Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/924/i5u0y70iFcWCs1MCwSj0RK9kEHU.roa
File:                     i5u0y70iFcWCs1MCwSj0RK9kEHU.roa (raw, json)
Hash identifier:          AHGKU/aPRUTl7DRu5HhRhBfu3vkI5Gt4zsj68B5YoMk=
Subject key identifier:   8B:9B:B4:CB:BD:22:15:C5:82:B3:53:02:C1:28:F4:44:AF:64:10:75
Certificate issuer:       /CN=06A8484DF4FBAFE5C48D988A046B6AB6A81B2DF3
Certificate serial:       50
Authority key identifier: 06:A8:48:4D:F4:FB:AF:E5:C4:8D:98:8A:04:6B:6A:B6:A8:1B:2D:F3
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BqhITfT7r-XEjZiKBGtqtqgbLfM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/924/i5u0y70iFcWCs1MCwSj0RK9kEHU.roa
Signing time:             Tue 01 Jul 2025 01:35:20 +0000
ROA not before:           Tue 01 Jul 2025 01:35:20 +0000
ROA not after:            Mon 15 Jun 2026 01:30:02 +0000
asID:                     63790
IP address blocks:        103.167.206.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/924/BqhITfT7r-XEjZiKBGtqtqgbLfM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/924/BqhITfT7r-XEjZiKBGtqtqgbLfM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BqhITfT7r-XEjZiKBGtqtqgbLfM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 80 (0x50)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06A8484DF4FBAFE5C48D988A046B6AB6A81B2DF3
        Validity
            Not Before: Jul  1 01:35:20 2025 GMT
            Not After : Jun 15 01:30:02 2026 GMT
        Subject: CN=8B9BB4CBBD2215C582B35302C128F444AF641075
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:43:f4:ed:03:de:44:49:e0:ce:f3:73:93:db:
                    bd:70:47:1b:09:8d:79:5f:bf:ff:c1:1f:c6:a7:22:
                    00:a6:d5:3a:0d:c6:73:f0:7a:2e:e7:90:83:bb:5c:
                    69:bf:f3:6f:19:0c:7a:6f:32:11:df:23:24:15:0a:
                    a8:1e:83:d9:05:67:15:95:5c:22:0d:58:b4:98:77:
                    32:86:a4:f7:9e:b3:d2:1f:d6:c4:55:27:7f:9a:bb:
                    a3:3a:14:4c:9e:72:07:4a:69:ba:a0:70:b2:49:71:
                    a6:e9:47:ea:1e:36:cf:7d:2f:0f:8c:45:43:6a:b5:
                    f9:e8:15:f9:12:7b:96:30:3f:67:14:dc:4c:40:fd:
                    a1:b9:e9:03:f1:57:b6:5b:3d:4a:e9:fa:49:26:cc:
                    06:f2:3f:b0:09:0f:9a:c7:ee:ff:ba:b7:20:a9:31:
                    3c:e1:72:93:e6:6b:5b:2c:fc:c3:73:e4:77:5a:ee:
                    ec:27:55:b6:df:ca:e2:fd:23:5d:7a:31:fb:b3:f1:
                    5d:14:b0:19:9f:aa:ff:79:17:77:bf:11:89:5f:d7:
                    2d:87:35:23:1f:78:f7:00:3a:be:0a:31:f5:95:1a:
                    86:90:f8:b2:0b:42:ac:91:6b:a9:9c:45:10:4f:32:
                    ea:55:2d:7a:6a:aa:95:79:56:69:5e:e3:c2:68:0a:
                    92:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:9B:B4:CB:BD:22:15:C5:82:B3:53:02:C1:28:F4:44:AF:64:10:75
            X509v3 Authority Key Identifier:
                keyid:06:A8:48:4D:F4:FB:AF:E5:C4:8D:98:8A:04:6B:6A:B6:A8:1B:2D:F3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/924/BqhITfT7r-XEjZiKBGtqtqgbLfM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BqhITfT7r-XEjZiKBGtqtqgbLfM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/924/i5u0y70iFcWCs1MCwSj0RK9kEHU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.167.206.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8c:6b:e8:87:76:29:4f:9f:02:a3:24:5f:af:46:aa:0d:67:40:
         13:fc:48:46:a1:ce:4f:d9:a4:a9:cd:3b:bb:ca:86:af:2e:83:
         72:b8:9c:83:ae:83:2b:3c:80:29:e8:33:5a:1d:ac:62:fe:24:
         26:d3:6a:e5:dc:d4:a9:22:b9:bc:3d:d2:fd:4e:9f:05:5d:a3:
         94:00:d2:ee:56:71:e0:b2:3f:2c:9d:00:2f:1a:de:c1:fe:7f:
         46:d6:e8:09:46:bb:a4:0e:7a:c9:0e:a0:ba:93:29:15:47:fe:
         57:e1:ce:ba:25:83:3b:51:8c:f7:94:8f:75:e5:79:f1:a3:65:
         07:c9:d9:9d:a6:15:0b:f3:3a:49:e0:eb:8d:26:09:d0:e1:36:
         1d:ec:36:d3:34:e0:36:3d:34:da:60:ad:35:a1:41:a6:d4:ff:
         94:b3:74:ee:dd:00:a8:bd:c9:a1:2b:ea:fe:b0:dd:fb:a4:f8:
         2b:4b:f6:bd:94:57:ef:32:16:6c:b3:0d:33:27:64:07:7e:ec:
         b5:d4:87:7e:e5:5e:9f:1f:d3:85:30:52:af:b6:c4:55:73:f3:
         93:15:ec:fe:d8:f9:be:18:dc:de:09:2b:cc:53:84:bc:46:e4:
         61:f8:14:d1:5e:45:ca:82:31:1d:e4:3c:8b:74:00:61:82:c5:
         cb:d3:c9:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 19:31:20 2025 by rpki-client