Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/597/HaY31KjpO2TH9cZJF51HOWocQvc.roa
File:                     HaY31KjpO2TH9cZJF51HOWocQvc.roa (raw, json)
Hash identifier:          nlGVH+s1W4pAxSvNb8JRrhC29DPgwCO7kV59fMMia8E=
Subject key identifier:   1D:A6:37:D4:A8:E9:3B:64:C7:F5:C6:49:17:9D:47:39:6A:1C:42:F7
Certificate issuer:       /CN=71F76FA07735F685991FC882C885E21EFBB161BC
Certificate serial:       65
Authority key identifier: 71:F7:6F:A0:77:35:F6:85:99:1F:C8:82:C8:85:E2:1E:FB:B1:61:BC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cfdvoHc19oWZH8iCyIXiHvuxYbw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/HaY31KjpO2TH9cZJF51HOWocQvc.roa
Signing time:             Thu 01 May 2025 01:34:01 +0000
ROA not before:           Thu 01 May 2025 01:34:01 +0000
ROA not after:            Wed 15 Apr 2026 01:30:03 +0000
asID:                     0
IP address blocks:        101.203.75.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/cfdvoHc19oWZH8iCyIXiHvuxYbw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/cfdvoHc19oWZH8iCyIXiHvuxYbw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cfdvoHc19oWZH8iCyIXiHvuxYbw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 23 May 2025 10:14:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101 (0x65)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71F76FA07735F685991FC882C885E21EFBB161BC
        Validity
            Not Before: May  1 01:34:01 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=1DA637D4A8E93B64C7F5C649179D47396A1C42F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:00:47:e0:1d:02:b3:ad:08:4d:17:19:1c:0d:
                    57:c5:e3:27:02:e6:75:18:bb:80:27:42:29:11:ea:
                    04:36:3d:54:bc:fa:f4:b8:51:ee:a5:57:38:c8:99:
                    b5:a4:a0:60:79:ec:cb:2e:c0:c5:06:38:37:e7:6c:
                    bf:dc:17:52:85:d1:68:aa:3b:6c:01:c8:4b:7a:e5:
                    32:2f:d9:f8:7b:9e:b3:61:ca:6a:26:62:8a:e8:ca:
                    87:c5:02:f6:a0:d0:ce:17:86:dd:3e:8e:33:08:21:
                    ed:17:8c:a7:9f:78:55:43:92:6f:51:b4:25:08:27:
                    a9:84:88:b1:cb:bb:b1:0c:32:9b:18:a9:2e:e5:8c:
                    6a:d0:ff:ed:f1:b7:36:28:1d:b4:3e:ac:18:81:c4:
                    4d:76:c1:55:2d:e0:30:61:12:27:2e:43:e3:21:48:
                    73:44:1d:b9:53:4f:04:7f:56:aa:e9:f5:5b:80:cb:
                    44:f8:0f:6c:ca:ee:2f:ec:d6:19:46:21:1a:8c:50:
                    03:63:25:b4:d7:63:ef:26:47:f4:03:7d:9c:de:b6:
                    41:a1:e4:5d:0e:fe:71:5a:33:82:5f:a6:d7:f9:40:
                    47:3b:5c:df:9b:0d:7d:43:ec:b7:c4:23:bb:79:0b:
                    eb:6c:3f:f2:ba:af:61:e4:fe:7f:5d:55:e8:1f:cc:
                    45:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:A6:37:D4:A8:E9:3B:64:C7:F5:C6:49:17:9D:47:39:6A:1C:42:F7
            X509v3 Authority Key Identifier:
