Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/972/HLqoiMZmumxFyuVo_nxWbepNzbQ.roa
File:                     HLqoiMZmumxFyuVo_nxWbepNzbQ.roa (raw, json)
Hash identifier:          K7bglTYp5jUzwQl6iIDQbNzjZ81kgbXhm+wyb6h+7dY=
Subject key identifier:   1C:BA:A8:88:C6:66:BA:6C:45:CA:E5:68:FE:7C:56:6D:EA:4D:CD:B4
Certificate issuer:       /CN=5F3E33AA6F92A837FA8944AB83627D3B44E0CF4A
Certificate serial:       53
Authority key identifier: 5F:3E:33:AA:6F:92:A8:37:FA:89:44:AB:83:62:7D:3B:44:E0:CF:4A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Xz4zqm-SqDf6iUSrg2J9O0Tgz0o.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/972/HLqoiMZmumxFyuVo_nxWbepNzbQ.roa
Signing time:             Tue 01 Jul 2025 01:35:50 +0000
ROA not before:           Tue 01 Jul 2025 01:35:50 +0000
ROA not after:            Mon 15 Jun 2026 01:30:02 +0000
asID:                     38651
IP address blocks:        103.109.240.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/972/Xz4zqm-SqDf6iUSrg2J9O0Tgz0o.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/972/Xz4zqm-SqDf6iUSrg2J9O0Tgz0o.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Xz4zqm-SqDf6iUSrg2J9O0Tgz0o.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 83 (0x53)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F3E33AA6F92A837FA8944AB83627D3B44E0CF4A
        Validity
            Not Before: Jul  1 01:35:50 2025 GMT
            Not After : Jun 15 01:30:02 2026 GMT
        Subject: CN=1CBAA888C666BA6C45CAE568FE7C566DEA4DCDB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:7d:f7:dc:4c:35:80:28:ad:b6:ba:d4:43:5a:
                    ac:85:3c:8b:4e:d2:6c:c7:81:20:24:35:c9:27:7d:
                    ee:c8:a2:2f:a9:3a:fa:ab:29:bd:92:a3:6b:8f:7a:
                    e0:78:5f:c3:be:d3:fd:c1:76:06:38:cd:7b:d6:31:
                    18:c0:cd:54:e2:0c:f2:18:d4:7c:fa:97:eb:e4:af:
                    c8:3a:5a:8b:27:66:ab:73:f6:90:7b:1b:e3:05:02:
                    59:c6:04:6b:25:ea:6c:dc:6a:42:fa:61:97:38:a7:
                    f8:48:53:0b:eb:c1:94:cb:17:08:9a:ae:10:a4:68:
                    b4:06:b9:64:53:a4:77:a9:75:5a:c1:b5:dd:30:7f:
                    cc:32:b2:3d:4a:85:cc:92:06:08:19:a4:62:f1:22:
                    0d:b7:10:bd:ef:05:f2:c3:b6:39:23:13:75:5c:d9:
                    c0:29:9d:35:08:9a:0a:c3:ba:9e:ed:9b:e4:20:37:
                    9a:7b:fc:6a:62:7e:f0:f8:23:2c:db:1f:9a:4d:ad:
                    cd:7f:a8:fd:12:e8:2b:3e:9d:c4:6f:2e:9d:98:db:
                    c8:7e:b0:34:fa:ef:f7:46:4b:42:f6:b6:18:11:da:
                    c8:43:ff:8b:03:77:ca:33:19:96:3a:0c:bd:ea:1d:
                    15:d4:e1:ed:61:47:6c:5e:43:4b:70:e1:4d:c2:54:
                    a0:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:BA:A8:88:C6:66:BA:6C:45:CA:E5:68:FE:7C:56:6D:EA:4D:CD:B4
            X509v3 Authority Key Identifier:
                keyid:5F:3E:33:AA:6F:92:A8:37:FA:89:44:AB:83:62:7D:3B:44:E0:CF:4A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/972/Xz4zqm-SqDf6iUSrg2J9O0Tgz0o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Xz4zqm-SqDf6iUSrg2J9O0Tgz0o.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/972/HLqoiMZmumxFyuVo_nxWbepNzbQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.109.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         85:0d:2a:9d:e4:17:d2:1c:85:e4:49:05:98:84:0d:4c:cc:77:
         85:76:f1:15:71:3b:82:25:e5:dc:ad:fd:32:92:1d:c3:63:91:
         72:22:53:62:cd:fc:36:1e:20:a8:bf:60:12:69:a3:76:5c:e3:
         4e:3a:6d:6e:16:37:0b:9d:10:e2:0d:2b:10:86:29:3b:3a:74:
         46:68:86:d0:68:62:dd:de:f1:d0:48:2a:d3:f6:fb:2d:2c:2f:
         46:d2:1d:12:dc:cc:ab:d9:63:10:ee:a9:11:2f:a9:80:24:c6:
         55:1a:0b:2e:42:2d:b3:06:a1:6d:0f:08:63:a7:e5:7a:e7:73:
         1c:e9:4a:6d:59:ff:bd:d0:4f:c3:79:fd:09:61:20:55:66:82:
         85:99:ad:79:13:75:f6:ee:2e:4c:d5:20:ee:5f:ed:83:6e:0c:
         97:b5:35:2c:19:f1:ea:d5:f6:65:b8:4b:1e:ab:95:7e:82:b7:
         35:c5:19:71:0d:60:2d:f7:56:77:20:73:dd:fd:8d:eb:82:dc:
         91:91:f3:0e:c8:6c:2c:a0:b6:a2:6c:a7:ec:c3:4f:58:0b:2f:
         26:a9:a2:4b:9f:40:f0:14:28:bb:7b:26:c0:30:9e:dd:e2:25:
         79:f0:cf:06:76:72:7a:b0:45:7a:43:f4:1a:e8:e6:ef:81:0c:
         17:20:5e:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 13:00:04 2025 by rpki-client