Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/948/E5t2NjwcKl1UxVfgGiid7WSU6_o.roa
File:                     E5t2NjwcKl1UxVfgGiid7WSU6_o.roa (raw, json)
Hash identifier:          E8rUG3lMVIOercAeB6EsEzH12jkpBJFweIa31DUngNw=
Subject key identifier:   13:9B:76:36:3C:1C:2A:5D:54:C5:57:E0:1A:28:9D:ED:64:94:EB:FA
Certificate issuer:       /CN=C4B9536C4EC785B8812E53A219D2B09A7DCBCE0C
Certificate serial:       42
Authority key identifier: C4:B9:53:6C:4E:C7:85:B8:81:2E:53:A2:19:D2:B0:9A:7D:CB:CE:0C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/E5t2NjwcKl1UxVfgGiid7WSU6_o.roa
Signing time:             Tue 10 Jun 2025 10:48:49 +0000
ROA not before:           Tue 10 Jun 2025 10:48:49 +0000
ROA not after:            Sat 23 May 2026 09:51:00 +0000
asID:                     38628
IP address blocks:        115.124.48.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 28 Jun 2025 21:03:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 66 (0x42)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C4B9536C4EC785B8812E53A219D2B09A7DCBCE0C
        Validity
            Not Before: Jun 10 10:48:49 2025 GMT
            Not After : May 23 09:51:00 2026 GMT
        Subject: CN=139B76363C1C2A5D54C557E01A289DED6494EBFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:4e:34:67:e3:70:40:89:fc:dc:74:63:82:44:
                    eb:dd:be:43:31:ad:53:3d:03:d4:24:79:d3:ed:39:
                    af:e7:9a:d9:d3:27:f5:05:52:bc:72:83:de:4b:41:
                    18:43:33:7a:6e:94:b8:e1:7b:19:ff:5d:7d:0f:62:
                    1b:4f:dc:07:dd:c8:bf:b2:0f:46:1b:8e:2b:ad:f7:
                    01:d8:f3:46:96:e8:9d:7c:83:34:29:61:db:7f:33:
                    87:9b:88:06:89:67:5d:ff:9c:44:8a:0e:88:56:07:
                    ae:36:8d:94:d7:4c:0c:90:5a:5d:4e:60:b9:fd:69:
                    19:90:03:57:31:c8:a5:2e:ba:df:a0:3c:03:83:4c:
                    f1:6c:a0:91:f7:ca:c5:83:d8:10:42:3e:51:54:ff:
                    da:0e:9b:61:13:88:ee:bb:38:6b:13:c5:a6:95:c8:
                    6e:cd:0a:ea:40:36:8e:4c:ee:ec:97:82:87:21:b7:
                    30:82:6f:30:dc:4d:e7:be:37:cb:a1:af:da:63:3a:
                    cf:d1:4a:3b:5a:69:fa:39:06:b6:85:42:61:dc:4b:
                    30:4a:d2:36:58:f1:e7:97:0f:8a:3c:b9:c6:ef:80:
                    b5:7c:f1:92:11:2d:1e:a3:17:17:47:e2:dc:d6:ff:
                    97:09:f4:21:26:f2:e4:7f:55:f1:0f:54:04:6c:0e:
                    48:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:9B:76:36:3C:1C:2A:5D:54:C5:57:E0:1A:28:9D:ED:64:94:EB:FA
            X509v3 Authority Key Identifier:
