Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/905/8vHpx-yfZN9iUCED8szg71LpM_E.roa
File:                     8vHpx-yfZN9iUCED8szg71LpM_E.roa (raw, json)
Hash identifier:          xU4Of025Eods3fdUO7rQWw2RVzxig/SQxaaMkVGaZwQ=
Subject key identifier:   F2:F1:E9:C7:EC:9F:64:DF:62:50:21:03:F2:CC:E0:EF:52:E9:33:F1
Certificate issuer:       /CN=FAEF57FF144D25094E460E0FD38C80379334ED6D
Certificate serial:       2B
Authority key identifier: FA:EF:57:FF:14:4D:25:09:4E:46:0E:0F:D3:8C:80:37:93:34:ED:6D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-u9X_xRNJQlORg4P04yAN5M07W0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/905/8vHpx-yfZN9iUCED8szg71LpM_E.roa
Signing time:             Fri 01 Aug 2025 01:36:00 +0000
ROA not before:           Fri 01 Aug 2025 01:36:00 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     24255
IP address blocks:        103.198.212.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/905/-u9X_xRNJQlORg4P04yAN5M07W0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/905/-u9X_xRNJQlORg4P04yAN5M07W0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-u9X_xRNJQlORg4P04yAN5M07W0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 43 (0x2b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FAEF57FF144D25094E460E0FD38C80379334ED6D
        Validity
            Not Before: Aug  1 01:36:00 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=F2F1E9C7EC9F64DF62502103F2CCE0EF52E933F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:52:dc:45:97:56:e7:bc:89:4f:60:c1:87:9c:
                    7d:98:2c:44:41:53:b6:52:68:5d:a4:83:5b:e5:ae:
                    b7:ee:ca:a2:cd:4c:3c:f2:02:d1:4b:52:58:9c:47:
                    25:98:99:0d:2a:69:2f:dc:9c:74:51:73:e5:41:76:
                    b5:b1:66:2f:55:f5:f1:f6:1f:8d:c0:72:86:8d:b3:
                    e8:cd:36:07:f0:3b:78:5e:f4:17:36:39:94:73:b7:
                    bd:2b:91:13:0d:71:34:b3:a9:8f:2b:90:e4:a1:64:
                    69:ee:e8:9a:b3:e7:4b:b5:04:2b:37:27:c1:c0:a2:
                    95:0a:51:b3:9d:e7:fe:51:a5:9e:9a:4e:87:ee:3c:
                    82:3c:87:53:3c:35:15:02:d4:09:0f:40:71:b3:2d:
                    17:9d:d5:cf:3b:f9:02:10:51:95:58:77:8c:68:dc:
                    a5:3a:7f:c2:0f:21:25:0f:0d:92:2b:c6:6e:18:d3:
                    d5:52:24:8f:df:cb:8e:d8:b8:cc:9b:ef:e5:af:27:
                    93:c3:11:69:bb:c8:da:c2:e4:db:ce:5a:f3:d3:2d:
                    a3:34:e8:2c:bc:7d:66:1b:49:e3:3a:6c:46:56:0b:
                    f1:fd:99:40:fb:d5:da:7e:0b:d9:36:4e:87:91:2f:
                    2d:fd:90:10:10:50:91:b6:ca:e0:27:4a:28:bd:46:
                    4a:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:F1:E9:C7:EC:9F:64:DF:62:50:21:03:F2:CC:E0:EF:52:E9:33:F1
            X509v3 Authority Key Identifier:
                keyid:FA:EF:57:FF:14:4D:25:09:4E:46:0E:0F:D3:8C:80:37:93:34:ED:6D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/905/-u9X_xRNJQlORg4P04yAN5M07W0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-u9X_xRNJQlORg4P04yAN5M07W0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/905/8vHpx-yfZN9iUCED8szg71LpM_E.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.198.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b8:d1:89:8f:30:b3:6c:1f:e3:86:7c:1d:c1:32:de:07:d3:cf:
         a2:88:0d:44:98:60:0a:eb:34:02:cb:cc:f8:84:3f:a7:1b:ba:
         0d:f4:86:0b:d4:d3:f1:29:31:b1:e5:2d:29:db:07:3f:06:ef:
         96:01:46:6e:78:bf:af:5b:44:18:23:a7:fc:e7:c8:a0:49:93:
         a3:d2:d0:cb:b2:6d:e5:b9:7d:74:1a:ef:2a:49:86:49:c2:9a:
         43:d1:ac:f1:4e:19:9f:f0:ca:f5:b7:36:52:ec:1b:8f:5d:15:
         c0:66:60:eb:9c:23:9f:22:f6:22:ce:89:31:0c:5f:1c:4e:d9:
         0b:da:16:1d:50:a7:ce:65:70:94:b2:20:f1:d9:39:ec:81:e8:
         13:ae:5f:0e:a2:0c:d8:f6:2f:2f:17:39:c5:83:a8:15:0e:cf:
         63:0b:77:27:7c:3b:54:bd:07:da:99:bc:3b:7f:5b:f3:a1:95:
         0c:8d:d4:3d:ce:12:7b:78:c1:2b:29:27:bc:0b:f4:a8:94:ff:
         3e:d1:56:0d:32:88:f3:1d:14:57:0f:ff:34:93:27:e5:4e:e6:
         7c:b2:13:39:c6:09:57:d3:b2:fb:15:03:74:4f:bb:56:d7:25:
         76:92:10:9c:fb:8c:e7:cc:30:eb:0a:0a:68:d4:c8:1e:f7:98:
         93:90:06:8c
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBKzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhGQUVG
NTdGRjE0NEQyNTA5NEU0NjBFMEZEMzhDODAzNzkzMzRFRDZEMB4XDTI1MDgwMTAx
MzYwMFoXDTI2MDczMDA2MjkwOFowMzExMC8GA1UEAxMoRjJGMUU5QzdFQzlGNjRE
RjYyNTAyMTAzRjJDQ0UwRUY1MkU5MzNGMTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKlS3EWXVue8iU9gwYecfZgsREFTtlJoXaSDW+Wut+7Kos1MPPIC
0UtSWJxHJZiZDSppL9ycdFFz5UF2tbFmL1X18fYfjcByho2z6M02B/A7eF70FzY5
lHO3vSuREw1xNLOpjyuQ5KFkae7omrPnS7UEKzcnwcCilQpRs53n/lGlnppOh+48
gjyHUzw1FQLUCQ9AcbMtF53Vzzv5AhBRlVh3jGjcpTp/wg8hJQ8NkivGbhjT1VIk
j9/Ljti4zJvv5a8nk8MRabvI2sLk285a89MtozToLLx9ZhtJ4zpsRlYL8f2ZQPvV
2n4L2TZOh5EvLf2QEBBQkbbK4CdKKL1GSrMCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBTy8enH7J9k32JQIQPyzODvUukz8TAfBgNVHSMEGDAWgBT671f/FE0lCU5GDg/T
jIA3kzTtbTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvOTA1Ly11OVhfeFJOSlFsT1JnNFAwNHlBTjVNMDdXMC5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLy11OVhfeFJOSlFsT1JnNFAwNHlBTjVN
MDdXMC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC85MDUvOHZIcHgteWZaTjlpVUNFRDhzemc3MUxwTV9FLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAmfG1DANBgkqhkiG9w0BAQsFAAOCAQEAuNGJjzCzbB/jhnwdwTLeB9PPoogN
RJhgCus0AsvM+IQ/pxu6DfSGC9TT8SkxseUtKdsHPwbvlgFGbni/r1tEGCOn/OfI
oEmTo9LQy7Jt5bl9dBrvKkmGScKaQ9Gs8U4Zn/DK9bc2Uuwbj10VwGZg65wjnyL2
Is6JMQxfHE7ZC9oWHVCnzmVwlLIg8dk57IHoE65fDqIM2PYvLxc5xYOoFQ7PYwt3
J3w7VL0H2pm8O39b86GVDI3UPc4Se3jBKyknvAv0qJT/PtFWDTKI8x0UVw//NJMn
5U7mfLITOcYJV9Oy+xUDdE+7VtcldpIQnPuM58ww6woKaNTIHveYk5AGjA==
-----END CERTIFICATE-----
Generated at Mon Aug 11 13:00:47 2025 by rpki-client