Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/989/XTDBwHhdv-CknN3rzcmaqjaX4E8.roa
File:                     XTDBwHhdv-CknN3rzcmaqjaX4E8.roa (raw, json)
Hash identifier:          E8dm6iisZQCiXKjJGvVB8CKpwE3UPraqcXR+iodICa0=
Subject key identifier:   5D:30:C1:C0:78:5D:BF:E0:A4:9C:DD:EB:CD:C9:9A:AA:36:97:E0:4F
Certificate issuer:       /CN=8D26E0D17E30D8BF5714F4BA92EEEB0D22DDDB1D
Certificate serial:       7C
Authority key identifier: 8D:26:E0:D1:7E:30:D8:BF:57:14:F4:BA:92:EE:EB:0D:22:DD:DB:1D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jSbg0X4w2L9XFPS6ku7rDSLd2x0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/989/XTDBwHhdv-CknN3rzcmaqjaX4E8.roa
Signing time:             Mon 14 Jul 2025 08:30:30 +0000
ROA not before:           Mon 14 Jul 2025 08:30:30 +0000
ROA not after:            Mon 15 Jun 2026 01:30:02 +0000
asID:                     63804
IP address blocks:        101.78.4.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/989/jSbg0X4w2L9XFPS6ku7rDSLd2x0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/989/jSbg0X4w2L9XFPS6ku7rDSLd2x0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jSbg0X4w2L9XFPS6ku7rDSLd2x0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124 (0x7c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D26E0D17E30D8BF5714F4BA92EEEB0D22DDDB1D
        Validity
            Not Before: Jul 14 08:30:30 2025 GMT
            Not After : Jun 15 01:30:02 2026 GMT
        Subject: CN=5D30C1C0785DBFE0A49CDDEBCDC99AAA3697E04F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:7c:60:1d:dc:ad:3f:b4:58:c0:6d:32:fc:75:
                    35:63:03:56:23:0f:37:bc:6b:99:0e:09:4a:b3:bd:
                    a0:50:35:9b:d3:5f:cb:62:e8:a2:8f:3e:7a:ea:ca:
                    6e:c8:11:10:6f:7f:3c:42:95:96:70:22:aa:1f:ac:
                    c0:d8:a4:64:c9:87:f0:2e:15:a7:d0:f5:95:8a:0d:
                    21:4a:9a:c2:32:fd:38:bc:38:ff:73:db:d6:1a:ab:
                    f6:38:f0:cd:c9:7a:d5:20:bc:a7:0d:ad:9a:5f:94:
                    d1:83:7d:f1:a9:a3:31:a1:ba:b3:5d:88:79:47:c6:
                    09:f4:80:72:fb:f6:a2:6a:52:98:bc:b6:13:83:b2:
                    1a:58:51:48:38:77:23:73:47:b5:39:74:76:9d:6f:
                    b5:53:51:88:9c:26:e7:32:c1:e4:cd:32:2d:61:40:
                    48:cd:0c:e7:36:59:29:16:19:a7:e8:f7:d9:a0:e2:
                    ef:14:b7:8d:20:cf:b8:aa:a3:2e:15:eb:2f:ca:fc:
                    bc:7e:98:67:1a:74:3f:d2:80:72:43:3a:a3:a7:42:
                    a4:e1:6d:1e:f7:a4:c0:83:63:b5:75:e9:b4:2d:68:
                    a3:30:a3:30:d5:cc:39:b7:48:1b:2f:76:07:d3:52:
                    a7:f5:c8:79:70:cf:74:c8:ec:50:ae:6e:5b:73:bd:
                    72:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:30:C1:C0:78:5D:BF:E0:A4:9C:DD:EB:CD:C9:9A:AA:36:97:E0:4F
            X509v3 Authority Key Identifier:
