Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20189/0TLJKLiXrp0GStF5Da3g8lRmCLc.roa
File:                     0TLJKLiXrp0GStF5Da3g8lRmCLc.roa (raw, json)
Hash identifier:          xvgCT08+5V0NJXXQWTdi0h/QPLLuBvyYLfjld+oiXTY=
Subject key identifier:   D1:32:C9:28:B8:97:AE:9D:06:4A:D1:79:0D:AD:E0:F2:54:66:08:B7
Certificate issuer:       /CN=E4543A3366CE0D6A5DA4DD46307D2993DDA026B4
Certificate serial:       2C
Authority key identifier: E4:54:3A:33:66:CE:0D:6A:5D:A4:DD:46:30:7D:29:93:DD:A0:26:B4
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5FQ6M2bODWpdpN1GMH0pk92gJrQ.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20189/0TLJKLiXrp0GStF5Da3g8lRmCLc.roa
Signing time:             Thu 01 May 2025 01:33:13 +0000
ROA not before:           Thu 01 May 2025 01:33:13 +0000
ROA not after:            Wed 15 Apr 2026 01:30:03 +0000
asID:                     146981
IP address blocks:        103.189.188.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20189/5FQ6M2bODWpdpN1GMH0pk92gJrQ.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20189/5FQ6M2bODWpdpN1GMH0pk92gJrQ.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5FQ6M2bODWpdpN1GMH0pk92gJrQ.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 May 2025 00:19:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 44 (0x2c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4543A3366CE0D6A5DA4DD46307D2993DDA026B4
        Validity
            Not Before: May  1 01:33:13 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=D132C928B897AE9D064AD1790DADE0F2546608B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:70:3a:6b:9a:98:42:70:60:3c:d6:a0:3f:88:
                    82:22:a2:ce:98:4f:61:5b:06:b7:df:b0:cc:4d:d8:
                    64:79:ad:a1:a2:38:45:9b:19:65:d8:3f:8d:2e:1e:
                    26:c3:08:7a:64:33:95:d5:69:06:55:6f:b2:b8:fe:
                    49:cf:16:bc:8f:40:34:c3:76:a5:a0:c0:27:c1:3b:
                    88:99:c5:5d:46:e8:80:0c:17:ad:d5:ad:f3:39:94:
                    b9:b1:53:b8:0a:b7:26:65:04:52:82:c5:a4:42:fe:
                    2d:d0:4e:c8:a7:a2:30:6a:03:db:8e:68:8b:e7:fc:
                    94:d5:4e:90:5e:44:0c:e3:34:5b:b9:eb:83:4c:ed:
                    fe:51:31:6b:72:7f:0e:37:39:3c:1a:24:de:bb:c3:
                    20:7f:8c:a1:2c:43:45:f1:ee:f0:1c:ab:c8:ab:76:
                    8f:66:5f:38:d6:95:fd:84:da:0d:17:cc:3b:c9:cd:
                    9e:8f:57:69:31:af:53:dc:6e:61:32:07:60:0f:fd:
                    6b:50:14:7d:2a:d5:4e:5e:76:57:0d:25:de:4b:9b:
                    5f:e3:15:37:ed:26:6f:b9:59:03:ac:da:9b:6b:44:
                    36:aa:3a:63:9b:b1:9c:39:67:63:e4:de:6f:5c:09:
                    24:a1:ae:58:5c:05:b3:1d:3d:68:23:90:8f:75:cb:
                    3c:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:32:C9:28:B8:97:AE:9D:06:4A:D1:79:0D:AD:E0:F2:54:66:08:B7
            X509v3 Authority Key Identifier:
                keyid:E4:54:3A:33:66:CE:0D:6A:5D:A4:DD:46:30:7D:29:93:DD:A0:26:B4

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20189/5FQ6M2bODWpdpN1GMH0pk92gJrQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5FQ6M2bODWpdpN1GMH0pk92gJrQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20189/0TLJKLiXrp0GStF5Da3g8lRmCLc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.189.188.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4c:77:17:27:7a:46:ab:b6:37:11:8b:c7:7a:41:9b:c3:b4:81:
         08:31:2f:ec:02:8b:69:61:f3:6e:6e:30:54:d9:25:a3:7d:6f:
         fd:7e:c4:52:55:97:a0:9f:bd:70:4e:74:da:1d:a9:14:6f:d1:
         46:0c:c8:62:9a:0a:73:65:90:df:10:28:01:7d:92:98:01:10:
         7b:8c:80:38:f9:37:8b:7d:47:91:dd:15:a5:6e:fa:bc:1e:b0:
         fb:0f:d2:89:96:31:2b:0c:df:67:f4:3c:fe:fa:d2:57:e0:4c:
         d0:0c:f2:e9:dd:53:d9:73:e6:5b:9f:e9:f2:be:42:e5:0a:13:
         c2:8b:fd:e4:8e:fb:d4:42:3d:a3:55:6b:0d:b6:f8:25:17:53:
         64:61:48:9f:2b:cb:23:83:cc:a4:d9:8f:8f:78:40:c1:38:91:
         7f:63:f4:09:7a:a4:38:89:ee:55:b7:3e:e3:3d:e9:67:9c:3c:
         dc:d5:b7:dd:3f:cd:1f:32:dd:87:a6:06:a3:da:55:30:a1:66:
         2f:fe:cd:8a:36:a7:3f:36:63:58:a3:75:c8:6f:21:be:88:f9:
         32:98:db:c0:b6:d9:78:96:6e:18:fd:ce:99:d3:a1:0d:87:56:
         d9:1e:29:12:22:37:67:34:ca:e9:54:46:5b:8a:dd:3d:cb:40:
         86:be:a6:8d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon May 19 02:32:12 2025 by rpki-client