Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/506/cnerBmB74J3f7QkgfPM6zqnKVds.roa
File:                     cnerBmB74J3f7QkgfPM6zqnKVds.roa (raw, json)
Hash identifier:          B5oUrFh9TgYlwMXlaDb4esYP1GtqvwRsa03Qvg0X9F0=
Subject key identifier:   72:77:AB:06:60:7B:E0:9D:DF:ED:09:20:7C:F3:3A:CE:A9:CA:55:DB
Certificate issuer:       /CN=4BEA6BD8A9C7848829141999A016A0C9D19912AF
Certificate serial:       60
Authority key identifier: 4B:EA:6B:D8:A9:C7:84:88:29:14:19:99:A0:16:A0:C9:D1:99:12:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/S-pr2KnHhIgpFBmZoBagydGZEq8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/cnerBmB74J3f7QkgfPM6zqnKVds.roa
Signing time:             Tue 01 Jul 2025 01:32:58 +0000
ROA not before:           Tue 01 Jul 2025 01:32:58 +0000
ROA not after:            Mon 15 Jun 2026 01:30:02 +0000
asID:                     14618
IP address blocks:        103.23.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/S-pr2KnHhIgpFBmZoBagydGZEq8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/S-pr2KnHhIgpFBmZoBagydGZEq8.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/S-pr2KnHhIgpFBmZoBagydGZEq8.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 96 (0x60)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4BEA6BD8A9C7848829141999A016A0C9D19912AF
        Validity
            Not Before: Jul  1 01:32:58 2025 GMT
            Not After : Jun 15 01:30:02 2026 GMT
        Subject: CN=7277AB06607BE09DDFED09207CF33ACEA9CA55DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:57:52:5a:ce:e8:8d:ca:83:b9:1a:35:48:81:
                    b9:de:d2:2f:c8:d7:c2:29:24:fd:85:b4:64:83:e2:
                    a0:d3:2e:a6:7f:fe:8c:33:54:23:80:27:53:e0:42:
                    80:c0:27:bf:f2:83:34:d7:06:05:13:95:1a:33:53:
                    f8:84:fb:fd:12:59:eb:bd:d5:63:c7:87:39:cb:cb:
                    f6:47:df:87:26:db:85:2c:7a:51:a8:b6:7d:66:54:
                    f9:5d:65:9a:ad:6c:6c:fe:60:16:7d:ef:6e:84:54:
                    5a:9e:de:04:d0:05:5f:4d:cd:17:fa:52:58:73:61:
                    24:dc:0e:1b:b9:d0:5c:3f:be:c5:f7:48:16:a8:7a:
                    da:39:96:69:48:c7:c3:71:d8:c3:13:d9:25:87:30:
                    5a:1e:61:54:9c:0f:6d:47:a8:d1:ff:83:e9:3f:34:
                    14:d4:4a:ca:10:b3:b5:2c:6a:96:fb:f1:f8:e9:0f:
                    9e:a4:03:b6:66:3b:df:42:e5:6c:b1:56:56:3f:27:
                    b0:f7:fc:96:59:b1:85:6b:72:ff:30:96:81:42:b8:
                    ee:b5:06:db:fc:6c:59:83:ea:35:12:bb:68:c7:4b:
                    5a:fc:7e:e7:51:ab:15:48:a4:cf:83:60:ef:5c:97:
                    20:08:b8:da:ef:2d:94:dc:72:9d:ec:cb:22:f4:0f:
                    21:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:77:AB:06:60:7B:E0:9D:DF:ED:09:20:7C:F3:3A:CE:A9:CA:55:DB
            X509v3 Authority Key Identifier:
