Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/906/9SDBBu7dJRVHkMbct_RYsMuJOPw.roa
File:                     9SDBBu7dJRVHkMbct_RYsMuJOPw.roa (raw, json)
Hash identifier:          ka7qAiKZpcHEflgg9CKwwESmSFjL4Ac1Ce7/F1rUGnM=
Subject key identifier:   F5:20:C1:06:EE:DD:25:15:47:90:C6:DC:B7:F4:58:B0:CB:89:38:FC
Certificate issuer:       /CN=539BDF2FE18FF387FD03842C5081A145EEEB1CF7
Certificate serial:       38
Authority key identifier: 53:9B:DF:2F:E1:8F:F3:87:FD:03:84:2C:50:81:A1:45:EE:EB:1C:F7
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/U5vfL-GP84f9A4QsUIGhRe7rHPc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/9SDBBu7dJRVHkMbct_RYsMuJOPw.roa
Signing time:             Tue 01 Jul 2025 01:31:45 +0000
ROA not before:           Tue 01 Jul 2025 01:31:45 +0000
ROA not after:            Mon 15 Jun 2026 01:30:02 +0000
asID:                     24259
IP address blocks:        103.2.32.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/U5vfL-GP84f9A4QsUIGhRe7rHPc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/U5vfL-GP84f9A4QsUIGhRe7rHPc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/U5vfL-GP84f9A4QsUIGhRe7rHPc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 56 (0x38)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=539BDF2FE18FF387FD03842C5081A145EEEB1CF7
        Validity
            Not Before: Jul  1 01:31:45 2025 GMT
            Not After : Jun 15 01:30:02 2026 GMT
        Subject: CN=F520C106EEDD25154790C6DCB7F458B0CB8938FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a6:9d:99:b8:c6:9d:a1:66:96:ad:f6:27:cf:
                    db:00:e7:50:fe:16:f3:97:27:a5:d1:5f:a6:5f:05:
                    87:ce:98:3f:ae:27:ee:8e:a7:e7:b8:ef:a2:fa:fb:
                    82:54:1e:5e:62:ea:86:20:28:dc:35:35:70:98:71:
                    d4:fd:70:ba:8b:06:9f:05:83:83:4e:e4:89:f6:5b:
                    9c:f0:c3:d8:4e:e4:dd:83:54:3f:be:cb:c2:52:3e:
                    d8:51:00:51:52:7b:e0:2a:84:97:c7:46:7a:19:01:
                    6e:a0:1c:d8:02:b9:60:b8:15:1e:09:b0:51:d0:6d:
                    1e:8d:1f:35:96:ae:66:09:33:30:53:00:bf:e6:c2:
                    18:40:9b:fb:e7:01:47:ec:33:bb:70:68:05:fe:fc:
                    90:0c:e3:b2:fc:4e:6c:30:87:61:88:fb:ec:22:c7:
                    a0:8b:c4:39:85:a1:76:a9:36:5f:fd:ef:3d:1c:d7:
                    94:94:4a:75:e5:27:ed:5a:4a:5d:12:23:26:a2:e3:
                    d4:19:75:3c:4d:9b:a5:71:77:42:2e:18:37:19:9f:
                    85:b1:e4:5d:63:c9:df:97:38:bd:6c:8a:99:65:98:
                    f3:ab:24:58:89:9b:38:54:83:b6:21:e9:e8:2a:24:
                    11:40:a2:7e:9f:66:d7:d3:0b:88:93:1e:b9:79:8f:
                    a0:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:20:C1:06:EE:DD:25:15:47:90:C6:DC:B7:F4:58:B0:CB:89:38:FC
            X509v3 Authority Key Identifier:
                keyid:53:9B:DF:2F:E1:8F:F3:87:FD:03:84:2C:50:81:A1:45:EE:EB:1C:F7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/U5vfL-GP84f9A4QsUIGhRe7rHPc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/U5vfL-GP84f9A4QsUIGhRe7rHPc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/9SDBBu7dJRVHkMbct_RYsMuJOPw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.2.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         be:22:fd:a8:84:ef:67:3f:dd:16:c0:d1:f2:c6:7c:48:92:a3:
         7d:59:84:88:01:67:24:4c:41:3d:12:b6:2f:74:48:19:22:a0:
         17:48:27:9c:0b:fb:e7:95:08:eb:1e:13:96:73:08:6f:c9:86:
         f0:9f:07:7a:d5:c2:70:4f:bc:b7:b5:0f:32:6e:57:03:83:b2:
         0a:19:cb:4a:27:14:98:de:ce:9c:bf:44:6a:90:85:19:38:b0:
         08:a7:e3:a0:56:30:5b:6a:bd:02:31:f5:ff:20:0b:5f:9a:07:
         e5:19:a8:11:2f:04:99:5e:b0:0e:49:5f:8b:e4:57:37:62:d3:
         fb:43:74:ef:e3:d3:42:d6:62:7f:51:e0:00:d7:e1:54:f5:39:
         0d:29:d1:20:60:3a:21:40:b0:ee:6e:b3:26:27:05:63:dc:0a:
         be:c7:74:6e:bb:99:a8:25:ab:29:72:3e:63:98:5a:6a:68:3b:
         13:0f:e0:da:ab:7a:c4:ef:69:2e:03:f0:20:92:04:55:ea:3b:
         5f:bd:3d:ab:96:85:20:05:01:8a:24:c5:d5:68:e2:eb:c7:87:
         6e:c2:ab:1b:f4:50:d1:6d:e7:2c:f6:87:1c:ec:b3:e1:a0:33:
         bc:1e:f3:2c:be:55:aa:90:0f:0f:6e:e9:71:29:7a:82:48:10:
         c0:64:77:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 06:01:35 2025 by rpki-client