Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/573/CDAwG6xx4G2yuH4jPsgXz2yDfuI.roa
File:                     CDAwG6xx4G2yuH4jPsgXz2yDfuI.roa (raw, json)
Hash identifier:          RBaBTPGeeD45uOTMFp+wq/rQCA3uDtcIdv8QYeJkeK8=
Subject key identifier:   08:30:30:1B:AC:71:E0:6D:B2:B8:7E:23:3E:C8:17:CF:6C:83:7E:E2
Certificate issuer:       /CN=C814D85BD48360A65D9D4144EC6D20752C1EDC7D
Certificate serial:       7A
Authority key identifier: C8:14:D8:5B:D4:83:60:A6:5D:9D:41:44:EC:6D:20:75:2C:1E:DC:7D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yBTYW9SDYKZdnUFE7G0gdSwe3H0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/CDAwG6xx4G2yuH4jPsgXz2yDfuI.roa
Signing time:             Tue 01 Jul 2025 01:35:56 +0000
ROA not before:           Tue 01 Jul 2025 01:35:56 +0000
ROA not after:            Mon 15 Jun 2026 01:30:02 +0000
asID:                     131896
IP address blocks:        103.239.16.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/yBTYW9SDYKZdnUFE7G0gdSwe3H0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/yBTYW9SDYKZdnUFE7G0gdSwe3H0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yBTYW9SDYKZdnUFE7G0gdSwe3H0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122 (0x7a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C814D85BD48360A65D9D4144EC6D20752C1EDC7D
        Validity
            Not Before: Jul  1 01:35:56 2025 GMT
            Not After : Jun 15 01:30:02 2026 GMT
        Subject: CN=0830301BAC71E06DB2B87E233EC817CF6C837EE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:75:05:1f:f5:0b:91:f5:ee:bc:a6:8a:b4:46:
                    7f:e6:cf:f6:4c:be:e5:88:98:d9:6c:96:b3:e6:4c:
                    31:2f:82:c6:82:ab:b4:e8:7b:4a:ac:e0:a2:a5:7d:
                    62:aa:83:a5:14:52:42:b8:07:b5:95:78:5e:df:e8:
                    ef:c2:e4:ae:f0:94:48:bc:7e:0e:45:ea:fc:ff:3a:
                    c5:63:9b:cb:4d:6c:2c:54:46:41:0b:62:98:f6:62:
                    46:4e:96:6c:2e:82:83:97:70:52:60:ce:20:61:c7:
                    67:a5:5e:ec:01:17:03:8c:e7:86:66:37:72:a3:b5:
                    77:ff:27:98:f9:5b:63:bb:06:e4:5c:d0:8e:91:d6:
                    bc:8f:8e:29:1f:84:d7:3d:e5:fc:bc:48:bd:17:4a:
                    c9:f7:5b:6d:8a:a2:01:10:3b:20:c8:e9:a9:32:2e:
                    6b:4f:dc:fb:5d:ac:05:42:be:54:62:9f:a2:c3:c6:
                    aa:96:ec:a4:79:21:5a:75:a0:e3:63:27:4c:61:b9:
                    35:db:b6:7c:44:51:d9:97:83:bb:98:28:eb:3c:e7:
                    63:bf:79:bb:1e:98:9d:6f:b3:4d:d0:3d:a9:90:68:
                    33:6a:70:17:a3:5a:9c:fd:a0:12:f9:f8:a0:81:7e:
                    08:8e:93:32:fb:39:b1:96:62:ff:37:e0:94:77:76:
                    81:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:30:30:1B:AC:71:E0:6D:B2:B8:7E:23:3E:C8:17:CF:6C:83:7E:E2
            X509v3 Authority Key Identifier:
                keyid:C8:14:D8:5B:D4:83:60:A6:5D:9D:41:44:EC:6D:20:75:2C:1E:DC:7D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/yBTYW9SDYKZdnUFE7G0gdSwe3H0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yBTYW9SDYKZdnUFE7G0gdSwe3H0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/CDAwG6xx4G2yuH4jPsgXz2yDfuI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.239.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         50:cb:2e:01:b2:08:86:1e:11:c1:fa:ab:66:96:7a:21:1f:cb:
         d5:64:6d:aa:46:1f:b1:b0:d2:4e:eb:78:b0:8a:95:3b:ec:bc:
         e5:df:86:25:77:d2:af:de:d6:84:ff:7c:7a:4c:30:ef:e5:6f:
         c1:1b:8c:d6:f2:69:2a:c8:3d:88:1f:4b:a8:b3:4a:8c:f1:37:
         70:e3:a7:ba:35:d9:8b:90:c9:18:a2:52:d8:7a:7a:27:80:1a:
         cd:e7:08:ac:c3:44:92:6a:b8:3b:1d:e6:98:72:85:8a:8d:18:
         77:be:3e:03:de:af:d7:79:e2:e5:58:92:b9:ff:38:a6:a9:5e:
         bd:72:12:c8:f3:00:15:57:96:98:59:2e:8b:ca:41:1a:af:18:
         54:3b:00:3b:57:e6:0f:ff:d1:ee:fa:9b:e1:45:b8:e2:8b:52:
         e3:94:98:6b:c0:10:83:f1:34:a5:46:76:9e:45:5a:12:b1:1f:
         bc:a6:27:d0:ea:25:04:9e:4a:87:bc:df:a3:91:18:71:0a:56:
         1e:84:2c:54:b9:4b:cb:da:56:92:f2:52:f0:7c:11:07:09:f3:
         42:4e:62:14:c7:d4:02:5e:4c:0d:e2:ee:03:a9:a7:0b:d9:31:
         af:f3:fe:5c:b0:e3:45:e5:b2:91:70:c9:a9:34:16:5d:7f:72:
         6e:b5:64:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 02:24:52 2025 by rpki-client