Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/5309/t7Lb-mYCMncoZGLANhWzFzagwT8.roa
File:                     t7Lb-mYCMncoZGLANhWzFzagwT8.roa (raw, json)
Hash identifier:          /zg0SNKE5pgPUUvItjklXQLTHLLocIGzMH21+WNXJf4=
Subject key identifier:   B7:B2:DB:FA:66:02:32:77:28:64:62:C0:36:15:B3:17:36:A0:C1:3F
Certificate issuer:       /CN=50F49F965CDDA4F88B81616F307E16D7DC88B4B8
Certificate serial:       4A
Authority key identifier: 50:F4:9F:96:5C:DD:A4:F8:8B:81:61:6F:30:7E:16:D7:DC:88:B4:B8
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UPSfllzdpPiLgWFvMH4W19yItLg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5309/t7Lb-mYCMncoZGLANhWzFzagwT8.roa
Signing time:             Tue 10 Jun 2025 10:51:09 +0000
ROA not before:           Tue 10 Jun 2025 10:51:09 +0000
ROA not after:            Sat 23 May 2026 09:51:00 +0000
asID:                     2515
IP address blocks:        103.131.194.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5309/UPSfllzdpPiLgWFvMH4W19yItLg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5309/UPSfllzdpPiLgWFvMH4W19yItLg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UPSfllzdpPiLgWFvMH4W19yItLg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 74 (0x4a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50F49F965CDDA4F88B81616F307E16D7DC88B4B8
        Validity
            Not Before: Jun 10 10:51:09 2025 GMT
            Not After : May 23 09:51:00 2026 GMT
        Subject: CN=B7B2DBFA66023277286462C03615B31736A0C13F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:58:7c:d0:49:a6:c2:c0:1b:43:57:c1:29:18:
                    44:ba:98:5f:83:e5:ea:3a:31:e2:c4:94:c0:e1:c0:
                    bf:88:8e:ae:8a:c1:8c:e8:45:2f:3f:5a:4f:f8:ed:
                    f9:5a:66:69:41:58:4d:4e:59:f2:ac:ba:a2:53:2c:
                    5c:8f:bf:5b:b0:36:fe:00:5c:b3:ca:87:4a:da:48:
                    92:90:e4:3c:9e:65:c8:0a:48:b9:49:e4:68:45:4a:
                    4f:8e:1e:be:25:47:9d:0c:6e:cb:b9:28:e7:16:5f:
                    cc:05:28:5c:ad:bf:8c:02:e0:33:5a:91:29:16:ed:
                    10:a4:ea:f7:36:a8:12:40:cb:87:a0:d0:28:78:8a:
                    f3:1d:e1:ca:80:e6:84:85:e5:d6:ea:b4:70:7f:bf:
                    36:cb:b0:53:fe:31:6c:d8:53:da:9e:ea:41:52:71:
                    00:93:37:13:95:3b:2c:68:e2:2d:92:d8:76:a2:7a:
                    f9:4c:90:c1:da:38:6a:af:bd:87:53:42:90:4e:25:
                    ba:e3:7f:92:b8:31:04:55:0f:74:02:9c:8c:e3:73:
                    8e:de:23:c7:f1:6b:d8:d8:65:66:32:2e:e0:c9:6a:
                    8c:3d:55:ce:22:56:d9:c6:fd:43:94:52:06:5a:ff:
                    a9:55:5c:9f:6c:f4:bd:53:96:18:1b:97:b9:b8:c5:
                    93:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:B2:DB:FA:66:02:32:77:28:64:62:C0:36:15:B3:17:36:A0:C1:3F
            X509v3 Authority Key Identifier:
                keyid:50:F4:9F:96:5C:DD:A4:F8:8B:81:61:6F:30:7E:16:D7:DC:88:B4:B8

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5309/UPSfllzdpPiLgWFvMH4W19yItLg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UPSfllzdpPiLgWFvMH4W19yItLg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5309/t7Lb-mYCMncoZGLANhWzFzagwT8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.131.194.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c5:bf:5b:3f:95:24:e9:86:eb:92:38:90:c9:42:56:10:7e:a9:
         6a:30:4e:66:29:ca:2e:4e:40:e9:4a:fc:24:ae:2a:93:68:fe:
         36:00:ba:81:ca:80:c1:62:65:96:df:35:48:83:fe:84:e7:53:
         76:fd:78:65:dd:b4:8b:26:80:65:1b:a0:26:75:9c:d1:f5:56:
         dd:25:1f:64:fb:0b:3b:68:09:76:55:af:84:fb:41:78:d7:63:
         08:ff:72:eb:df:81:83:72:2e:2c:33:df:e7:9f:bd:c6:d8:eb:
         3f:c8:f2:7a:30:37:ec:39:49:77:2a:b1:cb:dc:98:dc:97:8b:
         78:55:9f:29:c9:10:9b:a3:d1:58:9f:e8:64:fb:96:ac:21:fb:
         dc:66:33:9e:57:28:2a:90:88:33:dc:f3:6a:8e:7c:86:d3:78:
         23:c3:ee:c0:a0:21:5f:06:c1:a9:6d:6c:a0:f6:2f:20:36:00:
         bb:e2:74:cf:28:5c:7d:03:4b:76:9d:46:f9:11:03:6b:c9:ac:
         5b:e3:67:ca:bd:45:cb:19:83:ea:ce:22:dc:44:4a:c7:57:07:
         9c:fb:a0:b2:36:e7:e9:09:84:ec:6d:ba:0b:fc:8f:ff:f7:58:
         fe:8b:34:24:31:b1:ef:63:9a:ee:2a:49:58:fc:92:61:2e:8b:
         82:e5:de:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 00:08:02 2025 by rpki-client