Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/920/ROVjrsh3HaPmEI4bJ_TO6P9qvEQ.roa
File:                     ROVjrsh3HaPmEI4bJ_TO6P9qvEQ.roa (raw, json)
Hash identifier:          mj1m4bFbnyt0PhSyYMze+kiHWUuuVwO1dVciY2CyaFs=
Subject key identifier:   44:E5:63:AE:C8:77:1D:A3:E6:10:8E:1B:27:F4:CE:E8:FF:6A:BC:44
Certificate issuer:       /CN=C8930155500B58FF73A8A0882185C66AC6A0D3A0
Certificate serial:       1A
Authority key identifier: C8:93:01:55:50:0B:58:FF:73:A8:A0:88:21:85:C6:6A:C6:A0:D3:A0
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yJMBVVALWP9zqKCIIYXGasag06A.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/920/ROVjrsh3HaPmEI4bJ_TO6P9qvEQ.roa
Signing time:             Thu 24 Apr 2025 07:06:51 +0000
ROA not before:           Thu 24 Apr 2025 07:06:51 +0000
ROA not after:            Wed 15 Apr 2026 01:30:03 +0000
asID:                     24279
IP address blocks:        110.232.136.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/920/yJMBVVALWP9zqKCIIYXGasag06A.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/920/yJMBVVALWP9zqKCIIYXGasag06A.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yJMBVVALWP9zqKCIIYXGasag06A.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 14:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 26 (0x1a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8930155500B58FF73A8A0882185C66AC6A0D3A0
        Validity
            Not Before: Apr 24 07:06:51 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=44E563AEC8771DA3E6108E1B27F4CEE8FF6ABC44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:55:a2:66:8f:7a:17:c1:45:88:f4:34:42:ab:
                    f5:7d:49:56:a3:10:47:7f:d6:4e:21:3c:29:fb:94:
                    14:77:45:c2:57:58:5d:d1:2e:81:20:28:18:df:7a:
                    e9:92:df:b4:ed:59:65:23:60:e0:d1:37:11:25:d6:
                    29:16:7d:e5:93:49:72:a1:e5:a0:b6:fb:ed:b9:03:
                    ab:7f:40:e0:72:89:fd:99:8a:ca:32:6e:74:24:fd:
                    49:41:61:2c:67:04:c6:5f:08:2f:80:fd:b8:f5:5b:
                    6e:9e:84:ca:df:af:94:7d:83:d5:5c:26:8b:2e:41:
                    0e:b1:41:9d:59:a2:6c:7a:a6:63:ea:08:ea:e5:fa:
                    79:3e:91:06:39:b6:5a:a6:12:b3:cb:bc:6a:44:cb:
                    15:2f:95:4b:a7:47:a1:ad:93:9e:6f:4e:b8:ca:6e:
                    05:85:e5:78:8b:78:05:f8:8e:19:48:b7:6d:03:50:
                    60:2a:a9:e6:22:56:3e:3e:43:34:5a:15:d6:01:d4:
                    14:74:0c:9a:bc:f1:de:6d:2a:1b:e4:41:a0:73:71:
                    a2:8c:63:dd:47:82:2e:5b:35:85:9c:70:d2:72:38:
                    7e:a3:59:c3:27:ae:1e:3c:f1:08:80:c0:c0:0d:8e:
                    49:3a:72:1f:cb:ae:eb:ac:62:51:90:89:e3:5b:07:
                    ca:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:E5:63:AE:C8:77:1D:A3:E6:10:8E:1B:27:F4:CE:E8:FF:6A:BC:44
            X509v3 Authority Key Identifier:
                keyid:C8:93:01:55:50:0B:58:FF:73:A8:A0:88:21:85:C6:6A:C6:A0:D3:A0