                keyid:71:F7:6F:A0:77:35:F6:85:99:1F:C8:82:C8:85:E2:1E:FB:B1:61:BC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/cfdvoHc19oWZH8iCyIXiHvuxYbw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cfdvoHc19oWZH8iCyIXiHvuxYbw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/HaY31KjpO2TH9cZJF51HOWocQvc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.203.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:82:b2:15:03:cb:50:19:1e:cb:e7:74:b8:35:ef:87:f0:65:
         55:81:d3:5c:a7:9b:9c:37:05:9d:fb:9a:de:97:e4:3d:91:0a:
         44:9f:5b:5b:3e:b3:62:7f:cc:ea:e8:44:8b:13:a9:b4:8b:db:
         df:16:21:50:56:17:c4:8d:71:87:0b:44:92:46:ec:8e:9a:ee:
         7a:f1:a4:3c:5b:78:78:0b:17:5c:94:74:84:8b:6a:f7:09:4c:
         87:76:d6:87:b3:77:21:5a:dd:c7:1a:24:5b:af:d1:db:0d:09:
         44:01:b8:43:d0:b1:ca:13:04:4d:eb:07:43:08:82:73:3e:df:
         3a:9e:6b:85:19:96:28:d0:6b:27:1f:f6:df:a3:87:37:56:ad:
         b7:1f:49:46:59:0c:89:6e:11:aa:b5:3a:69:2e:43:5a:54:5b:
         76:1e:1a:8f:ed:9e:40:fc:0c:34:67:01:35:8e:0b:7c:ec:02:
         0d:22:dc:f3:4d:b1:1f:73:7e:2a:af:9d:31:c7:7f:6f:11:69:
         c9:4b:94:ed:ba:6c:8d:ff:30:fe:bd:22:e9:9f:43:d0:f6:5e:
         08:55:6b:ca:dc:02:c3:d0:31:4a:51:79:dd:cb:d0:95:96:46:
         ee:48:12:87:71:b8:36:9a:b9:f3:c0:60:30:3b:60:20:33:15:
         c2:71:08:f0
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBZTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3MUY3
NkZBMDc3MzVGNjg1OTkxRkM4ODJDODg1RTIxRUZCQjE2MUJDMB4XDTI1MDUwMTAx
MzQwMVoXDTI2MDQxNTAxMzAwM1owMzExMC8GA1UEAxMoMURBNjM3RDRBOEU5M0I2
NEM3RjVDNjQ5MTc5RDQ3Mzk2QTFDNDJGNzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMQAR+AdArOtCE0XGRwNV8XjJwLmdRi7gCdCKRHqBDY9VLz69LhR
7qVXOMiZtaSgYHnsyy7AxQY4N+dsv9wXUoXRaKo7bAHIS3rlMi/Z+Hues2HKaiZi
iujKh8UC9qDQzheG3T6OMwgh7ReMp594VUOSb1G0JQgnqYSIscu7sQwymxipLuWM
atD/7fG3NigdtD6sGIHETXbBVS3gMGESJy5D4yFIc0QduVNPBH9Wqun1W4DLRPgP
bMruL+zWGUYhGoxQA2MltNdj7yZH9AN9nN62QaHkXQ7+cVozgl+m1/lARztc35sN
fUPst8Qju3kL62w/8rqvYeT+f11V6B/MRfUCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBQdpjfUqOk7ZMf1xkkXnUc5ahxC9zAfBgNVHSMEGDAWgBRx92+gdzX2hZkfyILI
heIe+7FhvDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNTk3L2NmZHZvSGMxOW9XWkg4aUN5SVhpSHZ1eFlidy5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2NmZHZvSGMxOW9XWkg4aUN5SVhpSHZ1
eFlidy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC81OTcvSGFZMzFLanBPMlRIOWNaSkY1MUhPV29jUXZjLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAGXLSzANBgkqhkiG9w0BAQsFAAOCAQEAWoKyFQPLUBkey+d0uDXvh/BlVYHT
XKebnDcFnfua3pfkPZEKRJ9bWz6zYn/M6uhEixOptIvb3xYhUFYXxI1xhwtEkkbs
jpruevGkPFt4eAsXXJR0hItq9wlMh3bWh7N3IVrdxxokW6/R2w0JRAG4Q9CxyhME
TesHQwiCcz7fOp5rhRmWKNBrJx/236OHN1attx9JRlkMiW4RqrU6aS5DWlRbdh4a
j+2eQPwMNGcBNY4LfOwCDSLc802xH3N+Kq+dMcd/bxFpyUuU7bpsjf8w/r0i6Z9D
0PZeCFVrytwCw9AxSlF53cvQlZZG7kgSh3G4Npq588BgMDtgIDMVwnEI8A==
-----END CERTIFICATE-----
Generated at Fri May 16 12:47:27 2025 by rpki-client