Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20274/83d3Mkcquleecv2ezeTyvGHX0MY.roa
File:                     83d3Mkcquleecv2ezeTyvGHX0MY.roa (raw, json)
Hash identifier:          3FQYehYUP+mi+h0xHGTOrBm/iiAscpm6B0bJa5ygnSc=
Subject key identifier:   F3:77:77:32:47:2A:BA:57:9E:72:FD:9E:CD:E4:F2:BC:61:D7:D0:C6
Certificate issuer:       /CN=C4385E1388714415ECB55403CF617E1683ABB5D6
Certificate serial:       03
Authority key identifier: C4:38:5E:13:88:71:44:15:EC:B5:54:03:CF:61:7E:16:83:AB:B5:D6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xDheE4hxRBXstVQDz2F-FoOrtdY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20274/83d3Mkcquleecv2ezeTyvGHX0MY.roa
Signing time:             Wed 25 Jun 2025 10:06:39 +0000
ROA not before:           Wed 25 Jun 2025 10:06:39 +0000
ROA not after:            Mon 15 Jun 2026 01:30:02 +0000
asID:                     0
IP address blocks:        165.99.146.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20274/xDheE4hxRBXstVQDz2F-FoOrtdY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20274/xDheE4hxRBXstVQDz2F-FoOrtdY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xDheE4hxRBXstVQDz2F-FoOrtdY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C4385E1388714415ECB55403CF617E1683ABB5D6
        Validity
            Not Before: Jun 25 10:06:39 2025 GMT
            Not After : Jun 15 01:30:02 2026 GMT
        Subject: CN=F3777732472ABA579E72FD9ECDE4F2BC61D7D0C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b8:87:11:b9:dd:b7:1c:25:9f:5c:49:81:df:
                    d7:be:ce:7d:2e:21:fe:3b:6e:18:a4:a6:b7:0c:38:
                    00:54:45:74:e7:3d:7b:0b:d8:3c:90:9e:6f:1a:d6:
                    62:51:cc:76:34:3a:15:22:27:01:ff:67:a6:29:c6:
                    82:de:b3:fe:b8:fd:27:45:32:14:a9:b7:92:df:ac:
                    ba:a4:c4:85:bc:fa:84:42:ea:22:56:d0:68:8c:09:
                    b3:34:5f:bd:2e:cb:e2:0d:19:fd:8a:aa:f6:59:29:
                    79:f5:e4:5d:ff:07:91:c6:66:b0:77:ea:19:13:af:
                    54:05:ac:f7:eb:e7:77:a0:b7:0a:23:3c:30:78:4a:
                    14:8b:23:fb:d4:3a:76:3f:46:ad:10:05:fe:b0:36:
                    e0:b2:d7:df:18:2a:2e:d6:77:ec:94:b1:3f:f0:b9:
                    28:10:08:9e:68:c9:f6:3d:85:e8:5f:02:cb:0e:1d:
                    1a:56:d0:ae:dc:1c:9a:ef:86:f9:cd:a9:7c:f5:ae:
                    b5:2b:e5:45:bc:d8:d8:12:02:93:a8:56:82:24:ff:
                    a5:54:85:51:46:da:91:00:b4:c7:be:87:00:e5:dd:
                    2d:93:b5:e4:37:06:1c:c1:c1:a2:b2:82:d5:aa:ef:
                    15:fe:d6:d9:ce:43:7d:f4:b3:3d:dd:b0:34:94:09:
                    f6:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:77:77:32:47:2A:BA:57:9E:72:FD:9E:CD:E4:F2:BC:61:D7:D0:C6
            X509v3 Authority Key Identifier:
                keyid:C4:38:5E:13:88:71:44:15:EC:B5:54:03:CF:61:7E:16:83:AB:B5:D6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20274/xDheE4hxRBXstVQDz2F-FoOrtdY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xDheE4hxRBXstVQDz2F-FoOrtdY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20274/83d3Mkcquleecv2ezeTyvGHX0MY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.99.146.0/23

    Signature Algorithm: sha256WithRSAEncryption
         49:e8:3b:52:11:f7:e2:2a:93:d4:e2:be:61:3a:ac:a1:31:37:
         b6:ba:9b:6b:a0:8b:92:a8:15:08:14:cc:7a:67:61:d0:fd:6e:
         d7:10:66:d6:91:62:22:2c:b8:f4:5c:42:49:2b:9b:9f:cb:6d:
         8e:56:1a:97:7e:c4:20:9d:f1:8a:dd:d9:4f:92:65:0d:d9:fd:
         30:40:4b:ed:72:56:42:f5:18:d9:12:70:53:93:33:19:6f:db:
         d3:a6:ea:13:1c:c6:31:b5:6e:8b:d1:87:04:cd:33:49:9f:94:
         ea:97:05:07:12:70:e1:dc:eb:0b:9b:a2:01:2e:fa:cd:e5:91:
         30:f7:36:f6:fc:7e:0d:9e:49:1e:99:ee:46:dc:cc:1f:96:71:
         04:82:88:dc:9a:f9:15:98:3e:6a:a0:a5:4e:a2:84:7e:2a:1e:
         3e:9a:f4:41:eb:ee:4b:b7:1d:87:9d:e8:0c:5c:cb:b2:aa:55:
         fc:0c:26:ff:8d:93:44:e6:c2:a5:43:cb:7b:0e:0c:f0:87:5c:
         7b:61:f4:a1:d8:0e:79:b9:94:c2:67:47:eb:47:37:89:90:94:
         98:c2:f0:f5:89:3a:8d:cf:76:5d:ed:84:09:80:2e:d9:90:e3:
         4d:b9:e4:a0:f7:4c:01:5c:4b:d3:14:69:9a:00:bb:e3:f5:10:
         a4:ff:a2:f2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jul 3 06:17:42 2025 by rpki-client