Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20116/vBeN91AXJJurG0FYpbo1VXlZI5Y.roa
File:                     vBeN91AXJJurG0FYpbo1VXlZI5Y.roa (raw, json)
Hash identifier:          qWu8hxZS0Ygu2LkroZrv8p2zL6FS160PsPPGmKLg+6Q=
Subject key identifier:   BC:17:8D:F7:50:17:24:9B:AB:1B:41:58:A5:BA:35:55:79:59:23:96
Certificate issuer:       /CN=C49E64FB7C8C7C6B5CD7C7701882E8597C42838E
Certificate serial:       80
Authority key identifier: C4:9E:64:FB:7C:8C:7C:6B:5C:D7:C7:70:18:82:E8:59:7C:42:83:8E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xJ5k-3yMfGtc18dwGILoWXxCg44.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/vBeN91AXJJurG0FYpbo1VXlZI5Y.roa
Signing time:             Tue 10 Jun 2025 10:50:44 +0000
ROA not before:           Tue 10 Jun 2025 10:50:44 +0000
ROA not after:            Sat 23 May 2026 09:51:00 +0000
asID:                     23816
IP address blocks:        103.2.12.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/xJ5k-3yMfGtc18dwGILoWXxCg44.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/xJ5k-3yMfGtc18dwGILoWXxCg44.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xJ5k-3yMfGtc18dwGILoWXxCg44.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 128 (0x80)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C49E64FB7C8C7C6B5CD7C7701882E8597C42838E
        Validity
            Not Before: Jun 10 10:50:44 2025 GMT
            Not After : May 23 09:51:00 2026 GMT
        Subject: CN=BC178DF75017249BAB1B4158A5BA355579592396
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a5:cf:d7:40:97:b9:97:6c:e0:21:c7:74:58:
                    2d:80:9a:43:49:c6:8b:94:b6:ca:0d:03:85:66:df:
                    8d:78:cf:e8:ac:9a:93:0f:1f:c1:4c:10:89:95:90:
                    da:50:a5:dc:ba:2c:f6:ec:98:23:f7:c9:17:36:64:
                    9f:26:1b:90:9e:f5:2d:41:47:98:d2:51:ee:ab:16:
                    75:a2:4b:7c:f8:3a:a6:48:12:cd:b6:87:f1:f8:df:
                    6f:8a:03:60:6a:bd:8f:47:b1:ca:a1:93:f6:8a:e9:
                    81:2b:e3:39:25:82:3c:90:21:af:31:bc:a5:dd:e5:
                    e6:3f:0d:76:98:1c:e8:06:9d:8e:4f:67:8c:78:b4:
                    7e:33:c3:00:76:0c:ec:4c:4e:b6:59:b2:0f:e6:6a:
                    b3:c1:3c:dd:f6:27:bd:ed:a5:22:f6:02:71:9f:da:
                    b4:f2:27:b2:b7:c8:de:dc:0f:7f:d3:5c:90:da:b4:
                    e4:ec:da:a9:8f:81:19:b0:e7:09:aa:89:d9:e9:4b:
                    5e:ef:18:15:08:d4:fc:8e:d8:9d:d3:05:ca:4e:de:
                    da:b6:fa:5e:fd:d9:f5:79:6d:7c:a9:6c:a9:7c:0e:
                    b8:98:c0:ca:63:13:22:da:ff:b1:e7:b7:4b:52:b6:
                    d0:d3:45:99:af:e5:cd:2c:c9:32:84:37:28:55:c4:
                    74:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:17:8D:F7:50:17:24:9B:AB:1B:41:58:A5:BA:35:55:79:59:23:96
            X509v3 Authority Key Identifier:
                keyid:C4:9E:64:FB:7C:8C:7C:6B:5C:D7:C7:70:18:82:E8:59:7C:42:83:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/xJ5k-3yMfGtc18dwGILoWXxCg44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xJ5k-3yMfGtc18dwGILoWXxCg44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/vBeN91AXJJurG0FYpbo1VXlZI5Y.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.2.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         21:6e:bf:37:f8:54:45:ba:b4:ca:ca:49:9c:c1:f1:af:da:38:
         ea:f1:a1:36:8f:25:20:b4:a4:1f:32:cb:30:7b:87:79:ea:7a:
         56:42:cf:8f:da:ff:37:d2:d3:3f:97:b8:94:87:87:e9:28:06:
         f2:28:f1:1f:22:36:58:df:f1:90:6c:95:4f:07:b6:30:a9:f6:
         39:10:c7:90:f8:24:68:b2:3e:84:38:e2:b0:78:14:47:61:65:
         75:05:60:ac:11:45:49:a8:22:78:b3:6d:7e:5e:12:71:c9:53:
         d9:4a:58:e5:ea:dc:65:67:37:a8:70:b1:2b:f5:fd:4d:f4:8a:
         e9:7d:18:3b:a3:51:63:5c:38:96:ce:03:77:12:b8:13:e5:14:
         65:0a:ee:0d:8e:da:e5:c0:a7:f5:38:10:62:b8:e7:3b:76:70:
         33:d7:da:ef:2d:80:3f:bd:5c:87:7f:53:2c:ec:c8:ae:bc:8e:
         81:98:54:f8:07:f0:7b:68:5c:57:ad:47:5b:7b:d1:5d:ea:b4:
         4d:22:bd:19:07:5c:be:b3:c3:0f:54:de:97:d6:7f:61:57:b0:
         8d:43:be:b8:cb:e9:b1:da:a3:5e:a0:f7:10:dd:31:65:cd:2d:
         6d:31:f1:3b:f2:b2:59:b5:9d:91:2e:a6:f7:8d:93:5e:58:e5:
         44:de:14:0b
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgICAIAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5
RTY0RkI3QzhDN0M2QjVDRDdDNzcwMTg4MkU4NTk3QzQyODM4RTAeFw0yNTA2MTAx
MDUwNDRaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKEJDMTc4REY3NTAxNzI0
OUJBQjFCNDE1OEE1QkEzNTU1Nzk1OTIzOTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCzpc/XQJe5l2zgIcd0WC2AmkNJxouUtsoNA4Vm3414z+ismpMP
H8FMEImVkNpQpdy6LPbsmCP3yRc2ZJ8mG5Ce9S1BR5jSUe6rFnWiS3z4OqZIEs22
h/H432+KA2BqvY9Hscqhk/aK6YEr4zklgjyQIa8xvKXd5eY/DXaYHOgGnY5PZ4x4
tH4zwwB2DOxMTrZZsg/marPBPN32J73tpSL2AnGf2rTyJ7K3yN7cD3/TXJDatOTs
2qmPgRmw5wmqidnpS17vGBUI1PyO2J3TBcpO3tq2+l792fV5bXypbKl8DriYwMpj
EyLa/7Hnt0tSttDTRZmv5c0syTKENyhVxHR/AgMBAAGjggIoMIICJDAdBgNVHQ4E
FgQUvBeN91AXJJurG0FYpbo1VXlZI5YwHwYDVR0jBBgwFoAUxJ5k+3yMfGtc18dw
GILoWXxCg44wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzIwMTE2L3hKNWstM3lNZkd0YzE4ZHdHSUxvV1h4Q2c0NC5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3hKNWstM3lNZkd0YzE4ZHdHSUxv
V1h4Q2c0NC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8yMDExNi92QmVOOTFBWEpKdXJHMEZZcGJvMVZYbFpJNVku
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQCZwIMMA0GCSqGSIb3DQEBCwUAA4IBAQAhbr83+FRFurTKykmcwfGv
2jjq8aE2jyUgtKQfMsswe4d56npWQs+P2v830tM/l7iUh4fpKAbyKPEfIjZY3/GQ
bJVPB7YwqfY5EMeQ+CRosj6EOOKweBRHYWV1BWCsEUVJqCJ4s21+XhJxyVPZSljl
6txlZzeocLEr9f1N9IrpfRg7o1FjXDiWzgN3ErgT5RRlCu4NjtrlwKf1OBBiuOc7
dnAz19rvLYA/vVyHf1Ms7MiuvI6BmFT4B/B7aFxXrUdbe9Fd6rRNIr0ZB1y+s8MP
VN6X1n9hV7CNQ764y+mx2qNeoPcQ3TFlzS1tMfE78rJZtZ2RLqb3jZNeWOVE3hQL
-----END CERTIFICATE-----
Generated at Sat Jul 5 15:40:39 2025 by rpki-client