Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/604/PEpwltea-NcOUGkNZFPAbS3Za3E.roa
File:                     PEpwltea-NcOUGkNZFPAbS3Za3E.roa (raw, json)
Hash identifier:          xYATwa7UKb/p9R2lGE/asdZBOIHsaSC9tDoxr/UDvG8=
Subject key identifier:   3C:4A:70:96:D7:9A:F8:D7:0E:50:69:0D:64:53:C0:6D:2D:D9:6B:71
Certificate issuer:       /CN=84F94F26AD23CBA93655AE34D806A8CE0A4C5907
Certificate serial:       31
Authority key identifier: 84:F9:4F:26:AD:23:CB:A9:36:55:AE:34:D8:06:A8:CE:0A:4C:59:07
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hPlPJq0jy6k2Va402AaozgpMWQc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/604/PEpwltea-NcOUGkNZFPAbS3Za3E.roa
Signing time:             Tue 01 Jul 2025 01:32:15 +0000
ROA not before:           Tue 01 Jul 2025 01:32:15 +0000
ROA not after:            Mon 15 Jun 2026 01:30:02 +0000
asID:                     17682
IP address blocks:        103.198.12.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/604/hPlPJq0jy6k2Va402AaozgpMWQc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/604/hPlPJq0jy6k2Va402AaozgpMWQc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hPlPJq0jy6k2Va402AaozgpMWQc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 49 (0x31)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84F94F26AD23CBA93655AE34D806A8CE0A4C5907
        Validity
            Not Before: Jul  1 01:32:15 2025 GMT
            Not After : Jun 15 01:30:02 2026 GMT
        Subject: CN=3C4A7096D79AF8D70E50690D6453C06D2DD96B71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:a1:82:34:1a:9b:4e:33:15:94:ce:b9:ab:30:
                    14:a0:4b:22:46:a5:63:0f:37:27:f2:6e:ce:20:59:
                    f0:ba:30:e6:a8:5a:39:eb:0d:6a:04:fe:d9:ab:f8:
                    e2:fb:f3:c5:92:9f:54:a5:63:14:69:a7:5c:15:4d:
                    00:ca:68:61:97:eb:3e:cf:a6:4e:0c:b3:59:4f:3c:
                    f7:67:da:a8:59:05:62:2b:ba:10:9d:3a:82:af:34:
                    18:85:5e:67:12:18:27:43:fb:47:1e:57:e7:3c:84:
                    35:9f:36:9f:6f:74:2f:24:0d:01:08:11:f1:a3:f4:
                    28:bb:8b:4d:0b:82:7f:26:41:8e:3d:c8:6e:24:51:
                    f5:d5:d6:ed:7f:d5:a3:25:a3:d8:9d:12:7b:91:78:
                    d0:ff:9b:74:b9:52:02:3d:5a:f0:f2:5a:10:2a:bb:
                    bd:75:b3:49:dd:39:a4:41:db:e9:74:12:53:05:f0:
                    e0:33:ea:8b:f6:0d:b5:73:70:be:41:d9:c3:e7:61:
                    d4:77:55:12:84:5d:87:ff:70:41:c3:b5:6b:7b:3b:
                    e5:76:7e:ce:fc:f7:f8:00:97:33:b4:9c:5d:6b:50:
                    c0:a4:e9:ac:86:09:bb:c4:00:18:cf:cb:80:8f:9e:
                    75:cb:0b:ec:df:0e:05:4c:36:d7:7c:b7:a0:bb:6c:
                    e6:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:4A:70:96:D7:9A:F8:D7:0E:50:69:0D:64:53:C0:6D:2D:D9:6B:71
            X509v3 Authority Key Identifier:
                keyid:84:F9:4F:26:AD:23:CB:A9:36:55:AE:34:D8:06:A8:CE:0A:4C:59:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/604/hPlPJq0jy6k2Va402AaozgpMWQc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hPlPJq0jy6k2Va402AaozgpMWQc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/604/PEpwltea-NcOUGkNZFPAbS3Za3E.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.198.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         59:3a:67:b0:d4:fd:6b:b5:1a:37:4c:74:26:8b:d4:23:97:1f:
         fd:c4:9c:35:6e:46:07:14:72:f0:13:a8:0d:db:08:fe:53:55:
         af:69:ad:f6:af:a0:1f:17:46:3a:4a:9d:25:f1:a1:e5:49:80:
         b8:69:85:49:bb:93:ba:a3:54:17:9b:0b:1b:dc:88:14:da:01:
         78:ee:f6:5d:9b:3d:cb:12:71:64:3a:d3:c6:2c:04:ff:0e:e5:
         11:53:39:59:9a:f9:83:8c:02:70:df:6e:75:12:55:07:8a:e2:
         19:86:40:22:4e:6e:dc:ea:48:a5:32:be:24:ab:26:83:96:c8:
         3a:4d:ec:68:77:bd:f8:fa:bf:8c:60:50:49:2d:40:71:5a:96:
         64:76:64:9c:f4:84:13:6a:da:f5:18:8d:c9:11:b2:e7:7a:6b:
         9a:08:9d:7a:ab:1e:fb:2b:67:88:94:98:5b:0d:a0:75:db:cb:
         57:8d:3e:89:74:6b:92:26:66:1a:42:9d:df:8b:27:e0:63:f5:
         0a:60:ab:34:20:09:66:51:13:c3:95:91:09:7b:40:07:a1:57:
         6d:5c:ec:ed:80:cb:4a:d2:de:77:f0:ba:01:85:de:1c:3c:23:
         00:d1:7f:18:1d:f0:73:94:05:3b:55:a8:66:76:65:1a:36:d7:
         11:35:3c:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 08:39:14 2025 by rpki-client