Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20160/ha1cL-RFPoChljtcDrdBBUaE11s.roa
File:                     ha1cL-RFPoChljtcDrdBBUaE11s.roa (raw, json)
Hash identifier:          J/pMShMhON7wONzSd4+i6JiTSD5Wn2urCXxZsCnPVQk=
Subject key identifier:   85:AD:5C:2F:E4:45:3E:80:A1:96:3B:5C:0E:B7:41:05:46:84:D7:5B
Certificate issuer:       /CN=050401C788B569B3D440041730E28A991F4018D2
Certificate serial:       1D
Authority key identifier: 05:04:01:C7:88:B5:69:B3:D4:40:04:17:30:E2:8A:99:1F:40:18:D2
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BQQBx4i1abPUQAQXMOKKmR9AGNI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20160/ha1cL-RFPoChljtcDrdBBUaE11s.roa
Signing time:             Thu 19 Jun 2025 05:02:59 +0000
ROA not before:           Thu 19 Jun 2025 05:02:59 +0000
ROA not after:            Mon 15 Jun 2026 01:30:02 +0000
asID:                     18282
IP address blocks:        103.211.72.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20160/BQQBx4i1abPUQAQXMOKKmR9AGNI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20160/BQQBx4i1abPUQAQXMOKKmR9AGNI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BQQBx4i1abPUQAQXMOKKmR9AGNI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 29 (0x1d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=050401C788B569B3D440041730E28A991F4018D2
        Validity
            Not Before: Jun 19 05:02:59 2025 GMT
            Not After : Jun 15 01:30:02 2026 GMT
        Subject: CN=85AD5C2FE4453E80A1963B5C0EB741054684D75B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c4:30:ce:58:ce:f6:a4:45:4e:fa:7b:ee:32:
                    e3:e5:22:66:ec:95:ce:bd:cb:1b:02:4f:d9:d2:0d:
                    4a:77:24:1a:48:47:7a:8a:0a:ac:5b:1a:0d:97:90:
                    4a:84:c0:b5:e8:9a:9a:ff:f0:af:dc:50:d7:2f:94:
                    6a:f3:a9:cd:d5:12:e9:8c:4c:ca:b0:a1:96:e4:c2:
                    8d:d8:40:4b:a5:6f:b8:14:0c:25:e0:e9:42:56:ad:
                    ac:60:84:cb:51:77:7a:59:df:10:c4:f7:66:bc:90:
                    31:58:d6:2b:e1:2d:a1:9a:ea:67:03:04:72:3a:1f:
                    0f:86:11:0e:8c:18:0b:68:76:d8:ea:99:94:16:21:
                    db:14:1d:b2:b4:92:1a:1f:06:4f:33:94:3a:6f:e4:
                    8c:35:67:ed:8c:d9:32:db:d3:b8:01:f3:62:97:0d:
                    bc:fe:5b:e0:05:6f:39:d5:ff:f3:c9:42:7c:b7:1e:
                    cd:2f:87:74:d8:2f:61:6c:7f:87:db:a3:0c:59:75:
                    47:51:de:d5:ae:62:fb:cf:eb:6a:3b:0b:d3:36:53:
                    ec:61:96:29:88:4f:bf:86:a0:b7:75:70:c5:c0:14:
                    44:f6:ed:81:e6:55:35:2d:84:1e:07:ce:72:99:1b:
                    a5:b6:9f:9a:88:77:86:4f:9c:19:a4:ff:83:40:bc:
                    80:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:AD:5C:2F:E4:45:3E:80:A1:96:3B:5C:0E:B7:41:05:46:84:D7:5B
            X509v3 Authority Key Identifier:
                keyid:05:04:01:C7:88:B5:69:B3:D4:40:04:17:30:E2:8A:99:1F:40:18:D2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20160/BQQBx4i1abPUQAQXMOKKmR9AGNI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BQQBx4i1abPUQAQXMOKKmR9AGNI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20160/ha1cL-RFPoChljtcDrdBBUaE11s.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.211.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8b:c4:eb:0f:1c:c9:c1:ac:2a:cd:c3:eb:1a:38:17:d7:67:ef:
         e7:88:4d:49:d4:2a:f5:3e:c1:5e:aa:8e:35:71:0b:2d:a9:7c:
         05:48:45:1f:e2:de:6b:f4:85:8a:26:0b:2d:69:5e:0f:16:73:
         d5:74:96:25:be:3a:1d:c7:ae:66:56:a9:fd:b0:e0:13:3f:e1:
         a4:ba:db:12:53:a4:a7:fb:51:ee:6e:f0:89:30:90:5d:33:39:
         3b:1c:e5:ba:28:8d:6c:46:61:a1:0f:6c:d9:f0:f2:6b:e0:ba:
         9d:b8:64:ad:86:69:06:a0:86:eb:af:45:1f:0a:13:ee:de:33:
         5b:d6:bd:4a:6f:b9:8c:de:28:6d:94:96:eb:24:95:9b:2d:73:
         09:87:77:41:f9:c9:c6:39:dd:28:db:50:6c:3e:33:0f:57:1a:
         1a:96:e8:85:34:81:22:b5:51:84:0e:df:83:cb:91:0b:a9:d9:
         77:74:b9:2e:30:31:c0:cb:dc:c2:1e:6b:2e:36:b8:72:08:58:
         bd:bb:30:54:93:61:fa:1a:46:67:9e:48:f6:a1:dc:ac:1a:e4:
         b9:ad:8b:51:60:db:04:e8:0a:19:52:d7:3c:8e:00:2c:6f:ed:
         e6:b7:b6:31:4c:69:fc:6d:e2:00:88:84:84:9a:1d:cd:b0:95:
         fc:e8:37:61
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jul 5 11:59:14 2025 by rpki-client