Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/mcV4lEXmnbdvBEFuYsQEgS3Lc34.roa
File:                     mcV4lEXmnbdvBEFuYsQEgS3Lc34.roa (raw, json)
Hash identifier:          KH4U86SIiBH+bNs7d9eP7f8Iu+Fr8n3WYUO1OxUHa7s=
Subject key identifier:   99:C5:78:94:45:E6:9D:B7:6F:04:41:6E:62:C4:04:81:2D:CB:73:7E
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       01B3
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/mcV4lEXmnbdvBEFuYsQEgS3Lc34.roa
Signing time:             Tue 01 Jul 2025 01:34:31 +0000
ROA not before:           Tue 01 Jul 2025 01:34:31 +0000
ROA not after:            Mon 15 Jun 2026 01:30:02 +0000
asID:                     2497
IP address blocks:        103.2.58.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 435 (0x1b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Jul  1 01:34:31 2025 GMT
            Not After : Jun 15 01:30:02 2026 GMT
        Subject: CN=99C5789445E69DB76F04416E62C404812DCB737E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:07:d4:ed:ff:5e:15:ca:04:a3:f2:07:30:87:
                    dd:9c:ac:de:9c:df:82:8b:a5:64:30:ae:7f:d1:52:
                    3f:45:e0:28:68:a0:ef:a8:1c:7c:90:42:6d:de:a9:
                    97:cb:78:cb:ae:51:81:dd:65:a6:ec:c7:a8:ca:24:
                    16:22:73:00:f7:81:c5:af:74:8a:82:e8:b4:57:07:
                    41:47:b8:81:4a:1b:c8:42:ff:06:27:c7:ee:32:f3:
                    a0:a4:ab:c1:58:e2:5b:86:84:1e:e3:3f:72:8b:e2:
                    db:da:5c:ec:97:2f:18:50:23:14:b5:c3:41:84:89:
                    18:94:10:dd:f2:a0:60:ed:2b:3a:c8:d5:da:9b:b7:
                    3b:cf:dc:27:d0:e6:b8:3d:db:7b:19:8c:53:45:23:
                    47:41:cb:f2:a9:07:74:47:3d:0e:a0:79:8d:a6:85:
                    9f:7b:5a:ba:e2:6d:af:06:1b:45:6b:e1:f7:46:fd:
                    e5:26:ff:d1:23:dd:9b:93:83:0e:af:6d:23:a2:28:
                    e1:55:7a:50:d3:96:6e:36:33:de:a4:70:06:35:97:
                    98:d5:da:3d:70:e5:9f:a3:24:27:d3:a9:8e:13:aa:
                    49:76:c7:06:d2:32:10:d5:f6:f9:57:94:85:8f:24:
                    4c:d8:3c:9d:96:20:4e:dd:cb:9a:a5:53:43:11:41:
                    9a:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:C5:78:94:45:E6:9D:B7:6F:04:41:6E:62:C4:04:81:2D:CB:73:7E
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/mcV4lEXmnbdvBEFuYsQEgS3Lc34.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.2.58.0/23

    Signature Algorithm: sha256WithRSAEncryption
         52:a7:1f:30:56:83:e6:f9:4f:2a:aa:e5:6b:dc:4c:62:e2:60:
         ea:e0:5d:94:97:e0:e6:4b:10:60:4a:ed:c2:f1:19:bc:b2:76:
         a6:73:e0:00:76:bf:98:7f:97:9e:c9:f5:53:2d:8e:8b:fc:31:
         da:bc:89:5b:57:3e:cd:b2:a3:aa:4f:97:55:74:cc:df:29:81:
         c5:13:7b:1e:48:63:bb:31:7f:b2:37:5c:83:c9:f5:e2:b3:df:
         4b:6c:80:c8:50:ba:7e:71:63:9b:54:3f:ae:8c:3a:34:c5:28:
         08:9b:e7:5a:a8:46:cd:54:e8:b0:bb:5e:a2:2e:31:c7:23:0d:
         70:08:5b:a6:ca:8d:d0:2c:00:5b:a6:0f:d6:42:b8:69:bd:29:
         5f:48:f7:8a:7e:f5:11:74:1e:b4:b7:8a:ee:68:65:a0:36:e8:
         6f:e6:33:20:f1:8d:6e:9e:3c:32:23:99:64:34:c1:9a:2e:8c:
         ef:a7:15:45:8a:17:34:ab:ce:6f:fc:1c:f0:44:f0:a9:b0:8b:
         0d:01:89:ee:6c:c4:9a:f5:31:5e:89:4c:3d:ae:e1:a9:41:ce:
         52:c1:13:fa:ef:8c:fc:ff:c6:c6:f6:eb:e7:a0:6f:3d:e7:b8:
         b6:8d:0b:b5:52:ae:22:a9:d7:c9:f4:ac:c3:be:c6:06:e2:0f:
         2b:fc:11:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 10:26:34 2025 by rpki-client