Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20040/S-Z-5m1SBurUbol3T9xgJ4vXx8c.roa
File:                     S-Z-5m1SBurUbol3T9xgJ4vXx8c.roa (raw, json)
Hash identifier:          umo6ji4QqQUt6leJpdQHyWPCEs+VEu6u6Fty7PieBvk=
Subject key identifier:   4B:E6:7E:E6:6D:52:06:EA:D4:6E:89:77:4F:DC:60:27:8B:D7:C7:C7
Certificate issuer:       /CN=5ECB165AAD7C3C143CC2F84E4775E59D9D7D94F9
Certificate serial:       2F
Authority key identifier: 5E:CB:16:5A:AD:7C:3C:14:3C:C2:F8:4E:47:75:E5:9D:9D:7D:94:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XssWWq18PBQ8wvhOR3XlnZ19lPk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20040/S-Z-5m1SBurUbol3T9xgJ4vXx8c.roa
Signing time:             Thu 01 May 2025 01:33:16 +0000
ROA not before:           Thu 01 May 2025 01:33:16 +0000
ROA not after:            Wed 15 Apr 2026 01:30:03 +0000
asID:                     9607
IP address blocks:        103.96.112.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20040/XssWWq18PBQ8wvhOR3XlnZ19lPk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20040/XssWWq18PBQ8wvhOR3XlnZ19lPk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XssWWq18PBQ8wvhOR3XlnZ19lPk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 May 2025 15:52:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 47 (0x2f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ECB165AAD7C3C143CC2F84E4775E59D9D7D94F9
        Validity
            Not Before: May  1 01:33:16 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=4BE67EE66D5206EAD46E89774FDC60278BD7C7C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:c1:11:53:c6:d1:a5:d0:8d:d6:77:cf:87:e2:
                    13:f1:33:69:8a:27:48:44:45:1d:40:bb:39:8b:c4:
                    a4:b6:a1:11:ec:e1:91:90:8d:41:22:8b:2f:b2:33:
                    d8:2e:a3:68:07:51:05:c1:88:a5:f0:52:6d:29:f3:
                    f0:24:ce:09:70:84:ea:65:8f:2f:aa:e0:ea:46:02:
                    94:af:3b:08:87:f7:bd:05:02:a0:22:9c:7a:42:68:
                    19:22:18:c4:71:f8:a6:b0:51:f5:ca:a3:fa:6e:ed:
                    16:46:2b:83:a6:f3:db:04:c8:94:0e:30:15:ed:7b:
                    09:b1:71:00:02:e9:b2:82:13:85:cc:5b:e8:7d:0b:
                    6f:01:21:bd:b9:73:06:21:21:6d:00:de:ae:44:d3:
                    d7:a3:ea:2a:16:99:57:0b:86:89:61:20:1d:36:3c:
                    05:f2:67:25:78:ce:1e:6c:b6:fa:7d:d2:71:48:35:
                    13:78:bd:9a:a0:05:32:99:ae:68:90:bc:d7:55:d7:
                    6d:18:cd:03:e4:21:95:05:0a:a8:e5:3a:08:d0:f3:
                    a9:ce:b3:e9:87:88:16:00:c5:93:03:19:c5:04:9e:
                    03:aa:fd:f5:52:a4:aa:14:14:3a:d8:57:0a:06:c8:
                    29:72:8b:55:02:b9:8f:2f:63:4c:36:fb:3b:ec:a2:
                    33:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:E6:7E:E6:6D:52:06:EA:D4:6E:89:77:4F:DC:60:27:8B:D7:C7:C7
            X509v3 Authority Key Identifier:
                keyid:5E:CB:16:5A:AD:7C:3C:14:3C:C2:F8:4E:47:75:E5:9D:9D:7D:94:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20040/XssWWq18PBQ8wvhOR3XlnZ19lPk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XssWWq18PBQ8wvhOR3XlnZ19lPk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20040/S-Z-5m1SBurUbol3T9xgJ4vXx8c.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.96.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         32:88:97:60:ce:67:9f:21:84:b4:28:81:62:5d:e5:78:2f:c7:
         9c:0f:11:45:8b:b7:d0:bc:0c:69:da:25:99:26:1a:12:a7:7a:
         02:e0:63:2b:38:ad:9e:a3:36:cb:98:28:1d:85:0a:ef:40:73:
         1b:3e:db:2f:a1:05:8c:c5:43:ad:14:40:7c:90:87:11:3e:fe:
         ac:e7:fc:12:71:13:9b:57:19:bb:77:41:ac:43:4c:c3:64:47:
         5f:36:f6:bc:0e:ce:8f:d8:87:50:44:5c:d7:a1:c5:9c:9b:a3:
         7f:54:01:2c:65:fc:03:e9:9a:f9:96:07:6f:1c:fb:ff:77:66:
         92:bc:0d:58:99:68:b1:fc:dd:42:c5:19:69:59:f1:6f:c0:6c:
         29:bf:2b:ed:26:6a:9c:c0:de:cd:b6:1d:9b:4e:cb:06:ad:5c:
         9a:34:fa:57:2b:9f:59:35:22:66:8d:04:c9:9f:48:27:5d:56:
         94:31:6d:b6:8e:d2:1a:ff:d1:7f:92:7e:82:29:54:5d:8a:81:
         a8:b4:55:86:7c:a7:53:fc:9a:7c:b7:56:b6:8f:f2:ad:24:fc:
         97:92:18:fa:db:c5:77:46:eb:7e:da:7d:05:d4:c3:d8:d0:7d:
         59:30:72:cd:ab:48:06:e5:d7:e9:21:f8:4f:83:34:0c:02:8a:
         70:2c:d8:d9
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIBLzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1RUNC
MTY1QUFEN0MzQzE0M0NDMkY4NEU0Nzc1RTU5RDlEN0Q5NEY5MB4XDTI1MDUwMTAx
MzMxNloXDTI2MDQxNTAxMzAwM1owMzExMC8GA1UEAxMoNEJFNjdFRTY2RDUyMDZF
QUQ0NkU4OTc3NEZEQzYwMjc4QkQ3QzdDNzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANjBEVPG0aXQjdZ3z4fiE/EzaYonSERFHUC7OYvEpLahEezhkZCN
QSKLL7Iz2C6jaAdRBcGIpfBSbSnz8CTOCXCE6mWPL6rg6kYClK87CIf3vQUCoCKc
ekJoGSIYxHH4prBR9cqj+m7tFkYrg6bz2wTIlA4wFe17CbFxAALpsoIThcxb6H0L
bwEhvblzBiEhbQDerkTT16PqKhaZVwuGiWEgHTY8BfJnJXjOHmy2+n3ScUg1E3i9
mqAFMpmuaJC811XXbRjNA+QhlQUKqOU6CNDzqc6z6YeIFgDFkwMZxQSeA6r99VKk
qhQUOthXCgbIKXKLVQK5jy9jTDb7O+yiMwMCAwEAAaOCAigwggIkMB0GA1UdDgQW
BBRL5n7mbVIG6tRuiXdP3GAni9fHxzAfBgNVHSMEGDAWgBReyxZarXw8FDzC+E5H
deWdnX2U+TAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAwNDAvWHNzV1dxMThQQlE4d3ZoT1IzWGxuWjE5bFBrLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvWHNzV1dxMThQQlE4d3ZoT1IzWGxu
WjE5bFBrLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzIwMDQwL1MtWi01bTFTQnVyVWJvbDNUOXhnSjR2WHg4Yy5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAJnYHAwDQYJKoZIhvcNAQELBQADggEBADKIl2DOZ58hhLQogWJd5Xgv
x5wPEUWLt9C8DGnaJZkmGhKnegLgYys4rZ6jNsuYKB2FCu9Acxs+2y+hBYzFQ60U
QHyQhxE+/qzn/BJxE5tXGbt3QaxDTMNkR1829rwOzo/Yh1BEXNehxZybo39UASxl
/APpmvmWB28c+/93ZpK8DViZaLH83ULFGWlZ8W/AbCm/K+0mapzA3s22HZtOywat
XJo0+lcrn1k1ImaNBMmfSCddVpQxbbaO0hr/0X+SfoIpVF2Kgai0VYZ8p1P8mny3
VraP8q0k/JeSGPrbxXdG637afQXUw9jQfVkwcs2rSAbl1+kh+E+DNAwCinAs2Nk=
-----END CERTIFICATE-----
Generated at Sun May 18 17:52:27 2025 by rpki-client