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/920/yJMBVVALWP9zqKCIIYXGasag06A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yJMBVVALWP9zqKCIIYXGasag06A.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/920/ROVjrsh3HaPmEI4bJ_TO6P9qvEQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.232.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a5:94:65:bb:3c:f1:61:a6:2e:7b:8e:97:16:07:df:3f:2b:97:
         d1:19:1f:8c:26:ca:7f:06:8b:63:7f:76:c0:32:e2:64:89:17:
         d0:e1:a8:cf:e0:d4:0a:ab:22:01:9c:7f:0b:47:51:ed:58:ae:
         f0:cf:26:10:21:b5:0a:ab:d6:88:e8:56:75:fa:fe:aa:a2:8f:
         41:76:7a:aa:ff:26:dd:40:dc:fc:34:8f:09:c6:7b:d2:e8:ac:
         fa:f0:27:9d:91:01:ff:e8:ba:b0:a4:23:c7:94:36:7e:2c:67:
         a0:77:62:8e:09:56:5d:6b:fe:b0:dc:ba:d8:c2:26:d6:3e:6d:
         b4:e9:4e:e7:a0:ac:df:17:76:95:a7:66:2f:87:02:78:c2:f6:
         c6:99:1f:43:ef:08:2f:ca:66:b0:e3:1b:58:da:de:74:03:08:
         f8:b6:65:ae:fc:b2:fb:2a:ae:f4:ba:11:ba:e8:df:1d:39:1f:
         f9:49:7d:b1:53:fb:51:57:4c:49:71:60:c6:59:96:e4:9f:72:
         15:31:59:d7:90:c6:7a:aa:49:f1:8d:4b:2e:c3:ff:f8:38:be:
         55:cd:78:9b:fe:03:3d:58:5c:af:be:d0:53:2e:52:9e:e7:08:
         de:8f:09:0a:d0:f2:88:72:5c:ed:86:43:fd:29:73:3a:f7:33:
         e1:fb:6b:31
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBGjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDODkz
MDE1NTUwMEI1OEZGNzNBOEEwODgyMTg1QzY2QUM2QTBEM0EwMB4XDTI1MDQyNDA3
MDY1MVoXDTI2MDQxNTAxMzAwM1owMzExMC8GA1UEAxMoNDRFNTYzQUVDODc3MURB
M0U2MTA4RTFCMjdGNENFRThGRjZBQkM0NDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALdVomaPehfBRYj0NEKr9X1JVqMQR3/WTiE8KfuUFHdFwldYXdEu
gSAoGN966ZLftO1ZZSNg4NE3ESXWKRZ95ZNJcqHloLb77bkDq39A4HKJ/ZmKyjJu
dCT9SUFhLGcExl8IL4D9uPVbbp6Eyt+vlH2D1Vwmiy5BDrFBnVmibHqmY+oI6uX6
eT6RBjm2WqYSs8u8akTLFS+VS6dHoa2Tnm9OuMpuBYXleIt4BfiOGUi3bQNQYCqp
5iJWPj5DNFoV1gHUFHQMmrzx3m0qG+RBoHNxooxj3UeCLls1hZxw0nI4fqNZwyeu
HjzxCIDAwA2OSTpyH8uu66xiUZCJ41sHyhUCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBRE5WOuyHcdo+YQjhsn9M7o/2q8RDAfBgNVHSMEGDAWgBTIkwFVUAtY/3OooIgh
hcZqxqDToDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvOTIwL3lKTUJWVkFMV1A5enFLQ0lJWVhHYXNhZzA2QS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3lKTUJWVkFMV1A5enFLQ0lJWVhHYXNh
ZzA2QS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC85MjAvUk9WanJzaDNIYVBtRUk0YkpfVE82UDlxdkVRLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAm7oiDANBgkqhkiG9w0BAQsFAAOCAQEApZRluzzxYaYue46XFgffPyuX0Rkf
jCbKfwaLY392wDLiZIkX0OGoz+DUCqsiAZx/C0dR7Viu8M8mECG1CqvWiOhWdfr+
qqKPQXZ6qv8m3UDc/DSPCcZ70uis+vAnnZEB/+i6sKQjx5Q2fixnoHdijglWXWv+
sNy62MIm1j5ttOlO56Cs3xd2ladmL4cCeML2xpkfQ+8IL8pmsOMbWNredAMI+LZl
rvyy+yqu9LoRuujfHTkf+Ul9sVP7UVdMSXFgxlmW5J9yFTFZ15DGeqpJ8Y1LLsP/
+Di+Vc14m/4DPVhcr77QUy5SnucI3o8JCtDyiHJc7YZD/SlzOvcz4ftrMQ==
-----END CERTIFICATE-----
Generated at Sat Apr 26 17:25:26 2025 by rpki-client