                keyid:4B:EA:6B:D8:A9:C7:84:88:29:14:19:99:A0:16:A0:C9:D1:99:12:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/S-pr2KnHhIgpFBmZoBagydGZEq8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/S-pr2KnHhIgpFBmZoBagydGZEq8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/cnerBmB74J3f7QkgfPM6zqnKVds.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.23.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:c6:d5:a3:95:6c:a4:f4:d3:d2:29:a6:10:df:0d:9a:92:84:
         7e:af:0c:1c:70:f4:5b:40:44:7f:a9:e1:4d:80:77:58:d6:bc:
         c7:2b:64:69:06:ef:c7:a6:26:48:22:9b:d0:45:ed:ce:6b:71:
         e3:e5:7c:be:43:70:69:de:15:20:dd:e8:1b:87:d3:29:d8:61:
         9b:f6:91:c9:74:54:bc:cc:37:48:37:1e:a9:9a:7d:2a:a2:fe:
         94:50:d2:9e:08:1f:90:62:9f:f9:3f:4f:d3:be:f7:5d:b9:9e:
         3d:ae:33:a7:bd:34:0d:87:62:8e:c5:25:86:da:23:33:14:d6:
         cc:3e:e0:9a:23:15:f9:b3:77:47:08:05:5c:f2:66:6e:13:cd:
         68:47:51:79:c0:ac:79:f6:a4:a8:e1:b8:cc:d0:02:a5:d2:db:
         8d:12:2b:7f:60:ed:a2:ff:cc:55:fe:4d:e4:f6:06:17:86:18:
         ed:a6:02:60:c7:2b:4d:71:65:47:3f:36:97:44:a3:56:3a:b9:
         3d:0c:5f:56:dd:f9:34:b8:da:c4:d2:9f:c8:bc:77:08:8e:70:
         37:28:ca:37:55:ac:04:0a:5b:ed:54:ce:d6:6e:61:15:22:9b:
         9a:92:8a:a6:62:4f:5f:03:3a:67:30:03:31:79:d7:61:de:5a:
         22:d1:cf:0f
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBYDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0QkVB
NkJEOEE5Qzc4NDg4MjkxNDE5OTlBMDE2QTBDOUQxOTkxMkFGMB4XDTI1MDcwMTAx
MzI1OFoXDTI2MDYxNTAxMzAwMlowMzExMC8GA1UEAxMoNzI3N0FCMDY2MDdCRTA5
RERGRUQwOTIwN0NGMzNBQ0VBOUNBNTVEQjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMRXUlrO6I3Kg7kaNUiBud7SL8jXwikk/YW0ZIPioNMupn/+jDNU
I4AnU+BCgMAnv/KDNNcGBROVGjNT+IT7/RJZ673VY8eHOcvL9kffhybbhSx6Uai2
fWZU+V1lmq1sbP5gFn3vboRUWp7eBNAFX03NF/pSWHNhJNwOG7nQXD++xfdIFqh6
2jmWaUjHw3HYwxPZJYcwWh5hVJwPbUeo0f+D6T80FNRKyhCztSxqlvvx+OkPnqQD
tmY730LlbLFWVj8nsPf8llmxhWty/zCWgUK47rUG2/xsWYPqNRK7aMdLWvx+51Gr
FUikz4Ng71yXIAi42u8tlNxynezLIvQPISMCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBRyd6sGYHvgnd/tCSB88zrOqcpV2zAfBgNVHSMEGDAWgBRL6mvYqceEiCkUGZmg
FqDJ0ZkSrzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNTA2L1MtcHIyS25IaElncEZCbVpvQmFneWRHWkVxOC5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1MtcHIyS25IaElncEZCbVpvQmFneWRH
WkVxOC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC81MDYvY25lckJtQjc0SjNmN1FrZ2ZQTTZ6cW5LVmRzLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAGcXBjANBgkqhkiG9w0BAQsFAAOCAQEAbMbVo5VspPTT0immEN8NmpKEfq8M
HHD0W0BEf6nhTYB3WNa8xytkaQbvx6YmSCKb0EXtzmtx4+V8vkNwad4VIN3oG4fT
Kdhhm/aRyXRUvMw3SDceqZp9KqL+lFDSnggfkGKf+T9P0773XbmePa4zp700DYdi
jsUlhtojMxTWzD7gmiMV+bN3RwgFXPJmbhPNaEdRecCsefakqOG4zNACpdLbjRIr
f2Dtov/MVf5N5PYGF4YY7aYCYMcrTXFlRz82l0SjVjq5PQxfVt35NLjaxNKfyLx3
CI5wNyjKN1WsBApb7VTO1m5hFSKbmpKKpmJPXwM6ZzADMXnXYd5aItHPDw==
-----END CERTIFICATE-----
Generated at Fri Jul 4 19:16:25 2025 by rpki-client