                keyid:8D:26:E0:D1:7E:30:D8:BF:57:14:F4:BA:92:EE:EB:0D:22:DD:DB:1D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/989/jSbg0X4w2L9XFPS6ku7rDSLd2x0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jSbg0X4w2L9XFPS6ku7rDSLd2x0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/989/XTDBwHhdv-CknN3rzcmaqjaX4E8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.78.4.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b7:d9:44:a3:68:6c:98:aa:5f:0e:28:4e:4f:cd:d0:43:fe:b7:
         b5:bc:45:60:0e:85:73:7b:24:13:fc:90:f5:34:e8:5c:bc:4c:
         67:58:f6:fc:e4:d7:c7:bd:6f:07:b1:b3:84:66:9d:74:57:d5:
         6b:39:4a:cd:9c:e2:86:20:92:e4:ae:e7:e1:17:cf:64:4c:cc:
         9f:bd:e5:0f:2d:12:9b:35:97:ec:38:52:2c:3b:c9:59:f8:21:
         f0:dd:89:34:7e:d5:ac:4f:55:a1:fd:8c:a7:31:72:b7:e5:f4:
         19:7e:a9:d2:a8:71:12:29:4a:ba:7d:7d:e0:6b:6b:2b:cf:cf:
         b6:e6:26:aa:74:7f:94:fb:1d:0b:60:d3:91:ea:94:d3:65:76:
         d0:9c:ba:30:fc:4b:f7:1d:27:a1:b3:22:54:12:13:60:44:0f:
         f0:b3:c8:ef:06:46:63:e6:e4:96:d0:02:c3:dd:a7:b6:96:7e:
         9e:e1:a0:f9:89:28:95:16:54:f1:e0:95:d9:68:88:ba:b5:c0:
         f4:f6:c9:96:ff:76:77:ce:92:1d:75:c6:bd:9e:b1:46:25:c0:
         05:a2:e9:75:92:f1:62:9e:24:a9:90:dc:c4:ee:61:68:9a:21:
         d0:ab:a7:35:53:20:0e:7f:cd:d8:6f:78:af:3b:3e:24:43:b7:
         8d:8d:43:0f
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBfDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4RDI2
RTBEMTdFMzBEOEJGNTcxNEY0QkE5MkVFRUIwRDIyREREQjFEMB4XDTI1MDcxNDA4
MzAzMFoXDTI2MDYxNTAxMzAwMlowMzExMC8GA1UEAxMoNUQzMEMxQzA3ODVEQkZF
MEE0OUNEREVCQ0RDOTlBQUEzNjk3RTA0RjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALR8YB3crT+0WMBtMvx1NWMDViMPN7xrmQ4JSrO9oFA1m9Nfy2Lo
oo8+eurKbsgREG9/PEKVlnAiqh+swNikZMmH8C4Vp9D1lYoNIUqawjL9OLw4/3Pb
1hqr9jjwzcl61SC8pw2tml+U0YN98amjMaG6s12IeUfGCfSAcvv2ompSmLy2E4Oy
GlhRSDh3I3NHtTl0dp1vtVNRiJwm5zLB5M0yLWFASM0M5zZZKRYZp+j32aDi7xS3
jSDPuKqjLhXrL8r8vH6YZxp0P9KAckM6o6dCpOFtHvekwINjtXXptC1oozCjMNXM
ObdIGy92B9NSp/XIeXDPdMjsUK5uW3O9cpkCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBRdMMHAeF2/4KSc3evNyZqqNpfgTzAfBgNVHSMEGDAWgBSNJuDRfjDYv1cU9LqS
7usNIt3bHTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvOTg5L2pTYmcwWDR3Mkw5WEZQUzZrdTdyRFNMZDJ4MC5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2pTYmcwWDR3Mkw5WEZQUzZrdTdyRFNM
ZDJ4MC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC85ODkvWFREQndIaGR2LUNrbk4zcnpjbWFxamFYNEU4LnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAWVOBDANBgkqhkiG9w0BAQsFAAOCAQEAt9lEo2hsmKpfDihOT83QQ/63tbxF
YA6Fc3skE/yQ9TToXLxMZ1j2/OTXx71vB7GzhGaddFfVazlKzZzihiCS5K7n4RfP
ZEzMn73lDy0SmzWX7DhSLDvJWfgh8N2JNH7VrE9Vof2MpzFyt+X0GX6p0qhxEilK
un194GtrK8/PtuYmqnR/lPsdC2DTkeqU02V20Jy6MPxL9x0nobMiVBITYEQP8LPI
7wZGY+bkltACw92ntpZ+nuGg+YkolRZU8eCV2WiIurXA9PbJlv92d86SHXXGvZ6x
RiXABaLpdZLxYp4kqZDcxO5haJoh0KunNVMgDn/N2G94rzs+JEO3jY1DDw==
-----END CERTIFICATE-----
Generated at Mon Aug 11 13:28:39 2025 by rpki-client