Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20213/-cuEBCDBIVK0AmzRm-87Gg_5HZk.roa
File:                     -cuEBCDBIVK0AmzRm-87Gg_5HZk.roa (raw, json)
Hash identifier:          saRwyrNSiLthvPRqd9gEw6ZAjZ+O31Dd+u6QdQAFzgE=
Subject key identifier:   F9:CB:84:04:20:C1:21:52:B4:02:6C:D1:9B:EF:3B:1A:0F:F9:1D:99
Certificate issuer:       /CN=589062195FD91BE2C085C32E048E7BDC87ABE3D8
Certificate serial:       22
Authority key identifier: 58:90:62:19:5F:D9:1B:E2:C0:85:C3:2E:04:8E:7B:DC:87:AB:E3:D8
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WJBiGV_ZG-LAhcMuBI573Ier49g.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20213/-cuEBCDBIVK0AmzRm-87Gg_5HZk.roa
Signing time:             Tue 10 Jun 2025 10:45:33 +0000
ROA not before:           Tue 10 Jun 2025 10:45:33 +0000
ROA not after:            Sat 23 May 2026 09:51:00 +0000
asID:                     63799
IP address blocks:        103.108.46.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20213/WJBiGV_ZG-LAhcMuBI573Ier49g.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20213/WJBiGV_ZG-LAhcMuBI573Ier49g.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WJBiGV_ZG-LAhcMuBI573Ier49g.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 34 (0x22)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=589062195FD91BE2C085C32E048E7BDC87ABE3D8
        Validity
            Not Before: Jun 10 10:45:33 2025 GMT
            Not After : May 23 09:51:00 2026 GMT
        Subject: CN=F9CB840420C12152B4026CD19BEF3B1A0FF91D99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ea:19:b7:1d:e6:9f:ca:9d:3a:af:dd:56:6b:
                    b5:34:f3:97:f6:1d:10:d0:e3:be:96:45:89:da:bb:
                    8d:06:b5:42:b8:31:b3:b3:fe:8b:9f:a5:85:a5:66:
                    a2:ad:60:bb:21:ce:79:f8:e4:26:51:54:fa:b7:0c:
                    86:a9:7a:d8:d2:14:02:c2:80:a0:06:81:49:36:b7:
                    0c:ef:16:79:fc:6c:69:97:86:26:39:48:e9:2e:ef:
                    d1:76:e9:84:30:e4:ff:da:c9:52:8a:dd:f8:52:23:
                    96:12:46:48:90:6b:84:6d:c7:b7:c8:06:2b:e6:78:
                    2f:cf:85:d6:e7:5b:be:c7:3f:e2:93:e9:9a:0b:40:
                    28:57:ce:14:c7:7e:b0:0f:f4:e9:7f:8f:2c:dc:64:
                    bd:19:56:74:7b:f5:a3:3c:8a:38:4c:93:d4:e9:fc:
                    eb:b8:0f:93:99:06:6e:cd:44:63:3d:52:a8:25:0a:
                    06:ce:92:17:0d:eb:ab:f1:a4:1d:4c:fc:8b:5d:28:
                    23:62:ad:da:e6:01:cd:13:4f:7d:04:1a:ac:e0:eb:
                    f7:58:44:90:7d:31:c5:75:3a:f5:38:b8:7f:58:0e:
                    9a:64:f1:22:11:1c:a1:cd:29:05:c4:d0:61:03:93:
                    c6:91:db:ce:92:57:88:85:e0:50:a3:94:ab:35:95:
                    7d:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:CB:84:04:20:C1:21:52:B4:02:6C:D1:9B:EF:3B:1A:0F:F9:1D:99
            X509v3 Authority Key Identifier:
                keyid:58:90:62:19:5F:D9:1B:E2:C0:85:C3:2E:04:8E:7B:DC:87:AB:E3:D8

