Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/11247/M37slby-n8A6np0ruNzU5MwPoOU.roa
File:                     M37slby-n8A6np0ruNzU5MwPoOU.roa (raw, json)
Hash identifier:          pAqyXnitAh6UxJxUbWcFxDYFRWT0igLdQBMrp025JFU=
Subject key identifier:   33:7E:EC:95:BC:BE:9F:C0:3A:9E:9D:2B:B8:DC:D4:E4:CC:0F:A0:E5
Certificate issuer:       /CN=EFC15649A8257F64FC942167E310AD38AD02CDBC
Certificate serial:       81
Authority key identifier: EF:C1:56:49:A8:25:7F:64:FC:94:21:67:E3:10:AD:38:AD:02:CD:BC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/M37slby-n8A6np0ruNzU5MwPoOU.roa
Signing time:             Thu 01 May 2025 01:31:58 +0000
ROA not before:           Thu 01 May 2025 01:31:58 +0000
ROA not after:            Wed 15 Apr 2026 01:30:03 +0000
asID:                     0
IP address blocks:        103.10.112.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 May 2025 09:16:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 129 (0x81)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EFC15649A8257F64FC942167E310AD38AD02CDBC
        Validity
            Not Before: May  1 01:31:58 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=337EEC95BCBE9FC03A9E9D2BB8DCD4E4CC0FA0E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d6:e9:3e:4a:f2:ed:2b:e5:b1:12:d7:42:03:
                    4d:f0:cb:30:d7:7d:f6:c0:22:7a:a7:5c:e1:8a:0b:
                    bb:65:93:6d:b2:10:48:24:44:7e:29:5d:f1:78:89:
                    e7:30:c9:93:a4:c4:d0:26:01:d4:12:bb:8e:5c:4e:
                    d8:4c:11:8d:87:8f:f2:e0:e8:25:1c:9e:9e:47:46:
                    24:cc:f4:2a:8f:16:25:68:94:3e:5e:31:51:8a:8e:
                    a1:3b:b9:3d:47:37:f1:ef:85:bd:d5:97:38:29:c5:
                    32:b2:85:40:70:20:cd:69:f8:2d:ac:aa:06:1d:a3:
                    eb:97:a6:71:2e:fc:b1:1d:a5:83:c2:a6:97:1b:6c:
                    27:67:7b:c7:d8:00:5c:ec:57:59:ac:80:14:3d:1e:
                    dc:60:25:8a:da:f2:1c:59:bf:35:6c:a1:59:e1:ce:
                    3f:d5:90:41:4b:bc:3d:50:bb:ee:9b:f5:11:da:7d:
                    1c:26:e3:7e:4e:c8:d7:fc:5c:7e:97:5a:48:82:14:
                    cd:18:a4:a7:6a:98:3c:fd:86:11:ea:ae:65:b6:2c:
                    22:7e:86:18:06:c5:0a:a7:04:9d:fa:1e:6f:fa:c4:
                    d6:2c:f2:b8:a3:13:7d:fe:d1:32:92:eb:c4:1a:e3:
                    8c:63:34:b9:b1:02:37:87:c8:45:23:03:a5:03:78:
                    b1:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:7E:EC:95:BC:BE:9F:C0:3A:9E:9D:2B:B8:DC:D4:E4:CC:0F:A0:E5
            X509v3 Authority Key Identifier:
                keyid:EF:C1:56:49:A8:25:7F:64:FC:94:21:67:E3:10:AD:38:AD:02:CD:BC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/M37slby-n8A6np0ruNzU5MwPoOU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.10.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         58:ce:fe:a4:11:72:1e:fb:a7:be:6a:9a:05:da:d1:d3:78:59:
         bb:d9:11:02:a8:ba:92:b3:10:d4:47:2d:ab:83:50:e3:0e:c0:
         97:9a:d1:49:e6:24:6a:8d:6b:d1:5c:97:fd:37:77:4a:14:a0:
         39:a6:e6:88:45:42:74:62:48:3f:f1:73:27:c2:c2:55:fc:e6:
         33:52:31:b7:f0:a3:8c:16:4f:14:7a:88:22:bb:ab:85:9d:fc:
         be:5b:e6:05:5b:6c:05:14:c3:56:92:a4:89:cf:13:c2:a8:73:
         15:3b:56:84:d5:8d:e8:88:86:8c:c3:96:d8:0a:64:8e:4a:54:
         57:ca:5f:31:e9:92:ff:64:b1:15:18:f8:77:dd:99:a9:55:81:
         0c:af:55:ab:82:db:bd:51:d6:99:94:98:a8:61:8e:92:65:a1:
         29:37:60:09:1c:d6:e6:97:04:04:a3:70:8f:1b:b5:73:89:b9:
         4a:84:40:e2:32:ff:61:2e:bb:f3:ae:b9:26:d0:f4:e5:4d:03:
         25:02:e4:84:5b:47:19:53:27:9b:fa:f4:e5:69:e0:f9:a1:e2:
         80:15:58:bc:3e:ab:77:19:bc:69:ab:f3:4d:19:06:7d:6e:14:
         65:f5:48:36:03:6a:34:23:7a:3a:61:9e:fb:30:d7:51:53:62:
         86:88:3b:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 11:50:52 2025 by rpki-client