Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/539/_HbxQ7GAm_qXH2LTGfI5Ah0CEWY.roa
File:                     _HbxQ7GAm_qXH2LTGfI5Ah0CEWY.roa (raw, json)
Hash identifier:          2u2zAHTEcDq9oPejMpZgGMP3hjxS1oNHnfZomJoqrc0=
Subject key identifier:   FC:76:F1:43:B1:80:9B:FA:97:1F:62:D3:19:F2:39:02:1D:02:11:66
Certificate issuer:       /CN=5B0D72F9F430B7D4003375F10D5025B9E5C00437
Certificate serial:       8C
Authority key identifier: 5B:0D:72:F9:F4:30:B7:D4:00:33:75:F1:0D:50:25:B9:E5:C0:04:37
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ww1y-fQwt9QAM3XxDVAlueXABDc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/_HbxQ7GAm_qXH2LTGfI5Ah0CEWY.roa
Signing time:             Tue 10 Jun 2025 10:47:10 +0000
ROA not before:           Tue 10 Jun 2025 10:47:10 +0000
ROA not after:            Sat 23 May 2026 09:51:00 +0000
asID:                     55900
IP address blocks:        103.13.248.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/Ww1y-fQwt9QAM3XxDVAlueXABDc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/Ww1y-fQwt9QAM3XxDVAlueXABDc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ww1y-fQwt9QAM3XxDVAlueXABDc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 140 (0x8c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B0D72F9F430B7D4003375F10D5025B9E5C00437
        Validity
            Not Before: Jun 10 10:47:10 2025 GMT
            Not After : May 23 09:51:00 2026 GMT
        Subject: CN=FC76F143B1809BFA971F62D319F239021D021166
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:07:46:59:44:cb:4b:98:a1:85:da:23:62:6f:
                    b6:9d:ef:14:12:ff:0c:c5:22:92:a0:ca:de:dd:91:
                    7a:f5:c2:6c:53:e6:a0:83:71:f3:95:06:d6:54:05:
                    fd:cc:0b:93:48:19:e8:b0:ae:54:1a:91:6b:4d:14:
                    81:e3:ce:98:d2:d9:54:2e:69:bc:97:5b:59:a9:9b:
                    64:ed:44:ba:23:ff:17:f1:59:ef:80:e3:0b:2d:d8:
                    93:4e:41:15:b3:7b:5e:69:80:27:05:76:c8:35:ad:
                    49:6b:5f:c2:6a:a8:d3:71:92:44:10:d3:47:c3:93:
                    25:f7:fd:7d:08:23:a6:16:84:63:03:b1:ff:10:37:
                    84:da:29:19:19:c7:05:bd:62:96:a9:8b:eb:3f:39:
                    f0:89:17:08:31:5e:dc:41:b7:18:eb:c2:f9:d4:20:
                    fa:b2:4f:6a:41:69:2f:7f:73:07:27:ed:1b:dd:4b:
                    aa:c5:f5:1a:f0:66:bf:ae:e7:62:8e:ca:32:46:11:
                    de:ea:79:9e:c9:ab:20:e5:53:57:05:05:f7:bc:85:
                    65:a3:ae:7b:f5:7d:39:2f:41:56:64:bf:c5:47:cd:
                    b5:ce:4a:f1:8b:7f:16:53:0c:c5:41:17:cd:03:ed:
                    41:6c:54:3b:d0:89:22:98:9c:7b:1a:78:80:49:a7:
                    f9:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:76:F1:43:B1:80:9B:FA:97:1F:62:D3:19:F2:39:02:1D:02:11:66
            X509v3 Authority Key Identifier:
                keyid:5B:0D:72:F9:F4:30:B7:D4:00:33:75:F1:0D:50:25:B9:E5:C0:04:37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/Ww1y-fQwt9QAM3XxDVAlueXABDc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ww1y-fQwt9QAM3XxDVAlueXABDc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/_HbxQ7GAm_qXH2LTGfI5Ah0CEWY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.13.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         e2:57:8a:ab:58:f2:87:3b:17:b0:4b:2f:7d:29:7a:bb:03:ad:
         2f:b7:ab:98:71:3c:88:88:d2:8c:b7:16:73:54:59:17:03:9c:
         b5:5f:40:52:aa:31:13:9d:37:63:39:6f:e1:0b:7c:ae:fa:61:
         0e:87:97:22:ea:81:77:16:fd:40:d5:b3:fb:80:6e:40:95:35:
         c2:2e:af:7e:90:1d:f7:25:3a:72:c2:32:23:f8:d5:e7:b7:cb:
         5b:81:27:38:b6:6a:71:c0:b5:fe:33:0a:cc:9c:4e:57:1c:77:
         a7:20:48:55:3f:96:ff:b5:02:8b:4f:be:70:84:9a:f0:9b:9c:
         61:24:b7:7e:ab:b4:96:e9:04:e3:18:0c:4a:a0:79:a9:c4:aa:
         9a:38:70:45:72:e6:9f:69:04:e7:99:38:3d:1c:61:8c:5a:f0:
         ff:a0:bc:84:4d:91:eb:58:8c:4d:ef:1e:84:bf:be:c5:4b:fe:
         dd:01:85:78:6a:17:27:7d:28:7b:6f:d7:cf:e9:5a:45:16:5d:
         0f:cd:94:22:50:99:60:04:83:ea:3f:cd:ef:25:e5:f1:45:bd:
         93:67:e6:5c:d0:01:27:d8:d4:8c:43:25:61:bc:14:52:50:4b:
         6c:be:ff:76:ab:46:22:57:74:d3:ef:60:b1:ca:42:ee:72:2f:
         b2:9e:2b:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 06:22:48 2025 by rpki-client