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20213/WJBiGV_ZG-LAhcMuBI573Ier49g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WJBiGV_ZG-LAhcMuBI573Ier49g.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20213/-cuEBCDBIVK0AmzRm-87Gg_5HZk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.108.46.0/23

    Signature Algorithm: sha256WithRSAEncryption
         08:89:e5:0e:88:23:69:98:de:90:96:0c:ad:91:0e:16:13:67:
         1f:da:ec:81:13:e7:d8:6e:89:ca:c5:d1:0b:90:89:45:11:98:
         f7:af:74:db:e2:4f:89:64:f6:17:e3:37:63:f1:7c:72:28:01:
         51:37:ef:b3:95:d5:7c:03:60:14:70:94:1b:ce:22:7c:fe:49:
         f4:b1:f7:3f:6a:ff:ad:4d:35:a8:f8:96:00:dc:84:c8:e1:78:
         63:e4:a9:80:b1:c3:e4:5c:fe:d9:46:54:74:ff:a6:e0:fa:99:
         43:44:38:15:c7:ec:70:92:66:bd:f7:be:72:16:41:af:fc:af:
         9c:15:b6:94:18:c5:64:4c:9c:a1:28:20:1a:a1:14:96:36:90:
         b9:d7:4a:4d:c2:67:6a:e7:d7:74:72:e8:4f:1e:6a:d7:f8:58:
         26:58:06:04:b3:a9:23:68:8d:5c:f2:f8:00:64:a4:21:0c:ab:
         1e:48:3a:b2:be:b7:82:52:cd:da:7a:3c:86:ea:86:5a:61:35:
         98:e9:fe:1d:7a:e6:84:85:74:2f:59:df:c7:49:59:c7:76:c3:
         27:87:9a:fa:d9:af:b2:7f:b3:de:d9:e0:51:52:b3:91:6d:b3:
         df:e8:3d:d1:35:7a:04:bb:32:0a:5a:9a:92:12:80:d8:5c:36:
         5b:ca:d3:a2
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIBIjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1ODkw
NjIxOTVGRDkxQkUyQzA4NUMzMkUwNDhFN0JEQzg3QUJFM0Q4MB4XDTI1MDYxMDEw
NDUzM1oXDTI2MDUyMzA5NTEwMFowMzExMC8GA1UEAxMoRjlDQjg0MDQyMEMxMjE1
MkI0MDI2Q0QxOUJFRjNCMUEwRkY5MUQ5OTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMPqGbcd5p/KnTqv3VZrtTTzl/YdENDjvpZFidq7jQa1Qrgxs7P+
i5+lhaVmoq1guyHOefjkJlFU+rcMhql62NIUAsKAoAaBSTa3DO8WefxsaZeGJjlI
6S7v0XbphDDk/9rJUord+FIjlhJGSJBrhG3Ht8gGK+Z4L8+F1udbvsc/4pPpmgtA
KFfOFMd+sA/06X+PLNxkvRlWdHv1ozyKOEyT1On867gPk5kGbs1EYz1SqCUKBs6S
Fw3rq/GkHUz8i10oI2Kt2uYBzRNPfQQarODr91hEkH0xxXU69Ti4f1gOmmTxIhEc
oc0pBcTQYQOTxpHbzpJXiIXgUKOUqzWVfZ0CAwEAAaOCAigwggIkMB0GA1UdDgQW
BBT5y4QEIMEhUrQCbNGb7zsaD/kdmTAfBgNVHSMEGDAWgBRYkGIZX9kb4sCFwy4E
jnvch6vj2DAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAyMTMvV0pCaUdWX1pHLUxBaGNNdUJJNTczSWVyNDlnLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvV0pCaUdWX1pHLUxBaGNNdUJJNTcz
SWVyNDlnLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzIwMjEzLy1jdUVCQ0RCSVZLMEFtelJtLTg3R2dfNUhaay5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAFnbC4wDQYJKoZIhvcNAQELBQADggEBAAiJ5Q6II2mY3pCWDK2RDhYT
Zx/a7IET59huicrF0QuQiUURmPevdNviT4lk9hfjN2PxfHIoAVE377OV1XwDYBRw
lBvOInz+SfSx9z9q/61NNaj4lgDchMjheGPkqYCxw+Rc/tlGVHT/puD6mUNEOBXH
7HCSZr33vnIWQa/8r5wVtpQYxWRMnKEoIBqhFJY2kLnXSk3CZ2rn13Ry6E8eatf4
WCZYBgSzqSNojVzy+ABkpCEMqx5IOrK+t4JSzdp6PIbqhlphNZjp/h165oSFdC9Z
38dJWcd2wyeHmvrZr7J/s97Z4FFSs5Fts9/oPdE1egS7MgpampISgNhcNlvK06I=
-----END CERTIFICATE-----
Generated at Sat Jul 5 03:49:54 2025 by rpki-client