Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/597/ihbpt0E7-eN2o22Tt_1ByKIM5Ms.roa
File:                     ihbpt0E7-eN2o22Tt_1ByKIM5Ms.roa (raw, json)
Hash identifier:          zvxQjApbx23Sfr9+ki6C6izzRbtOeY5qL65+ER3eO4I=
Subject key identifier:   8A:16:E9:B7:41:3B:F9:E3:76:A3:6D:93:B7:FD:41:C8:A2:0C:E4:CB
Certificate issuer:       /CN=71F76FA07735F685991FC882C885E21EFBB161BC
Certificate serial:       69
Authority key identifier: 71:F7:6F:A0:77:35:F6:85:99:1F:C8:82:C8:85:E2:1E:FB:B1:61:BC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cfdvoHc19oWZH8iCyIXiHvuxYbw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/ihbpt0E7-eN2o22Tt_1ByKIM5Ms.roa
Signing time:             Thu 01 May 2025 01:34:04 +0000
ROA not before:           Thu 01 May 2025 01:34:04 +0000
ROA not after:            Wed 15 Apr 2026 01:30:03 +0000
asID:                     0
IP address blocks:        103.203.158.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/cfdvoHc19oWZH8iCyIXiHvuxYbw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/cfdvoHc19oWZH8iCyIXiHvuxYbw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cfdvoHc19oWZH8iCyIXiHvuxYbw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 23 May 2025 10:14:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 105 (0x69)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71F76FA07735F685991FC882C885E21EFBB161BC
        Validity
            Not Before: May  1 01:34:04 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=8A16E9B7413BF9E376A36D93B7FD41C8A20CE4CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ef:70:34:2c:f0:ac:f3:d9:14:e3:2c:16:78:
                    9f:35:1a:62:9c:b2:99:89:f3:11:3e:08:6a:ae:41:
                    e1:aa:39:8d:1d:d4:5d:ee:64:7e:6b:4e:0e:39:9f:
                    8e:8b:7a:ad:37:cd:b6:d8:91:da:50:fe:3e:36:93:
                    a8:e0:e1:51:0a:81:5d:57:68:9f:22:16:35:00:77:
                    96:85:9f:b5:56:14:ae:c1:6e:c2:8e:9a:97:bb:2f:
                    44:84:f3:a3:5f:51:de:32:2e:8d:ef:4b:f8:65:19:
                    47:2d:fb:87:85:31:d3:b1:8c:7d:33:d8:a1:c5:f5:
                    20:93:cc:6f:75:a7:c6:0e:3b:ce:70:2d:39:b2:82:
                    9a:79:40:97:66:72:ea:16:42:ca:70:73:86:bb:66:
                    20:23:24:4f:b0:a5:60:1e:4e:aa:29:db:9a:c0:4d:
                    16:af:1c:01:85:fd:ec:9b:f4:96:67:2f:1e:48:b7:
                    23:3f:ca:9e:d8:d7:2a:ff:e7:e6:ae:15:3c:29:d0:
                    b8:f9:45:19:77:54:ac:08:a8:1d:3e:0b:50:3d:d9:
                    64:a5:bb:1b:bf:4e:64:a0:70:f1:2f:08:ad:bc:d3:
                    e2:3c:cc:25:f0:f4:a6:dd:ed:40:74:cb:99:05:ba:
                    9a:b5:b3:75:a4:ec:6f:d7:59:50:05:8e:b7:65:05:
                    91:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:16:E9:B7:41:3B:F9:E3:76:A3:6D:93:B7:FD:41:C8:A2:0C:E4:CB
            X509v3 Authority Key Identifier:
                keyid:71:F7:6F:A0:77:35:F6:85:99:1F:C8:82:C8:85:E2:1E:FB:B1:61:BC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/cfdvoHc19oWZH8iCyIXiHvuxYbw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cfdvoHc19oWZH8iCyIXiHvuxYbw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/ihbpt0E7-eN2o22Tt_1ByKIM5Ms.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.203.158.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5d:33:9a:22:99:da:68:f5:68:28:c1:af:fd:57:df:f3:68:bd:
         ad:25:4c:4f:d8:0c:b7:8f:c2:8c:0a:23:71:46:e1:0b:ba:b7:
         1d:00:9b:cb:94:a6:74:7c:5c:e8:98:e4:82:e9:5a:b9:99:4a:
         c3:7e:ff:da:60:b0:9c:23:06:4e:a1:9e:89:1d:f6:18:ea:f2:
         51:5b:ce:d9:a7:7e:a5:fd:c7:bd:8d:4e:98:3a:a7:4f:e7:54:
         11:e1:db:8e:71:36:e2:18:f5:70:59:20:0c:9e:fb:6b:54:a3:
         43:58:6e:a0:7d:56:10:d1:4c:6b:22:04:f8:5f:b4:9d:e8:1e:
         b5:9c:3c:2a:33:8d:ff:fe:f2:d2:e9:47:61:05:8b:a1:ea:a3:
         b3:95:ba:fc:e9:1f:8a:86:b2:bc:72:6a:1f:15:a5:fc:96:36:
         c4:4d:3b:00:40:81:4e:e7:97:ca:5f:71:5c:1a:3b:f7:fa:d9:
         8d:b1:40:3f:ee:d3:84:ae:81:68:8e:bd:90:08:72:18:bf:25:
         88:12:00:cd:d4:f4:71:22:01:09:d1:2c:e6:db:c7:df:f7:48:
         59:01:d4:e6:bd:99:90:47:8d:b2:a6:a1:0d:16:9b:db:62:25:
         44:9a:e3:ae:71:89:96:dc:55:6c:34:b5:9c:13:e6:85:d0:51:
         10:49:ac:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 13:08:24 2025 by rpki-client