Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/539/C-br06HCM5NYFaUTkIotUe2CLdc.roa
File:                     C-br06HCM5NYFaUTkIotUe2CLdc.roa (raw, json)
Hash identifier:          O8RAFBA3Dvqte2wHP8VAVpPKTsuLOwSVzzjgLUKCJXg=
Subject key identifier:   0B:E6:EB:D3:A1:C2:33:93:58:15:A5:13:90:8A:2D:51:ED:82:2D:D7
Certificate issuer:       /CN=5B0D72F9F430B7D4003375F10D5025B9E5C00437
Certificate serial:       94
Authority key identifier: 5B:0D:72:F9:F4:30:B7:D4:00:33:75:F1:0D:50:25:B9:E5:C0:04:37
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ww1y-fQwt9QAM3XxDVAlueXABDc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/C-br06HCM5NYFaUTkIotUe2CLdc.roa
Signing time:             Tue 01 Jul 2025 01:34:57 +0000
ROA not before:           Tue 01 Jul 2025 01:34:57 +0000
ROA not after:            Mon 15 Jun 2026 01:30:02 +0000
asID:                     55900
IP address blocks:        203.23.200.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/Ww1y-fQwt9QAM3XxDVAlueXABDc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/Ww1y-fQwt9QAM3XxDVAlueXABDc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ww1y-fQwt9QAM3XxDVAlueXABDc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 148 (0x94)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B0D72F9F430B7D4003375F10D5025B9E5C00437
        Validity
            Not Before: Jul  1 01:34:57 2025 GMT
            Not After : Jun 15 01:30:02 2026 GMT
        Subject: CN=0BE6EBD3A1C233935815A513908A2D51ED822DD7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:c8:03:12:29:55:a4:f7:45:7d:d8:33:2e:e0:
                    80:a6:97:eb:c8:0f:94:67:91:c7:a1:3b:6f:30:4c:
                    47:49:7e:e0:1d:ef:d8:b1:e3:a4:b9:33:a2:b8:da:
                    d2:60:cf:5a:86:7b:f7:a2:da:f2:be:93:a0:18:60:
                    07:d3:28:3f:47:18:4c:55:7d:b4:43:65:94:29:e1:
                    d8:27:c0:7e:72:b8:26:3a:63:a3:7c:d8:e6:6f:b8:
                    78:39:4f:da:6e:c0:20:33:7d:12:77:09:68:cd:b1:
                    66:75:3e:64:aa:19:c8:36:cd:a1:64:6b:69:c9:67:
                    0c:c0:80:7d:8a:56:80:ed:db:05:1a:00:bb:4b:eb:
                    6c:d5:1c:83:ab:51:2b:4a:a9:6c:ab:6c:6f:1e:51:
                    36:ba:70:40:ea:52:70:82:c1:f3:6f:e1:3c:bc:cb:
                    9c:a6:fb:4c:a9:6b:01:2a:1d:29:a5:0f:f3:85:93:
                    9c:5f:5f:e9:8f:29:41:85:0a:dd:94:dd:d3:e7:9e:
                    78:b0:f4:c2:dd:ee:8d:28:41:a0:d1:79:d6:ce:7c:
                    a3:46:4e:34:8b:c2:88:72:db:ef:41:e5:41:d2:61:
                    17:4b:4b:b1:00:85:cf:13:34:26:02:76:89:09:2b:
                    3d:c5:c0:2c:1f:b9:1a:8a:81:da:6e:44:08:5e:3c:
                    e8:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:E6:EB:D3:A1:C2:33:93:58:15:A5:13:90:8A:2D:51:ED:82:2D:D7
            X509v3 Authority Key Identifier:
                keyid:5B:0D:72:F9:F4:30:B7:D4:00:33:75:F1:0D:50:25:B9:E5:C0:04:37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/Ww1y-fQwt9QAM3XxDVAlueXABDc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ww1y-fQwt9QAM3XxDVAlueXABDc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/C-br06HCM5NYFaUTkIotUe2CLdc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.23.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7a:da:04:89:7a:b9:55:af:af:91:97:c3:06:64:8e:4c:79:c2:
         22:7d:58:74:72:69:96:33:e1:98:db:0a:a3:1e:3b:c0:39:2a:
         9f:15:fd:fb:fe:83:58:b4:9c:39:62:32:0e:b9:60:3c:96:ca:
         21:c6:c4:d7:a6:0b:24:8a:3d:0d:79:42:77:d5:d0:3d:76:a5:
         3a:8d:91:80:60:28:b3:d2:ec:9f:81:dc:24:d5:ef:a9:ad:29:
         bd:ee:6b:5b:aa:fd:96:c1:e4:f3:29:f9:d2:c6:ca:94:02:c9:
         c0:8e:68:e9:81:b9:28:54:89:36:95:bc:6f:e3:3c:a4:2b:b7:
         01:39:03:2e:06:ea:aa:20:87:ad:91:92:6c:b4:96:3d:a7:95:
         f8:5d:3a:1e:df:01:b7:43:9b:4f:45:60:ac:e4:9f:a2:4b:15:
         c5:19:d0:cd:ae:a3:4f:3c:1c:57:b7:1b:2e:2d:30:b8:e3:6b:
         59:92:35:45:f9:64:da:a8:62:e2:9a:d4:43:36:7f:b3:cd:cc:
         bb:cd:98:a5:96:bc:49:4d:36:69:15:0d:53:ad:2e:fa:db:e6:
         19:2d:4e:3d:c7:b2:a5:6f:36:7f:38:c2:ba:bf:7a:a4:22:da:
         35:28:a2:8a:84:02:e2:55:8e:c1:f6:4b:0a:34:8e:18:18:da:
         70:7f:c1:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 02:43:06 2025 by rpki-client