Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/597/frnTQC_FkEDjtVsw-SjDITvO2mU.roa
File:                     frnTQC_FkEDjtVsw-SjDITvO2mU.roa (raw, json)
Hash identifier:          10BLZqisQDP5QInp0nF9OybMR3Ee9ZggVENUGvZYRKg=
Subject key identifier:   7E:B9:D3:40:2F:C5:90:40:E3:B5:5B:30:F9:28:C3:21:3B:CE:DA:65
Certificate issuer:       /CN=71F76FA07735F685991FC882C885E21EFBB161BC
Certificate serial:       67
Authority key identifier: 71:F7:6F:A0:77:35:F6:85:99:1F:C8:82:C8:85:E2:1E:FB:B1:61:BC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cfdvoHc19oWZH8iCyIXiHvuxYbw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/frnTQC_FkEDjtVsw-SjDITvO2mU.roa
Signing time:             Thu 01 May 2025 01:34:02 +0000
ROA not before:           Thu 01 May 2025 01:34:02 +0000
ROA not after:            Wed 15 Apr 2026 01:30:03 +0000
asID:                     0
IP address blocks:        101.203.77.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/cfdvoHc19oWZH8iCyIXiHvuxYbw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/cfdvoHc19oWZH8iCyIXiHvuxYbw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cfdvoHc19oWZH8iCyIXiHvuxYbw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 May 2025 00:19:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 103 (0x67)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71F76FA07735F685991FC882C885E21EFBB161BC
        Validity
            Not Before: May  1 01:34:02 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=7EB9D3402FC59040E3B55B30F928C3213BCEDA65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:31:1a:f2:e6:5d:84:5b:68:55:53:ba:8f:e3:
                    24:55:d3:0f:42:32:5b:fa:34:c2:5f:e6:5c:a3:92:
                    08:6c:5b:0a:91:29:f0:51:34:af:5b:23:dc:0d:a6:
                    7b:4c:92:15:7e:e5:18:5f:35:bc:91:8d:d5:0a:7a:
                    66:ef:bf:ae:e9:41:57:ec:a7:a5:44:ea:3b:a5:06:
                    95:22:d0:c8:e9:0a:31:6f:bc:dc:26:37:5b:18:4d:
                    0f:0f:da:8a:f1:39:82:f4:cf:d1:4f:00:5c:49:58:
                    ca:bc:c6:af:ce:09:40:6a:5d:b9:39:33:5f:df:5f:
                    ac:33:3a:73:1d:79:b6:53:ea:27:66:af:b1:17:2f:
                    1c:1c:50:23:cd:19:21:50:61:c2:2c:c4:83:98:e3:
                    c2:2c:d9:b6:53:33:77:54:6f:2e:ea:fd:d8:cd:12:
                    da:d6:e5:4b:00:e4:16:61:4d:49:bd:b0:37:ea:9b:
                    55:8b:3b:2f:8a:45:09:66:53:9b:43:30:74:88:48:
                    d0:07:ba:4b:cf:a8:67:4f:0b:f7:07:c8:50:64:d4:
                    d2:c3:6a:6d:c3:7f:fa:29:60:43:99:b1:1b:9e:ac:
                    c8:c7:16:80:03:d6:fa:7c:73:e9:f9:4b:d9:0e:aa:
                    de:87:f8:2d:2a:a8:74:2c:d4:d3:93:d2:7c:94:d2:
                    b9:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:B9:D3:40:2F:C5:90:40:E3:B5:5B:30:F9:28:C3:21:3B:CE:DA:65
            X509v3 Authority Key Identifier:
                keyid:71:F7:6F:A0:77:35:F6:85:99:1F:C8:82:C8:85:E2:1E:FB:B1:61:BC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/cfdvoHc19oWZH8iCyIXiHvuxYbw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cfdvoHc19oWZH8iCyIXiHvuxYbw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/frnTQC_FkEDjtVsw-SjDITvO2mU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.203.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:80:15:b5:24:b8:f7:ec:e3:47:f4:ed:70:8c:4e:7e:c8:8d:
         bd:99:2a:c3:b6:4b:cf:1c:02:fc:9b:67:ce:04:4c:4c:b0:67:
         30:72:fa:7e:72:4a:19:bd:ba:82:21:16:a7:e2:40:ad:1f:c6:
         d4:5b:d2:5e:98:55:ed:fb:e2:13:a3:f0:f3:3a:e8:66:c0:27:
         7d:68:b8:fa:bd:98:17:15:fb:b4:db:62:5a:0a:ea:5e:cc:4d:
         59:7b:e8:0b:c1:c5:af:07:ae:86:79:ec:1d:c7:70:19:9b:ff:
         15:21:81:e6:c2:18:05:f3:73:71:fa:74:01:5b:e7:e2:a3:7e:
         34:6b:07:4e:77:a7:f0:51:0f:77:5f:d2:20:9b:2c:4d:e7:46:
         28:a8:4c:54:5a:b3:cb:5e:de:07:05:4e:bc:e9:45:12:b3:7e:
         03:f7:e7:99:c9:62:e3:88:40:85:35:49:41:b2:06:50:3a:df:
         cc:64:9a:25:9f:99:1c:0b:94:a4:cc:06:65:58:fe:63:ea:db:
         68:13:80:43:74:fd:ce:48:0e:11:c4:18:30:24:01:ba:bb:3a:
         3b:d8:43:35:3e:e0:8b:f3:c5:69:ff:a4:73:e1:72:42:ed:37:
         6c:dd:3d:97:3e:d0:08:a6:4c:cc:ab:51:0f:82:1a:d5:64:21:
         f0:84:53:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 19 03:32:58 2025 by rpki-client