Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/232/SBsUQPEv6LVNbg18h4ljqBXLHiM.roa
File:                     SBsUQPEv6LVNbg18h4ljqBXLHiM.roa (raw, json)
Hash identifier:          MG3o5fsQTEjwjYy70JIHwUAUjZzlKoFVFjRw705c2as=
Subject key identifier:   48:1B:14:40:F1:2F:E8:B5:4D:6E:0D:7C:87:89:63:A8:15:CB:1E:23
Certificate issuer:       /CN=2222A4C3961E467181A78700B960718846C8404B
Certificate serial:       3C
Authority key identifier: 22:22:A4:C3:96:1E:46:71:81:A7:87:00:B9:60:71:88:46:C8:40:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IiKkw5YeRnGBp4cAuWBxiEbIQEs.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/SBsUQPEv6LVNbg18h4ljqBXLHiM.roa
Signing time:             Thu 01 May 2025 01:33:00 +0000
ROA not before:           Thu 01 May 2025 01:33:00 +0000
ROA not after:            Wed 15 Apr 2026 01:30:03 +0000
asID:                     7672
IP address blocks:        101.96.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/IiKkw5YeRnGBp4cAuWBxiEbIQEs.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/IiKkw5YeRnGBp4cAuWBxiEbIQEs.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IiKkw5YeRnGBp4cAuWBxiEbIQEs.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 May 2025 18:22:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 60 (0x3c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2222A4C3961E467181A78700B960718846C8404B
        Validity
            Not Before: May  1 01:33:00 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=481B1440F12FE8B54D6E0D7C878963A815CB1E23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:9e:34:65:11:6e:e6:45:4e:9d:04:82:44:a9:
                    c4:c9:7d:d9:e3:4b:be:57:e3:38:ab:b9:49:fd:11:
                    4f:e5:1d:d8:61:eb:a2:68:8a:25:18:e7:2b:52:f5:
                    33:71:6c:9c:eb:f8:b4:9e:17:3c:a4:e1:bf:df:cf:
                    cc:b3:89:6e:b0:c4:0a:c7:8d:95:bc:d6:f0:18:11:
                    a0:ef:a4:e3:7b:8f:03:d0:05:5a:8c:c0:40:9b:13:
                    6b:05:d1:33:4d:91:1d:58:2d:14:82:be:8d:18:d6:
                    e7:53:a7:3e:09:e1:0c:ad:e6:48:11:c5:b0:4c:c4:
                    68:36:27:0d:4e:90:c2:99:2d:9e:c6:e1:07:52:89:
                    75:ec:8d:79:96:86:3e:1e:11:a8:e7:fc:59:d6:55:
                    58:12:d1:e3:b3:9a:4e:64:90:99:5a:c2:fe:55:ed:
                    6c:46:23:63:aa:84:57:49:6b:0e:17:60:98:2b:67:
                    8a:54:e2:31:b3:a3:e6:77:17:44:5b:77:1f:4c:6c:
                    04:1d:8c:4e:b5:84:5b:fc:4d:a2:9b:29:f2:03:bc:
                    8a:9a:3b:18:a7:c5:01:06:d8:77:2a:d7:15:73:b4:
                    cf:5b:6a:fe:dc:28:15:c0:a8:3c:a8:57:46:cf:54:
                    fd:24:36:d5:47:e6:a0:43:ad:7b:42:14:3d:49:f7:
                    e7:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:1B:14:40:F1:2F:E8:B5:4D:6E:0D:7C:87:89:63:A8:15:CB:1E:23
            X509v3 Authority Key Identifier:
                keyid:22:22:A4:C3:96:1E:46:71:81:A7:87:00:B9:60:71:88:46:C8:40:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/IiKkw5YeRnGBp4cAuWBxiEbIQEs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IiKkw5YeRnGBp4cAuWBxiEbIQEs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/SBsUQPEv6LVNbg18h4ljqBXLHiM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.96.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         06:60:73:4c:95:89:34:57:19:9a:74:33:01:4e:0f:ff:df:d4:
         7c:eb:2f:f8:bb:cc:e6:b7:d4:1d:3e:56:56:55:e9:14:73:ca:
         98:48:ea:b1:a6:1d:41:33:21:b2:40:a6:c2:1a:0b:09:3b:c2:
         7d:21:46:ee:92:df:91:d1:ae:fd:d3:15:26:89:c6:be:6b:2d:
         2b:24:1c:06:43:bc:51:59:4b:c8:dd:7d:fc:ef:04:b6:13:67:
         28:47:14:2a:96:c4:0f:f2:73:2c:b4:bd:06:88:03:2c:26:04:
         18:6e:d4:5d:86:e4:94:07:ec:13:c1:57:ac:0e:2e:96:62:6a:
         3f:e7:62:3e:cc:a5:be:ba:18:d2:28:b5:5c:2e:82:2b:7a:0f:
         af:82:d8:32:3b:16:fc:ce:ae:5c:8c:4d:91:86:50:b2:51:53:
         14:c0:ea:09:f2:89:28:f6:12:5d:ff:fd:46:f9:1a:04:b1:b2:
         a5:55:b3:5b:29:e1:19:a8:37:1d:a1:2a:b0:c5:45:ba:2d:b7:
         02:f4:82:ee:8a:22:04:af:11:45:4e:9f:7f:55:92:4e:f0:09:
         dd:6d:b0:47:87:8b:99:da:1f:dc:b2:62:70:e3:5b:c0:31:10:
         95:6c:49:48:d1:a9:ef:c7:b5:01:ab:2e:80:48:44:ef:29:48:
         4b:ed:6d:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 21:25:56 2025 by rpki-client