Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20074/EmFHSnBqpwh4emFnXxllo94CECo.roa
File:                     EmFHSnBqpwh4emFnXxllo94CECo.roa (raw, json)
Hash identifier:          +3B4sJIpNTy62fxSXueW7z5C8+krq/Gv7VKY+j6qXGo=
Subject key identifier:   12:61:47:4A:70:6A:A7:08:78:7A:61:67:5F:19:65:A3:DE:02:10:2A
Certificate issuer:       /CN=9E5004D44AF29AD1209AB85A95F160E83D24E588
Certificate serial:       32
Authority key identifier: 9E:50:04:D4:4A:F2:9A:D1:20:9A:B8:5A:95:F1:60:E8:3D:24:E5:88
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nlAE1ErymtEgmrhalfFg6D0k5Yg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20074/EmFHSnBqpwh4emFnXxllo94CECo.roa
Signing time:             Thu 01 May 2025 01:33:15 +0000
ROA not before:           Thu 01 May 2025 01:33:15 +0000
ROA not after:            Wed 15 Apr 2026 01:30:03 +0000
asID:                     63782
IP address blocks:        103.119.88.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20074/nlAE1ErymtEgmrhalfFg6D0k5Yg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20074/nlAE1ErymtEgmrhalfFg6D0k5Yg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nlAE1ErymtEgmrhalfFg6D0k5Yg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 23 May 2025 22:45:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 50 (0x32)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E5004D44AF29AD1209AB85A95F160E83D24E588
        Validity
            Not Before: May  1 01:33:15 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=1261474A706AA708787A61675F1965A3DE02102A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:88:e0:29:3f:0f:3d:2c:0d:99:d8:6e:56:29:
                    41:89:d6:65:12:69:97:ec:ad:d8:98:e3:26:8e:9c:
                    59:9e:cd:ce:b4:4e:2a:4f:66:92:ba:f1:d9:69:8e:
                    7d:ac:7e:c4:a8:c6:cc:fe:62:a2:a7:2f:f1:9f:88:
                    10:28:ba:6c:40:ec:23:87:31:5e:ba:a3:4d:1a:ac:
                    d5:75:b4:c4:93:cd:ff:07:78:d7:26:42:67:a7:f2:
                    9d:91:5d:cb:aa:e0:9d:0c:4b:9d:e4:1c:92:40:93:
                    2b:3c:0c:c2:80:be:b9:00:11:80:6a:6e:2b:32:15:
                    47:57:24:23:48:46:39:9f:a2:75:aa:ef:fe:a5:13:
                    b7:f4:1e:9b:fb:74:3b:1d:27:da:61:95:61:1f:68:
                    2c:93:a0:14:a9:e8:e1:f4:07:4d:dc:eb:e4:55:55:
                    7a:29:e4:45:8d:1d:45:64:fb:74:25:f6:b8:c8:5b:
                    50:21:bf:eb:0d:29:60:22:3b:e8:f9:65:35:e8:88:
                    1c:d1:79:d2:d0:38:a0:f3:95:f1:b9:df:78:56:3f:
                    b9:16:78:21:af:49:13:70:97:9e:9b:a2:a9:8a:e3:
                    75:6b:52:14:53:e5:79:01:8a:c9:3d:f6:23:b3:4f:
                    d5:a2:79:18:2f:6b:6e:ae:26:56:fd:0a:39:ce:f7:
                    4c:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:61:47:4A:70:6A:A7:08:78:7A:61:67:5F:19:65:A3:DE:02:10:2A
            X509v3 Authority Key Identifier:
                keyid:9E:50:04:D4:4A:F2:9A:D1:20:9A:B8:5A:95:F1:60:E8:3D:24:E5:88

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20074/nlAE1ErymtEgmrhalfFg6D0k5Yg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nlAE1ErymtEgmrhalfFg6D0k5Yg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20074/EmFHSnBqpwh4emFnXxllo94CECo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.119.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         10:e3:79:70:ed:ea:d8:b6:61:1d:1b:30:31:28:7d:27:b5:b9:
         e8:bf:be:27:01:8c:66:77:43:bf:ba:70:00:6d:a0:22:c2:60:
         3d:78:00:8c:1f:d9:a6:94:8b:50:8e:3d:c0:4e:99:88:b6:85:
         58:ba:54:5d:07:cb:ce:6e:4e:cb:58:90:5e:26:4b:c0:67:a4:
         1b:b9:c4:c5:30:5d:a1:de:d0:32:d2:d9:68:66:15:13:aa:31:
         b2:a9:dd:d6:44:ef:d4:f0:19:16:4b:a4:62:2c:ea:78:f8:cb:
         e8:9e:e5:3e:89:62:91:dd:c2:fa:a6:c7:ac:e0:78:2d:2a:80:
         fb:cb:09:fa:e5:a3:8d:84:95:13:e3:5a:45:77:18:a8:a1:cb:
         54:c4:3e:9c:34:49:c1:f0:72:ae:ea:79:7d:cd:b5:6b:f2:12:
         7b:96:8f:d9:eb:9c:bc:5b:6f:54:fb:f1:d0:09:f2:b7:76:88:
         18:41:6f:4e:f2:9d:06:7f:65:8c:b3:1a:4d:07:14:33:e0:4a:
         6f:90:9c:4d:ab:44:c4:06:6e:d5:a1:62:f4:44:65:f4:c8:cc:
         09:69:4b:41:a1:fe:88:2c:a5:b5:9e:1c:01:fd:16:48:5f:b8:
         5b:35:6b:8c:26:f3:ff:82:d6:34:1c:3f:71:d5:06:b6:0a:d6:
         f1:5a:00:72
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIBMjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5RTUw
MDRENDRBRjI5QUQxMjA5QUI4NUE5NUYxNjBFODNEMjRFNTg4MB4XDTI1MDUwMTAx
MzMxNVoXDTI2MDQxNTAxMzAwM1owMzExMC8GA1UEAxMoMTI2MTQ3NEE3MDZBQTcw
ODc4N0E2MTY3NUYxOTY1QTNERTAyMTAyQTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKqI4Ck/Dz0sDZnYblYpQYnWZRJpl+yt2JjjJo6cWZ7NzrROKk9m
krrx2WmOfax+xKjGzP5ioqcv8Z+IECi6bEDsI4cxXrqjTRqs1XW0xJPN/wd41yZC
Z6fynZFdy6rgnQxLneQckkCTKzwMwoC+uQARgGpuKzIVR1ckI0hGOZ+idarv/qUT
t/Qem/t0Ox0n2mGVYR9oLJOgFKno4fQHTdzr5FVVeinkRY0dRWT7dCX2uMhbUCG/
6w0pYCI76PllNeiIHNF50tA4oPOV8bnfeFY/uRZ4Ia9JE3CXnpuiqYrjdWtSFFPl
eQGKyT32I7NP1aJ5GC9rbq4mVv0KOc73TNkCAwEAAaOCAigwggIkMB0GA1UdDgQW
BBQSYUdKcGqnCHh6YWdfGWWj3gIQKjAfBgNVHSMEGDAWgBSeUATUSvKa0SCauFqV
8WDoPSTliDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAwNzQvbmxBRTFFcnltdEVnbXJoYWxmRmc2RDBrNVlnLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvbmxBRTFFcnltdEVnbXJoYWxmRmc2
RDBrNVlnLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzIwMDc0L0VtRkhTbkJxcHdoNGVtRm5YeGxsbzk0Q0VDby5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAJnd1gwDQYJKoZIhvcNAQELBQADggEBABDjeXDt6ti2YR0bMDEofSe1
uei/vicBjGZ3Q7+6cABtoCLCYD14AIwf2aaUi1COPcBOmYi2hVi6VF0Hy85uTstY
kF4mS8BnpBu5xMUwXaHe0DLS2WhmFROqMbKp3dZE79TwGRZLpGIs6nj4y+ie5T6J
YpHdwvqmx6zgeC0qgPvLCfrlo42ElRPjWkV3GKihy1TEPpw0ScHwcq7qeX3NtWvy
EnuWj9nrnLxbb1T78dAJ8rd2iBhBb07ynQZ/ZYyzGk0HFDPgSm+QnE2rRMQGbtWh
YvREZfTIzAlpS0Gh/ogspbWeHAH9FkhfuFs1a4wm8/+C1jQcP3HVBrYK1vFaAHI=
-----END CERTIFICATE-----
Generated at Sat May 17 02:35:11 2025 by rpki-client