C34DD65325202E3B07951DA049CD5EE59C51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:3e:16:21:8f:37:73:a8:8c:6b:44:4e:a4:80:
                    1f:54:a5:3f:6d:2d:cb:8d:34:1b:72:c8:d1:fe:65:
                    b0:ef:10:54:c0:a0:7e:96:a4:76:87:a3:23:cd:11:
                    ed:98:db:f3:bb:87:bb:16:53:44:4a:e8:88:da:af:
                    0a:d5:20:55:25:94:2a:b7:4a:3e:40:9b:fe:37:1d:
                    06:a7:ac:5b:bb:e0:ca:23:2d:7a:8c:d3:dc:9b:ca:
                    b5:74:a2:e1:2b:51:9c:b3:6d:16:a0:07:73:02:77:
                    fa:2b:90:fa:96:10:3c:c9:43:cb:2e:74:02:eb:7b:
                    85:e3:d6:ef:04:a4:4c:62:f8:31:75:02:2b:74:f8:
                    89:91:d3:a4:1c:1e:11:0b:71:10:5d:5c:6e:5d:7b:
                    3b:a6:4b:3b:40:51:26:a7:c0:8b:6e:6b:83:09:1d:
                    1a:08:62:bb:33:1f:cf:75:5b:56:27:be:a0:32:cd:
                    c5:2e:be:86:1c:f6:81:0e:10:0e:ae:99:2a:f6:6a:
                    fa:81:4c:09:b4:f6:b5:64:e7:fb:db:c5:5b:d8:1e:
                    fc:5a:2a:7e:68:74:31:3f:df:65:b6:42:5b:94:b3:
                    90:77:4e:f8:4d:56:83:4c:e7:f9:cc:4e:d8:3f:08:
                    fd:47:31:85:fa:e1:7a:a5:36:2e:77:0c:9b:2f:9f:
                    51:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:40:C3:4D:D6:53:25:20:2E:3B:07:95:1D:A0:49:CD:5E:E5:9C:51
            X509v3 Authority Key Identifier:
                keyid:CB:83:00:B2:06:59:BB:95:10:60:F6:0B:1F:4B:C6:09:1A:F2:76:39

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/y4MAsgZZu5UQYPYLH0vGCRrydjk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y4MAsgZZu5UQYPYLH0vGCRrydjk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/FEDDTdZTJSAuOweVHaBJzV7lnFE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.74.224.0/21

    Signature Algorithm: sha256WithRSAEncryption
         89:1c:2b:20:b4:0d:79:af:23:59:8b:8e:73:8d:ef:7b:f8:c0:
         da:0d:74:12:6b:6a:8b:3a:44:85:80:38:05:07:a1:89:a0:18:
         cf:66:18:61:5d:4b:41:af:0e:9c:d0:2c:36:0a:1b:8b:cb:fd:
         4e:35:da:68:dd:dd:2e:13:95:93:92:81:a6:ff:da:53:65:48:
         55:9d:7d:88:12:bf:a3:1c:15:77:1b:e7:5b:13:36:3e:d6:bf:
         82:65:6d:da:99:ba:dc:4c:aa:d5:87:0b:16:8a:ae:76:f7:19:
         ff:3b:40:82:8e:cf:92:63:20:a0:a1:bd:e3:36:f9:2e:38:9a:
         19:fa:78:95:b6:13:47:25:5b:8c:de:f6:71:88:c9:2f:66:30:
         54:ba:d5:88:45:14:b5:ab:96:18:56:10:b0:b7:da:5e:c6:9e:
         27:b7:c5:b8:79:77:3a:ad:f8:ea:b3:e0:ce:37:82:52:ad:73:
         d0:e4:df:78:2e:6d:52:6e:7d:1a:f3:9f:5e:04:af:76:c5:ba:
         99:47:6d:5d:cd:2a:af:65:4f:2c:0f:5e:ba:84:90:ee:61:68:
         db:d8:f8:c1:db:fa:2e:b6:39:86:9e:00:45:03:e5:7d:da:5b:
         9c:90:f4:85:1f:7f:9d:51:07:24:9c:eb:51:45:35:c2:53:ad:
         d8:b0:db:7c
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBezANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDQjgz
MDBCMjA2NTlCQjk1MTA2MEY2MEIxRjRCQzYwOTFBRjI3NjM5MB4XDTI1MDgwMTAx
MjkyMloXDTI2MDczMDA2MjkwOFowMzExMC8GA1UEAxMoMTQ0MEMzNERENjUzMjUy
MDJFM0IwNzk1MURBMDQ5Q0Q1RUU1OUM1MTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAPA+FiGPN3OojGtETqSAH1SlP20ty400G3LI0f5lsO8QVMCgfpak
doejI80R7Zjb87uHuxZTREroiNqvCtUgVSWUKrdKPkCb/jcdBqesW7vgyiMteozT
3JvKtXSi4StRnLNtFqAHcwJ3+iuQ+pYQPMlDyy50Aut7hePW7wSkTGL4MXUCK3T4
iZHTpBweEQtxEF1cbl17O6ZLO0BRJqfAi25rgwkdGghiuzMfz3VbVie+oDLNxS6+
hhz2gQ4QDq6ZKvZq+oFMCbT2tWTn+9vFW9ge/Foqfmh0MT/fZbZCW5SzkHdO+E1W
g0zn+cxO2D8I/UcxhfrheqU2LncMmy+fUWkCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBQUQMNN1lMlIC47B5UdoEnNXuWcUTAfBgNVHSMEGDAWgBTLgwCyBlm7lRBg9gsf
S8YJGvJ2OTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNzgzL3k0TUFzZ1padTVVUVlQWUxIMHZHQ1JyeWRqay5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3k0TUFzZ1padTVVUVlQWUxIMHZHQ1Jy
eWRqay5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC83ODMvRkVERFRkWlRKU0F1T3dlVkhhQkp6VjdsbkZFLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEA25K4DANBgkqhkiG9w0BAQsFAAOCAQEAiRwrILQNea8jWYuOc43ve/jA2g10
EmtqizpEhYA4BQehiaAYz2YYYV1LQa8OnNAsNgobi8v9TjXaaN3dLhOVk5KBpv/a
U2VIVZ19iBK/oxwVdxvnWxM2Pta/gmVt2pm63Eyq1YcLFoqudvcZ/ztAgo7PkmMg
oKG94zb5LjiaGfp4lbYTRyVbjN72cYjJL2YwVLrViEUUtauWGFYQsLfaXsaeJ7fF
uHl3Oq346rPgzjeCUq1z0OTfeC5tUm59GvOfXgSvdsW6mUdtXc0qr2VPLA9euoSQ
7mFo29j4wdv6LrY5hp4ARQPlfdpbnJD0hR9/nVEHJJzrUUU1wlOt2LDbfA==
-----END CERTIFICATE-----
Generated at Mon Aug 11 13:01:22 2025 by rpki-client