Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/506/vc7kwCToUX_kZ4XeiR-KvZQ_gok.roa
File:                     vc7kwCToUX_kZ4XeiR-KvZQ_gok.roa (raw, json)
Hash identifier:          nwTJlrxau38yMr/TNGSkQBJP77jYLhMjz8K441o+toQ=
Subject key identifier:   BD:CE:E4:C0:24:E8:51:7F:E4:67:85:DE:89:1F:8A:BD:94:3F:82:89
Certificate issuer:       /CN=4BEA6BD8A9C7848829141999A016A0C9D19912AF
Certificate serial:       63
Authority key identifier: 4B:EA:6B:D8:A9:C7:84:88:29:14:19:99:A0:16:A0:C9:D1:99:12:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/S-pr2KnHhIgpFBmZoBagydGZEq8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/vc7kwCToUX_kZ4XeiR-KvZQ_gok.roa
Signing time:             Tue 01 Jul 2025 01:33:00 +0000
ROA not before:           Tue 01 Jul 2025 01:33:00 +0000
ROA not after:            Mon 15 Jun 2026 01:30:02 +0000
asID:                     16509
IP address blocks:        103.23.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/S-pr2KnHhIgpFBmZoBagydGZEq8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/S-pr2KnHhIgpFBmZoBagydGZEq8.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/S-pr2KnHhIgpFBmZoBagydGZEq8.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 99 (0x63)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4BEA6BD8A9C7848829141999A016A0C9D19912AF
        Validity
            Not Before: Jul  1 01:33:00 2025 GMT
            Not After : Jun 15 01:30:02 2026 GMT
        Subject: CN=BDCEE4C024E8517FE46785DE891F8ABD943F8289
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:6b:43:fa:24:67:ab:cf:57:06:ef:78:f1:9c:
                    a4:5e:2e:22:bb:ac:c1:ee:33:80:19:45:12:9e:23:
                    90:8d:c5:08:b6:6f:21:4c:c1:ec:e7:37:a1:10:f3:
                    68:06:10:23:13:8a:1b:6d:72:7b:87:36:6b:5c:69:
                    b5:77:43:84:b5:10:9b:98:ff:d0:14:14:6c:a7:60:
                    60:c2:7d:c9:05:9d:47:3f:7c:e0:8e:bf:f9:c5:8f:
                    b7:f9:45:4f:0f:fe:4a:49:51:ce:ce:f0:2d:76:59:
                    5c:5a:f4:a3:c7:ea:b0:73:78:04:bb:38:6f:da:00:
                    50:3b:5c:c8:f3:0b:77:46:1d:42:93:ef:c2:0a:91:
                    2a:49:7e:7b:fe:17:fb:82:a4:dd:dd:58:96:d9:21:
                    31:9b:a9:31:fc:58:84:ec:1d:da:46:c9:2e:d4:3e:
                    31:c9:72:21:1d:a3:1b:9c:15:11:01:17:77:01:58:
                    95:7a:2c:f0:3b:4f:43:a2:4f:82:fb:14:45:74:34:
                    d7:df:7e:4c:ce:47:99:94:7d:58:8b:88:e3:f8:21:
                    cf:89:2b:55:ff:e9:c1:2f:14:1d:38:54:a3:59:67:
                    63:e8:c7:3f:96:c2:05:a2:39:ea:5f:98:34:ca:c9:
                    71:eb:22:e7:17:d6:25:18:dc:13:4e:48:d5:73:d4:
                    09:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:CE:E4:C0:24:E8:51:7F:E4:67:85:DE:89:1F:8A:BD:94:3F:82:89
            X509v3 Authority Key Identifier:
