Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/506/U-bM0SjglPOsG25oC32eyuRDyoo.roa
File:                     U-bM0SjglPOsG25oC32eyuRDyoo.roa (raw, json)
Hash identifier:          2TKLrEuV/gXlTEHS6kZemKjuz0FffA4YZABJ7nUcL2Y=
Subject key identifier:   53:E6:CC:D1:28:E0:94:F3:AC:1B:6E:68:0B:7D:9E:CA:E4:43:CA:8A
Certificate issuer:       /CN=4BEA6BD8A9C7848829141999A016A0C9D19912AF
Certificate serial:       65
Authority key identifier: 4B:EA:6B:D8:A9:C7:84:88:29:14:19:99:A0:16:A0:C9:D1:99:12:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/S-pr2KnHhIgpFBmZoBagydGZEq8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/U-bM0SjglPOsG25oC32eyuRDyoo.roa
Signing time:             Tue 01 Jul 2025 01:33:01 +0000
ROA not before:           Tue 01 Jul 2025 01:33:01 +0000
ROA not after:            Mon 15 Jun 2026 01:30:02 +0000
asID:                     14618
IP address blocks:        103.23.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/S-pr2KnHhIgpFBmZoBagydGZEq8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/S-pr2KnHhIgpFBmZoBagydGZEq8.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/S-pr2KnHhIgpFBmZoBagydGZEq8.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101 (0x65)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4BEA6BD8A9C7848829141999A016A0C9D19912AF
        Validity
            Not Before: Jul  1 01:33:01 2025 GMT
            Not After : Jun 15 01:30:02 2026 GMT
        Subject: CN=53E6CCD128E094F3AC1B6E680B7D9ECAE443CA8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:e3:73:39:b5:aa:57:c1:29:78:63:72:ed:e1:
                    40:a6:38:d6:00:21:2c:ae:ab:2d:5e:31:5b:16:84:
                    57:61:59:8f:24:c7:1a:56:4b:4f:a2:f3:e1:59:e4:
                    ed:9b:56:75:9a:21:1b:ca:81:5c:e4:92:d0:34:da:
                    16:ac:f5:ef:6a:a5:b7:df:dc:a5:a3:9b:1d:dc:21:
                    ee:b7:4e:ef:f6:7f:30:8c:86:57:32:f5:83:db:90:
                    26:11:e6:6b:2a:94:df:fb:37:af:c2:56:20:44:c0:
                    a4:37:ce:aa:ee:01:cb:12:57:2a:02:1d:67:48:69:
                    97:b7:d8:2a:5d:cd:96:82:c8:b8:50:19:26:0c:81:
                    bb:f4:5f:3d:e6:f5:50:42:56:7a:4f:04:a8:10:05:
                    5e:af:7f:49:80:18:bc:90:a0:d4:ce:dd:3d:6c:e0:
                    5f:1b:cc:84:dd:58:33:57:45:f9:49:91:90:64:c1:
                    84:a6:0b:19:ff:88:ad:a2:38:11:12:4a:d2:1d:bf:
                    b1:22:a4:38:05:a2:d1:eb:af:31:89:fb:31:cf:8d:
                    35:80:39:76:3a:f2:7a:b3:c7:41:a7:1b:85:53:dd:
                    34:3b:95:6e:43:88:59:7d:b7:24:d2:31:c0:52:0c:
                    87:a3:03:d7:49:0a:db:08:78:0c:f8:60:3c:ce:88:
                    be:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:E6:CC:D1:28:E0:94:F3:AC:1B:6E:68:0B:7D:9E:CA:E4:43:CA:8A
            X509v3 Authority Key Identifier:
                keyid:4B:EA:6B:D8:A9:C7:84:88:29:14:19:99:A0:16:A0:C9:D1:99:12:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/S-pr2KnHhIgpFBmZoBagydGZEq8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/S-pr2KnHhIgpFBmZoBagydGZEq8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/U-bM0SjglPOsG25oC32eyuRDyoo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.23.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:19:04:4e:37:b6:ef:63:27:fe:3e:03:da:e5:84:41:50:48:
         37:26:42:b6:8b:ba:a5:c9:ae:6a:1d:e8:24:d7:d7:86:91:b4:
         fb:21:5c:62:2c:ac:b5:d5:12:67:00:fc:84:e8:60:54:b1:e8:
         49:f5:a3:40:84:da:c9:4b:e6:b0:b6:a9:ea:55:ac:8a:52:c2:
         bf:c6:52:aa:db:96:71:a8:ac:1f:25:39:55:f8:1e:04:cd:c1:
         c7:26:bc:c3:82:b4:42:a7:38:ea:d1:8c:82:5f:1a:1d:e3:08:
         eb:c5:42:c7:f5:ad:99:57:73:5b:9d:6f:5a:e7:d0:b6:e3:78:
         f7:0d:6e:30:82:55:b9:f8:a6:33:46:63:54:99:ce:d4:35:21:
         2e:f8:e6:50:33:34:5b:6f:fb:af:24:fa:2f:64:41:65:a1:77:
         04:29:2d:88:87:ce:8e:50:02:c6:56:dc:3d:d9:37:3f:ba:f8:
         0e:68:81:c2:38:e3:91:5e:2a:a6:6e:e4:b2:50:64:b3:0c:38:
         57:6b:8c:79:66:1e:34:39:bd:ed:61:d7:bb:93:f4:4f:78:b6:
         8a:d9:01:6d:5c:3e:be:70:eb:84:e6:3d:f5:9b:80:1e:34:bc:
         0a:49:a1:03:ab:32:1d:3c:04:ca:08:90:91:2e:6c:aa:83:d4:
         f8:d8:6b:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 03:30:07 2025 by rpki-client