Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/573/t2BnTgSFvmQuOG4nOvoz5VJHPR8.roa
File:                     t2BnTgSFvmQuOG4nOvoz5VJHPR8.roa (raw, json)
Hash identifier:          wU/5iSSqYGZKC2AHSc5jcwCDSZN+OgbZrIcAqX5i5fs=
Subject key identifier:   B7:60:67:4E:04:85:BE:64:2E:38:6E:27:3A:FA:33:E5:52:47:3D:1F
Certificate issuer:       /CN=C814D85BD48360A65D9D4144EC6D20752C1EDC7D
Certificate serial:       7B
Authority key identifier: C8:14:D8:5B:D4:83:60:A6:5D:9D:41:44:EC:6D:20:75:2C:1E:DC:7D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yBTYW9SDYKZdnUFE7G0gdSwe3H0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/t2BnTgSFvmQuOG4nOvoz5VJHPR8.roa
Signing time:             Tue 01 Jul 2025 01:35:56 +0000
ROA not before:           Tue 01 Jul 2025 01:35:56 +0000
ROA not after:            Mon 15 Jun 2026 01:30:02 +0000
asID:                     131896
IP address blocks:        103.239.16.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/yBTYW9SDYKZdnUFE7G0gdSwe3H0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/yBTYW9SDYKZdnUFE7G0gdSwe3H0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yBTYW9SDYKZdnUFE7G0gdSwe3H0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123 (0x7b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C814D85BD48360A65D9D4144EC6D20752C1EDC7D
        Validity
            Not Before: Jul  1 01:35:56 2025 GMT
            Not After : Jun 15 01:30:02 2026 GMT
        Subject: CN=B760674E0485BE642E386E273AFA33E552473D1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:22:a9:5d:18:5c:07:cc:5d:38:2d:4e:15:3b:
                    66:e4:40:79:f5:4b:14:e7:6a:76:14:64:66:10:82:
                    cc:8a:bb:d1:87:6c:27:cd:e2:40:2d:f7:57:51:4f:
                    6c:79:3b:06:3b:32:b6:36:78:a2:c5:1c:6f:23:8f:
                    3e:7b:cc:d4:e7:e7:94:89:ae:81:d4:3c:52:59:25:
                    5f:4f:f0:73:e7:9f:62:c6:45:a1:36:3b:e0:bc:44:
                    4a:fc:91:fb:77:ad:91:7b:84:b9:24:39:cb:bf:42:
                    2d:4c:a1:f2:67:14:ba:27:b6:b3:3d:09:a0:75:dd:
                    b4:00:67:ee:60:c4:30:22:9c:e4:ec:a4:7d:19:80:
                    4d:90:29:2f:2d:14:61:96:e1:4a:74:2a:3a:12:e7:
                    00:13:e0:da:97:4e:0b:ef:b5:55:07:16:22:8d:69:
                    c6:f1:f5:ea:44:05:a4:03:db:a0:59:83:9c:66:b4:
                    2f:73:a0:07:97:8f:75:43:43:12:93:21:cd:30:26:
                    1b:cd:a5:b5:23:d9:5b:3a:e9:33:94:52:74:8a:8c:
                    e5:08:46:fb:6a:87:ba:8e:70:2d:af:d6:7c:3e:cc:
                    11:f0:fd:8f:eb:42:f2:f1:7a:53:5a:c9:f7:6c:4f:
                    91:c1:80:32:4f:df:5a:f6:59:9d:09:3b:41:fe:39:
                    cc:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:60:67:4E:04:85:BE:64:2E:38:6E:27:3A:FA:33:E5:52:47:3D:1F
            X509v3 Authority Key Identifier:
                keyid:C8:14:D8:5B:D4:83:60:A6:5D:9D:41:44:EC:6D:20:75:2C:1E:DC:7D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/yBTYW9SDYKZdnUFE7G0gdSwe3H0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yBTYW9SDYKZdnUFE7G0gdSwe3H0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/t2BnTgSFvmQuOG4nOvoz5VJHPR8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.239.16.0/23

    Signature Algorithm: sha256WithRSAEncryption
         47:7f:64:71:3c:37:9a:fe:c6:c9:65:93:7b:f7:ef:ea:19:63:
         77:1d:80:67:9e:24:29:f7:db:66:73:f1:96:0e:86:68:8c:bd:
         3f:07:b4:4e:e3:dd:2e:bb:3b:bb:92:7d:d8:c4:b9:ec:ab:ed:
         6b:7b:b1:62:54:74:10:bf:72:5e:cb:95:6d:86:c7:20:5d:ce:
         24:63:7a:03:13:65:07:d6:0d:bc:db:8f:ef:af:b7:2a:26:5b:
         4d:5e:05:77:c5:34:00:ce:61:eb:5d:57:de:bf:f1:df:17:1d:
         71:95:12:41:54:d1:f3:af:e1:f9:87:19:28:bb:63:e4:9f:bd:
         2c:b4:d1:7e:1b:a5:1a:11:96:54:1c:cf:30:c7:b3:dd:32:16:
         fa:0c:9f:8a:fe:bb:1b:c4:12:2c:4c:8d:5c:2a:06:4f:dd:d0:
         f5:de:d9:9e:f0:12:b2:a8:d5:67:a6:69:f7:aa:52:8f:3e:17:
         88:97:2b:74:46:d2:ac:bd:1c:7a:bc:9d:89:81:fc:e1:1d:c2:
         11:2d:20:1d:0b:37:fd:5f:fe:2f:bb:d1:cd:d9:1d:9f:18:04:
         57:92:13:6d:23:40:44:b8:bb:1a:ef:11:eb:91:b1:5c:f6:87:
         f8:20:60:78:a2:f6:c3:11:e7:4e:d2:61:e5:2a:50:3e:d9:5d:
         d1:0b:c9:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 22:50:17 2025 by rpki-client