                keyid:C4:B9:53:6C:4E:C7:85:B8:81:2E:53:A2:19:D2:B0:9A:7D:CB:CE:0C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/E5t2NjwcKl1UxVfgGiid7WSU6_o.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.124.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         32:77:3e:8e:b3:fa:c6:f8:ad:de:ad:58:4d:66:28:f3:71:c0:
         ed:7e:3a:83:e4:b0:84:5c:ee:f8:03:96:76:56:a6:f9:66:9f:
         be:68:19:eb:59:c5:ce:ff:77:aa:e8:2a:4b:17:f3:4f:eb:1f:
         6e:59:dc:b2:d0:62:8c:15:f4:81:ba:9a:e5:c7:fb:5c:ea:96:
         66:4b:b5:ef:f1:0e:18:53:82:dd:47:29:c0:88:32:ca:0d:31:
         f6:9e:5f:3e:fb:03:3e:34:04:f6:05:25:9e:23:8b:93:33:03:
         91:20:83:71:2f:c1:c3:ea:65:9d:14:0e:87:73:be:64:9a:0b:
         02:97:4a:a9:3f:35:64:ff:82:c0:05:fc:e7:65:7c:c1:23:db:
         2e:e7:02:12:8d:f3:ce:f6:d3:73:6a:33:bf:e1:a8:e1:ca:49:
         ac:95:6a:9b:00:8f:b2:3d:aa:48:98:3e:b5:46:a1:9d:e7:ec:
         86:37:ab:8e:c9:30:94:ed:44:f3:09:7f:33:ac:22:44:f7:a7:
         2c:b8:2c:32:44:e7:3b:d9:82:e4:c2:ad:b2:be:f6:2d:5c:a2:
         be:fb:52:bd:b9:ef:bf:c4:34:bf:dc:4b:c3:51:10:24:2f:cf:
         81:04:fe:81:d6:99:58:cf:0d:18:96:26:cc:38:ab:1c:1a:d4:
         cc:8e:77:09
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBQjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDNEI5
NTM2QzRFQzc4NUI4ODEyRTUzQTIxOUQyQjA5QTdEQ0JDRTBDMB4XDTI1MDYxMDEw
NDg0OVoXDTI2MDUyMzA5NTEwMFowMzExMC8GA1UEAxMoMTM5Qjc2MzYzQzFDMkE1
RDU0QzU1N0UwMUEyODlERUQ2NDk0RUJGQTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAO1ONGfjcECJ/Nx0Y4JE692+QzGtUz0D1CR50+05r+ea2dMn9QVS
vHKD3ktBGEMzem6UuOF7Gf9dfQ9iG0/cB93Iv7IPRhuOK633AdjzRpbonXyDNClh
238zh5uIBolnXf+cRIoOiFYHrjaNlNdMDJBaXU5guf1pGZADVzHIpS6636A8A4NM
8WygkffKxYPYEEI+UVT/2g6bYROI7rs4axPFppXIbs0K6kA2jkzu7JeChyG3MIJv
MNxN5743y6Gv2mM6z9FKO1pp+jkGtoVCYdxLMErSNljx55cPijy5xu+AtXzxkhEt
HqMXF0fi3Nb/lwn0ISby5H9V8Q9UBGwOSP0CAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBQTm3Y2PBwqXVTFV+AaKJ3tZJTr+jAfBgNVHSMEGDAWgBTEuVNsTseFuIEuU6IZ
0rCafcvODDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvOTQ4L3hMbFRiRTdIaGJpQkxsT2lHZEt3bW4zTHpndy5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3hMbFRiRTdIaGJpQkxsT2lHZEt3bW4z
THpndy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC85NDgvRTV0Mk5qd2NLbDFVeFZmZ0dpaWQ3V1NVNl9vLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBHN8MDANBgkqhkiG9w0BAQsFAAOCAQEAMnc+jrP6xvit3q1YTWYo83HA7X46
g+SwhFzu+AOWdlam+WafvmgZ61nFzv93qugqSxfzT+sfblncstBijBX0gbqa5cf7
XOqWZku17/EOGFOC3UcpwIgyyg0x9p5fPvsDPjQE9gUlniOLkzMDkSCDcS/Bw+pl
nRQOh3O+ZJoLApdKqT81ZP+CwAX852V8wSPbLucCEo3zzvbTc2ozv+Go4cpJrJVq
mwCPsj2qSJg+tUahnefshjerjskwlO1E8wl/M6wiRPenLLgsMkTnO9mC5MKtsr72
LVyivvtSvbnvv8Q0v9xLw1EQJC/PgQT+gdaZWM8NGJYmzDirHBrUzI53CQ==
-----END CERTIFICATE-----
Generated at Sun Jun 22 02:52:07 2025 by rpki-client