Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/881/LQR-WaxdQNg3kHwIbs0SRQd1qxs.roa
File:                     LQR-WaxdQNg3kHwIbs0SRQd1qxs.roa (raw, json)
Hash identifier:          A5Y2ercycOCD04LrzpYnvmJ3BtlZZu+Wqe9CtD6Ah1I=
Subject key identifier:   2D:04:7E:59:AC:5D:40:D8:37:90:7C:08:6E:CD:12:45:07:75:AB:1B
Certificate issuer:       /CN=D00E08393688B04737874ECD63DD8BE78E5EF2D0
Certificate serial:       59
Authority key identifier: D0:0E:08:39:36:88:B0:47:37:87:4E:CD:63:DD:8B:E7:8E:5E:F2:D0
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0A4IOTaIsEc3h07NY92L545e8tA.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/881/LQR-WaxdQNg3kHwIbs0SRQd1qxs.roa
Signing time:             Fri 01 Aug 2025 01:29:12 +0000
ROA not before:           Fri 01 Aug 2025 01:29:12 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     23805
IP address blocks:        219.100.80.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/881/0A4IOTaIsEc3h07NY92L545e8tA.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/881/0A4IOTaIsEc3h07NY92L545e8tA.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0A4IOTaIsEc3h07NY92L545e8tA.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 89 (0x59)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D00E08393688B04737874ECD63DD8BE78E5EF2D0
        Validity
            Not Before: Aug  1 01:29:12 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=2D047E59AC5D40D837907C086ECD12450775AB1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:cb:a7:20:a0:f2:c4:ee:79:82:d7:16:72:10:
                    76:ee:fa:5c:e0:47:40:e8:1a:7b:42:3d:f0:3e:aa:
                    ea:a7:2b:73:39:0a:03:a9:20:c4:6a:30:6e:db:4a:
                    92:4a:92:fc:9e:59:9a:3e:72:dc:79:9a:94:dd:2f:
                    d1:54:70:0e:2c:46:6e:c9:c5:71:28:b5:90:49:bf:
                    ff:50:f0:42:1b:c0:5f:1b:87:88:ed:89:e8:45:eb:
                    35:c6:4b:7e:8e:15:4a:d5:e6:91:42:26:46:20:b9:
                    48:4a:19:c0:3c:85:21:68:af:3b:de:9c:da:c3:65:
                    e0:8e:31:f9:f9:45:8b:63:dd:ab:6a:40:19:24:ca:
                    fc:71:08:e0:3a:5f:8f:50:94:f5:55:fa:4c:e8:df:
                    ee:d8:46:60:3d:2c:7d:d8:34:9c:4b:2d:77:50:8c:
                    c6:aa:49:85:22:73:cc:02:15:5a:c6:a6:75:03:9c:
                    32:79:9f:79:a7:02:a7:78:f9:fc:db:79:2b:fc:aa:
                    98:df:6d:49:35:be:02:95:2f:0a:fe:3d:ec:a5:3b:
                    a4:13:6e:33:44:33:cc:c7:2f:2a:c1:4c:2e:9c:ff:
                    a7:b5:3f:26:dd:79:f0:e9:e3:7e:b8:19:60:51:39:
                    58:6d:65:65:04:f1:a9:82:61:15:47:a7:da:b6:2c:
                    e5:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:04:7E:59:AC:5D:40:D8:37:90:7C:08:6E:CD:12:45:07:75:AB:1B
            X509v3 Authority Key Identifier:
                keyid:D0:0E:08:39:36:88:B0:47:37:87:4E:CD:63:DD:8B:E7:8E:5E:F2:D0