                keyid:4B:EA:6B:D8:A9:C7:84:88:29:14:19:99:A0:16:A0:C9:D1:99:12:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/S-pr2KnHhIgpFBmZoBagydGZEq8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/S-pr2KnHhIgpFBmZoBagydGZEq8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/vc7kwCToUX_kZ4XeiR-KvZQ_gok.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.23.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:ca:8c:20:26:0c:10:9a:9c:99:0e:72:39:85:9c:ac:33:18:
         19:d1:62:e4:11:66:5b:6e:16:a0:2c:a1:07:21:1f:00:92:2c:
         4c:25:79:71:e0:1d:36:d3:39:d8:ce:cf:97:5d:71:8e:bd:08:
         99:cd:72:81:6b:e2:78:fa:8c:4d:07:4d:bc:ed:10:5f:22:3d:
         54:8a:7c:2a:cf:4d:a0:7e:51:85:93:80:84:91:38:46:a0:1f:
         72:cf:69:9e:5b:35:be:7f:3e:09:9c:38:77:50:0f:a6:1c:6f:
         8f:fb:7b:52:a5:cb:9e:1c:05:9f:72:36:80:0b:de:ca:82:2c:
         94:81:c0:5a:e3:bf:2e:7f:36:fb:26:fe:fe:ae:ad:25:ea:8f:
         38:69:40:bd:7c:31:23:ab:9a:11:37:ae:65:1d:6c:4a:aa:75:
         17:17:ac:80:13:44:3c:69:29:be:9c:1f:a6:da:30:88:1b:5a:
         45:ee:3c:2e:89:fc:3c:f1:cc:04:93:5d:aa:0c:2b:b6:eb:3f:
         0a:0c:0c:37:fe:06:e2:61:f0:25:e9:64:52:d0:6c:bc:cd:27:
         d4:07:83:3f:6b:08:94:c1:4a:2e:a1:78:e5:6e:9d:60:aa:b9:
         02:2c:37:6e:74:86:91:ad:a1:a8:4a:c8:b6:f9:cb:6f:c6:06:
         41:bc:4e:76
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBYzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0QkVB
NkJEOEE5Qzc4NDg4MjkxNDE5OTlBMDE2QTBDOUQxOTkxMkFGMB4XDTI1MDcwMTAx
MzMwMFoXDTI2MDYxNTAxMzAwMlowMzExMC8GA1UEAxMoQkRDRUU0QzAyNEU4NTE3
RkU0Njc4NURFODkxRjhBQkQ5NDNGODI4OTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANRrQ/okZ6vPVwbvePGcpF4uIruswe4zgBlFEp4jkI3FCLZvIUzB
7Oc3oRDzaAYQIxOKG21ye4c2a1xptXdDhLUQm5j/0BQUbKdgYMJ9yQWdRz984I6/
+cWPt/lFTw/+SklRzs7wLXZZXFr0o8fqsHN4BLs4b9oAUDtcyPMLd0YdQpPvwgqR
Kkl+e/4X+4Kk3d1YltkhMZupMfxYhOwd2kbJLtQ+MclyIR2jG5wVEQEXdwFYlXos
8DtPQ6JPgvsURXQ0199+TM5HmZR9WIuI4/ghz4krVf/pwS8UHThUo1lnY+jHP5bC
BaI56l+YNMrJcesi5xfWJRjcE05I1XPUCdECAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBS9zuTAJOhRf+Rnhd6JH4q9lD+CiTAfBgNVHSMEGDAWgBRL6mvYqceEiCkUGZmg
FqDJ0ZkSrzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNTA2L1MtcHIyS25IaElncEZCbVpvQmFneWRHWkVxOC5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1MtcHIyS25IaElncEZCbVpvQmFneWRH
WkVxOC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC81MDYvdmM3a3dDVG9VWF9rWjRYZWlSLUt2WlFfZ29rLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAGcXBDANBgkqhkiG9w0BAQsFAAOCAQEAO8qMICYMEJqcmQ5yOYWcrDMYGdFi
5BFmW24WoCyhByEfAJIsTCV5ceAdNtM52M7Pl11xjr0Imc1ygWviePqMTQdNvO0Q
XyI9VIp8Ks9NoH5RhZOAhJE4RqAfcs9pnls1vn8+CZw4d1APphxvj/t7UqXLnhwF
n3I2gAveyoIslIHAWuO/Ln82+yb+/q6tJeqPOGlAvXwxI6uaETeuZR1sSqp1Fxes
gBNEPGkpvpwfptowiBtaRe48Lon8PPHMBJNdqgwrtus/CgwMN/4G4mHwJelkUtBs
vM0n1AeDP2sIlMFKLqF45W6dYKq5Aiw3bnSGka2hqErItvnLb8YGQbxOdg==
-----END CERTIFICATE-----
Generated at Fri Jul 4 19:28:18 2025 by rpki-client