Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20040/0qCvyxW8FniM2_gvT_9mi6BDEcI.roa
File:                     0qCvyxW8FniM2_gvT_9mi6BDEcI.roa (raw, json)
Hash identifier:          Z5qqA42rLg8XSyY1Dt2LzWL/N+I2ybZPqXLYOC38TAs=
Subject key identifier:   D2:A0:AF:CB:15:BC:16:78:8C:DB:F8:2F:4F:FF:66:8B:A0:43:11:C2
Certificate issuer:       /CN=5ECB165AAD7C3C143CC2F84E4775E59D9D7D94F9
Certificate serial:       2E
Authority key identifier: 5E:CB:16:5A:AD:7C:3C:14:3C:C2:F8:4E:47:75:E5:9D:9D:7D:94:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XssWWq18PBQ8wvhOR3XlnZ19lPk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20040/0qCvyxW8FniM2_gvT_9mi6BDEcI.roa
Signing time:             Thu 01 May 2025 01:33:16 +0000
ROA not before:           Thu 01 May 2025 01:33:16 +0000
ROA not after:            Wed 15 Apr 2026 01:30:03 +0000
asID:                     7514
IP address blocks:        103.96.112.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20040/XssWWq18PBQ8wvhOR3XlnZ19lPk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20040/XssWWq18PBQ8wvhOR3XlnZ19lPk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XssWWq18PBQ8wvhOR3XlnZ19lPk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 22 May 2025 22:53:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 46 (0x2e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ECB165AAD7C3C143CC2F84E4775E59D9D7D94F9
        Validity
            Not Before: May  1 01:33:16 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=D2A0AFCB15BC16788CDBF82F4FFF668BA04311C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:1c:c9:6b:c3:88:c6:6f:1d:f7:ad:aa:4d:4d:
                    fd:bd:e5:59:b3:20:61:c4:47:34:c2:3c:4d:7f:38:
                    6c:97:8b:76:28:15:eb:19:a2:6f:41:5a:a4:63:6d:
                    53:cb:1e:92:8f:fa:b7:64:5a:f3:92:43:62:8a:da:
                    b7:7a:8a:b8:31:32:cf:ab:cc:b9:74:8a:d4:31:68:
                    4b:e5:5b:54:1b:20:84:4b:f2:ed:c9:7d:84:9e:fe:
                    f0:6b:49:c8:8f:ac:1e:4e:fb:65:82:90:a4:05:ab:
                    9d:30:b8:dd:cb:e5:58:74:e8:67:5f:4c:1b:4a:8b:
                    72:26:19:dc:c7:a4:c0:a5:71:0d:5d:b8:52:c2:27:
                    aa:29:0f:1f:64:54:fa:13:f1:ef:18:f3:ea:24:c0:
                    0e:c7:b1:f4:6f:d1:56:27:bd:5d:60:4e:5d:f8:d4:
                    79:5f:9d:5e:12:9e:40:b7:9e:cb:52:59:f0:c5:9c:
                    80:1d:6c:c7:5c:d1:67:98:92:57:c9:cf:56:4e:d0:
                    d1:76:8d:f7:87:91:ef:46:81:0a:46:bd:af:2c:30:
                    1b:d8:d1:00:7d:ba:04:bf:16:73:cd:8e:4c:b2:8f:
                    6e:91:2b:e1:66:b7:31:5f:4b:fe:c2:14:2b:79:b6:
                    46:9a:96:5f:9a:d6:d0:15:fd:cd:f0:d4:e4:25:00:
                    0d:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:A0:AF:CB:15:BC:16:78:8C:DB:F8:2F:4F:FF:66:8B:A0:43:11:C2
            X509v3 Authority Key Identifier:
                keyid:5E:CB:16:5A:AD:7C:3C:14:3C:C2:F8:4E:47:75:E5:9D:9D:7D:94:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20040/XssWWq18PBQ8wvhOR3XlnZ19lPk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XssWWq18PBQ8wvhOR3XlnZ19lPk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20040/0qCvyxW8FniM2_gvT_9mi6BDEcI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.96.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         05:3e:53:0d:b8:26:51:53:aa:81:3f:fb:b5:f5:cc:ac:a6:61:
         fa:00:02:98:aa:0e:bd:58:db:0d:7d:06:3b:0f:87:3d:68:c1:
         d6:b1:da:3a:ce:77:17:65:fc:4b:80:b8:98:12:90:2a:7b:78:
         ea:df:e6:38:e7:ca:51:d5:be:24:cf:0b:90:98:f4:3f:cd:05:
         d7:31:61:cb:8a:c1:e7:ba:fb:60:e9:93:d9:65:a9:7a:42:54:
         3d:6f:53:f6:e2:3d:b0:53:77:e1:d4:91:4e:ef:46:aa:71:81:
         e2:21:a8:ca:af:5b:83:65:d3:66:d7:1d:df:c8:9d:fc:4a:09:
         ad:37:28:47:7e:93:1b:94:81:28:47:e6:5a:c5:a4:04:6d:76:
         72:74:07:e3:8e:a7:db:0b:7a:eb:87:8d:14:7f:ac:5c:7e:fc:
         39:03:f2:73:85:f7:6b:77:29:22:91:11:1f:39:7b:72:ad:d4:
         67:21:ef:09:e7:ad:22:ce:f9:66:65:f5:fb:42:74:1f:0b:74:
         83:9a:ed:25:ed:b2:64:18:6c:95:36:38:26:cd:a6:9b:49:14:
         01:22:1f:ee:b2:ba:4a:27:05:db:45:d2:22:24:be:3c:64:81:
         6c:e2:b1:f3:7d:42:18:b7:cf:0c:d5:a8:dd:26:dd:3f:20:47:
         90:08:a9:30
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri May 16 00:51:42 2025 by rpki-client