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/881/0A4IOTaIsEc3h07NY92L545e8tA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0A4IOTaIsEc3h07NY92L545e8tA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/881/LQR-WaxdQNg3kHwIbs0SRQd1qxs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.100.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5e:b8:0f:44:b0:ee:da:fa:94:5b:fd:40:fc:fb:f4:38:30:45:
         7a:70:a1:c1:f0:28:22:8c:ea:40:f3:d5:72:79:6f:50:e6:06:
         dd:67:fc:19:73:f7:92:76:6d:39:29:6b:f6:9c:f8:66:0e:b7:
         ea:dc:79:31:45:26:68:48:40:89:a2:59:ce:34:fc:1c:4e:54:
         4b:59:91:46:e9:9a:58:8a:d3:3b:54:b8:f6:8e:6c:6b:4f:18:
         a1:36:3f:3a:07:4d:9b:df:d2:d0:e4:ed:27:7f:e8:a7:8e:42:
         53:b8:09:d7:1b:d4:fb:43:81:f4:b1:e2:fb:ae:ac:8a:71:de:
         73:ef:b3:7b:0d:40:e4:a8:bf:b6:cf:c6:e2:5e:c8:1d:06:ed:
         5f:eb:ee:c1:82:51:51:bb:05:05:9e:bf:52:66:6e:20:ec:5d:
         ea:57:19:ba:11:2f:41:71:fa:31:1e:ba:7d:33:56:60:d4:8a:
         dd:9f:a7:d6:5f:99:3d:ef:db:49:f1:df:61:fd:a9:3b:e3:a4:
         72:ec:6f:cc:8e:7d:ef:c7:33:51:5e:32:16:81:64:9f:ca:47:
         18:cb:66:35:fd:60:1c:50:48:a3:5f:43:6f:06:97:14:47:61:
         c2:76:63:c6:87:4b:a5:cf:42:7c:66:19:84:6b:ed:f2:a2:06:
         2f:8d:03:0e
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBWTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhEMDBF
MDgzOTM2ODhCMDQ3Mzc4NzRFQ0Q2M0REOEJFNzhFNUVGMkQwMB4XDTI1MDgwMTAx
MjkxMloXDTI2MDczMDA2MjkwOFowMzExMC8GA1UEAxMoMkQwNDdFNTlBQzVENDBE
ODM3OTA3QzA4NkVDRDEyNDUwNzc1QUIxQjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMvLpyCg8sTueYLXFnIQdu76XOBHQOgae0I98D6q6qcrczkKA6kg
xGowbttKkkqS/J5Zmj5y3HmalN0v0VRwDixGbsnFcSi1kEm//1DwQhvAXxuHiO2J
6EXrNcZLfo4VStXmkUImRiC5SEoZwDyFIWivO96c2sNl4I4x+flFi2Pdq2pAGSTK
/HEI4Dpfj1CU9VX6TOjf7thGYD0sfdg0nEstd1CMxqpJhSJzzAIVWsamdQOcMnmf
eacCp3j5/Nt5K/yqmN9tSTW+ApUvCv497KU7pBNuM0QzzMcvKsFMLpz/p7U/Jt15
8OnjfrgZYFE5WG1lZQTxqYJhFUen2rYs5Y0CAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBQtBH5ZrF1A2DeQfAhuzRJFB3WrGzAfBgNVHSMEGDAWgBTQDgg5NoiwRzeHTs1j
3Yvnjl7y0DAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvODgxLzBBNElPVGFJc0VjM2gwN05ZOTJMNTQ1ZTh0QS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzBBNElPVGFJc0VjM2gwN05ZOTJMNTQ1
ZTh0QS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC84ODEvTFFSLVdheGRRTmcza0h3SWJzMFNSUWQxcXhzLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAttkUDANBgkqhkiG9w0BAQsFAAOCAQEAXrgPRLDu2vqUW/1A/Pv0ODBFenCh
wfAoIozqQPPVcnlvUOYG3Wf8GXP3knZtOSlr9pz4Zg636tx5MUUmaEhAiaJZzjT8
HE5US1mRRumaWIrTO1S49o5sa08YoTY/OgdNm9/S0OTtJ3/op45CU7gJ1xvU+0OB
9LHi+66sinHec++zew1A5Ki/ts/G4l7IHQbtX+vuwYJRUbsFBZ6/UmZuIOxd6lcZ
uhEvQXH6MR66fTNWYNSK3Z+n1l+ZPe/bSfHfYf2pO+OkcuxvzI5978czUV4yFoFk
n8pHGMtmNf1gHFBIo19DbwaXFEdhwnZjxodLpc9CfGYZhGvt8qIGL40DDg==
-----END CERTIFICATE-----
Generated at Mon Aug 11 13:34:44 2025 by rpki-client