Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/506/9ygvu_6B1iLMFBHZOF6F_jsoMIQ.roa
File:                     9ygvu_6B1iLMFBHZOF6F_jsoMIQ.roa (raw, json)
Hash identifier:          UVSAkM1lcJxS0oa+CiO9GTx2tb8NwZF+1miW47mQ8VQ=
Subject key identifier:   F7:28:2F:BB:FE:81:D6:22:CC:14:11:D9:38:5E:85:FE:3B:28:30:84
Certificate issuer:       /CN=4BEA6BD8A9C7848829141999A016A0C9D19912AF
Certificate serial:       64
Authority key identifier: 4B:EA:6B:D8:A9:C7:84:88:29:14:19:99:A0:16:A0:C9:D1:99:12:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/S-pr2KnHhIgpFBmZoBagydGZEq8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/9ygvu_6B1iLMFBHZOF6F_jsoMIQ.roa
Signing time:             Tue 01 Jul 2025 01:33:00 +0000
ROA not before:           Tue 01 Jul 2025 01:33:00 +0000
ROA not after:            Mon 15 Jun 2026 01:30:02 +0000
asID:                     16509
IP address blocks:        103.23.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/S-pr2KnHhIgpFBmZoBagydGZEq8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/S-pr2KnHhIgpFBmZoBagydGZEq8.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/S-pr2KnHhIgpFBmZoBagydGZEq8.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 100 (0x64)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4BEA6BD8A9C7848829141999A016A0C9D19912AF
        Validity
            Not Before: Jul  1 01:33:00 2025 GMT
            Not After : Jun 15 01:30:02 2026 GMT
        Subject: CN=F7282FBBFE81D622CC1411D9385E85FE3B283084
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:b5:db:c0:31:e8:4b:f9:db:d0:b2:17:7c:6a:
                    ef:e7:92:b3:d9:d2:9f:35:d5:68:1d:fb:cb:a5:cb:
                    6b:30:9e:71:1e:c3:8f:97:c8:41:92:1f:ed:bb:58:
                    6b:be:24:2f:d9:0c:49:14:6f:f2:fe:15:9c:b1:c2:
                    a6:07:55:2d:04:ad:7a:4e:f2:2c:f9:9b:2f:c2:88:
                    cb:da:bc:ec:f2:54:fb:ff:53:42:5e:10:98:82:54:
                    d5:ef:40:3b:39:21:76:c7:27:60:12:59:92:9b:e1:
                    15:87:e5:5e:8e:ff:44:ab:53:24:bb:d3:1e:28:b5:
                    45:35:cc:be:ea:54:13:ac:ff:7e:8b:93:07:ad:bb:
                    71:64:aa:84:9a:19:81:ee:36:f3:ff:f5:e5:0a:71:
                    e1:af:de:1f:56:c6:df:4f:ff:3a:83:c1:29:c1:a6:
                    40:2f:f9:5a:80:96:a7:0a:9f:b9:21:be:15:ae:68:
                    fc:dd:3d:69:00:44:80:b7:e0:02:f3:b1:f7:c5:80:
                    82:dc:09:81:3e:69:d3:b0:d2:51:a4:4f:33:6d:fa:
                    a1:51:90:8b:9f:f9:d5:23:10:e3:db:c5:77:66:18:
                    3d:8d:9e:64:c2:96:67:11:c8:50:32:fd:e5:74:00:
                    79:b9:7f:d6:91:ea:07:63:0a:de:95:79:1b:f7:95:
                    e3:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:28:2F:BB:FE:81:D6:22:CC:14:11:D9:38:5E:85:FE:3B:28:30:84
            X509v3 Authority Key Identifier:
                keyid:4B:EA:6B:D8:A9:C7:84:88:29:14:19:99:A0:16:A0:C9:D1:99:12:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/S-pr2KnHhIgpFBmZoBagydGZEq8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/S-pr2KnHhIgpFBmZoBagydGZEq8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/9ygvu_6B1iLMFBHZOF6F_jsoMIQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.23.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:4f:86:89:05:80:8c:e4:1d:29:89:f5:c9:d1:72:4c:61:1c:
         53:30:6b:b3:74:b6:8f:6c:91:60:1c:fb:aa:ba:ec:73:3b:66:
         58:c5:f2:32:1d:95:16:7b:ba:5a:af:7b:72:8f:6d:0f:8c:92:
         7d:c4:7a:d0:bd:90:b3:de:a2:59:bd:e0:93:42:41:41:67:e4:
         f1:ba:41:b8:f6:9f:bc:9e:67:d9:8a:9a:22:b7:f9:52:e7:a9:
         e9:76:b1:23:25:96:e3:ad:c5:84:8b:ae:9c:cf:04:cb:54:e3:
         82:c4:ec:ef:7d:24:34:a2:4e:43:ee:f8:42:47:a2:7c:6a:be:
         33:0a:72:ee:f8:ff:59:1e:f2:05:1e:60:39:2b:fe:44:7b:ab:
         0f:5f:d5:9b:dc:91:61:90:c8:79:c8:68:e9:af:9c:8d:8c:46:
         e2:6c:d5:c9:fb:9f:83:4f:2f:e3:c4:cb:f4:1e:47:40:bc:e1:
         bb:1b:51:e6:63:53:af:3d:94:ee:24:bd:9f:33:5b:98:52:dd:
         14:05:2a:6a:3a:35:7b:f7:f8:dc:aa:fd:8a:fd:09:c7:cb:df:
         77:cd:77:24:54:7a:69:a9:22:f0:97:4d:a6:fd:c8:ff:94:af:
         c0:c4:c8:42:e2:7e:b1:de:84:93:7a:66:91:13:cf:57:16:64:
         8b:e7:97:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 20:27:32 2025 by rpki-client