Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20134/y3WricNVG5X9R2pWH0qOTYGhDEc.roa
File:                     y3WricNVG5X9R2pWH0qOTYGhDEc.roa (raw, json)
Hash identifier:          kN80uQUuemd2/xxFZF72dJ9b0byseQ94kARv/kNXuu4=
Subject key identifier:   CB:75:AB:89:C3:55:1B:95:FD:47:6A:56:1F:4A:8E:4D:81:A1:0C:47
Certificate issuer:       /CN=D02A9A652B87C96957C9DAFD6FFAE7244188E063
Certificate serial:       17
Authority key identifier: D0:2A:9A:65:2B:87:C9:69:57:C9:DA:FD:6F:FA:E7:24:41:88:E0:63
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0CqaZSuHyWlXydr9b_rnJEGI4GM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20134/y3WricNVG5X9R2pWH0qOTYGhDEc.roa
Signing time:             Wed 07 May 2025 06:22:32 +0000
ROA not before:           Wed 07 May 2025 06:22:32 +0000
ROA not after:            Wed 15 Apr 2026 01:30:03 +0000
asID:                     131960
IP address blocks:        103.198.160.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20134/0CqaZSuHyWlXydr9b_rnJEGI4GM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20134/0CqaZSuHyWlXydr9b_rnJEGI4GM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0CqaZSuHyWlXydr9b_rnJEGI4GM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 May 2025 02:46:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 23 (0x17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D02A9A652B87C96957C9DAFD6FFAE7244188E063
        Validity
            Not Before: May  7 06:22:32 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=CB75AB89C3551B95FD476A561F4A8E4D81A10C47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:fd:8e:59:9c:94:3e:72:1d:68:05:3f:d4:ba:
                    2d:30:98:78:9d:be:32:02:b9:31:90:86:58:2a:7d:
                    b4:7a:b1:db:41:61:82:69:65:2f:e5:ce:05:58:a6:
                    e4:ca:4c:61:48:35:55:99:ba:e5:3c:b4:0a:fd:99:
                    68:8d:f7:29:b1:9a:ae:00:04:56:c7:90:87:b3:4c:
                    0f:cb:b8:e1:a2:6f:05:59:f4:88:30:fc:6c:bb:81:
                    20:8d:14:38:95:ca:1b:a5:78:3f:b4:8f:1d:b4:73:
                    d8:f2:b0:1e:0c:ec:da:f8:31:75:5d:72:77:a6:5f:
                    7c:dd:79:02:2d:d4:b0:3e:ed:45:4e:de:00:04:a4:
                    e3:2e:90:da:60:ce:4c:56:e9:d6:e8:dd:13:ef:01:
                    35:24:45:94:06:e2:ae:f3:92:7d:96:15:7d:95:ed:
                    13:92:69:09:68:3f:3c:43:dd:5c:ab:b8:9e:5f:ff:
                    d9:b3:90:89:ef:a4:1a:9f:74:f0:42:6e:d4:a9:ab:
                    70:d8:3b:e5:c9:ce:01:35:46:c6:23:05:e9:e8:fd:
                    06:ed:89:e9:1e:80:25:cc:c3:e7:bf:61:aa:97:89:
                    65:51:77:78:df:9a:c2:0b:6a:ea:06:25:36:a3:1e:
                    c1:4e:31:4a:3d:82:64:96:dd:97:93:4b:5f:84:a2:
                    dc:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:75:AB:89:C3:55:1B:95:FD:47:6A:56:1F:4A:8E:4D:81:A1:0C:47
            X509v3 Authority Key Identifier:
                keyid:D0:2A:9A:65:2B:87:C9:69:57:C9:DA:FD:6F:FA:E7:24:41:88:E0:63

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20134/0CqaZSuHyWlXydr9b_rnJEGI4GM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0CqaZSuHyWlXydr9b_rnJEGI4GM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20134/y3WricNVG5X9R2pWH0qOTYGhDEc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.198.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         33:aa:e4:be:c2:45:d8:24:fe:ee:c9:2f:91:8c:83:99:71:86:
         3f:eb:82:11:f9:fe:96:a6:d7:57:c9:5e:ed:ba:f5:88:3a:33:
         cf:17:25:28:4b:f8:11:3d:a0:49:40:6c:1c:cf:f2:d0:04:bb:
         7c:21:21:03:96:48:03:fd:a0:6a:51:79:9e:0e:27:a7:d5:82:
         fb:59:fa:2b:d9:db:1d:8f:35:64:f0:5a:84:bd:cc:bc:0e:1c:
         e6:8f:34:41:e2:83:64:94:99:23:ff:24:65:12:9e:1c:79:fc:
         71:58:74:11:df:b5:91:08:76:1f:c9:56:e6:ff:f8:42:59:ca:
         8c:63:bc:d5:de:f8:c8:d6:e3:19:37:fa:db:9e:64:6f:0f:37:
         30:0a:cd:ad:9f:35:70:c6:53:fa:05:29:9c:bd:99:76:ac:b2:
         82:1b:57:20:b1:17:0d:c6:7c:af:47:05:d0:7f:17:bf:bd:0e:
         13:68:89:a3:f3:ee:47:18:27:57:b9:04:3f:52:4f:fb:41:89:
         21:1a:52:ee:bd:5e:30:cf:f3:e7:47:72:fd:bc:d1:0b:7a:d3:
         45:93:82:a2:14:c9:90:2f:be:07:e0:dc:36:84:02:64:9a:78:
         de:46:fc:e5:0c:d1:b5:70:37:41:98:29:8e:24:bc:b5:86:fc:
         b9:7c:ec:4b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon May 19 04:59:18 2025 by rpki-client