Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13131/_cG6pOE9rHuWbqWKQXlf19uYGps.roa
File:                     _cG6pOE9rHuWbqWKQXlf19uYGps.roa (raw, json)
Hash identifier:          +4pq0u4GX+qW1QtWYkUpXCgCcj/d+aBzaLbEyIDiawA=
Subject key identifier:   FD:C1:BA:A4:E1:3D:AC:7B:96:6E:A5:8A:41:79:5F:D7:DB:98:1A:9B
Certificate issuer:       /CN=FD13D822A4DD7BA05078F9E60025F8BFF11BEF82
Certificate serial:       67
Authority key identifier: FD:13:D8:22:A4:DD:7B:A0:50:78:F9:E6:00:25:F8:BF:F1:1B:EF:82
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/_RPYIqTde6BQePnmACX4v_Eb74I.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13131/_cG6pOE9rHuWbqWKQXlf19uYGps.roa
Signing time:             Tue 10 Jun 2025 10:50:20 +0000
ROA not before:           Tue 10 Jun 2025 10:50:20 +0000
ROA not after:            Sat 23 May 2026 09:51:00 +0000
asID:                     38639
IP address blocks:        103.2.128.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13131/_RPYIqTde6BQePnmACX4v_Eb74I.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13131/_RPYIqTde6BQePnmACX4v_Eb74I.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/_RPYIqTde6BQePnmACX4v_Eb74I.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 28 Jun 2025 21:03:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 103 (0x67)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD13D822A4DD7BA05078F9E60025F8BFF11BEF82
        Validity
            Not Before: Jun 10 10:50:20 2025 GMT
            Not After : May 23 09:51:00 2026 GMT
        Subject: CN=FDC1BAA4E13DAC7B966EA58A41795FD7DB981A9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b0:95:5d:1f:5b:53:9d:a5:f4:78:d5:7e:cf:
                    1e:12:61:cd:69:9c:53:bd:6e:6c:7b:d1:e6:14:41:
                    c5:aa:f4:57:50:95:cd:8c:8a:43:b7:31:ff:6d:a9:
                    17:ee:b9:38:34:9e:04:de:21:f6:74:20:4c:87:be:
                    c8:82:b8:d2:30:22:d5:6c:bb:0a:d6:75:76:0f:4d:
                    12:a0:47:73:52:30:37:70:93:b3:7b:84:f6:c3:67:
                    a7:49:bb:8e:6a:74:b1:9f:f2:3c:12:a5:bf:1c:81:
                    52:dd:51:80:93:ad:9d:52:be:27:55:ff:ac:eb:35:
                    32:1e:97:74:88:ac:b6:75:87:06:29:0e:22:27:f9:
                    12:05:91:e9:2f:6c:4e:0c:43:5b:59:0f:98:4a:24:
                    f7:7c:d4:8a:68:1b:40:21:6f:62:80:00:f2:2a:3b:
                    74:d7:aa:e9:79:d3:a1:be:4c:9b:78:52:5f:31:fa:
                    91:2c:4e:d7:14:9e:b3:16:de:d2:78:29:bd:9e:ea:
                    21:72:33:97:1f:ba:08:1c:a5:42:50:df:0a:d1:64:
                    9b:c1:83:95:62:a6:66:09:b6:88:21:ab:21:a5:0e:
                    c7:fc:d3:d6:9c:17:0c:17:6e:ff:72:6f:5c:59:92:
                    b0:3f:d3:3d:79:0e:6d:c6:e1:e6:ca:33:79:1b:a6:
                    3d:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:C1:BA:A4:E1:3D:AC:7B:96:6E:A5:8A:41:79:5F:D7:DB:98:1A:9B
            X509v3 Authority Key Identifier:
                keyid:FD:13:D8:22:A4:DD:7B:A0:50:78:F9:E6:00:25:F8:BF:F1:1B:EF:82

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13131/_RPYIqTde6BQePnmACX4v_Eb74I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/_RPYIqTde6BQePnmACX4v_Eb74I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13131/_cG6pOE9rHuWbqWKQXlf19uYGps.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.2.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1f:d2:09:54:a5:88:87:0e:57:a1:e9:e3:e5:4c:6d:9f:f4:75:
         d6:4e:7e:b7:47:af:12:74:2d:81:39:49:eb:93:0e:83:2e:e4:
         85:00:b4:ee:78:81:b4:17:9b:8e:ca:e5:bc:41:0a:12:41:72:
         11:9c:74:4f:71:d3:bf:e4:bb:b4:c8:7d:a1:d2:37:af:b8:7d:
         81:df:92:64:54:2c:69:99:3c:5c:54:dd:2e:e9:9d:bb:47:6d:
         60:b4:dc:d9:13:0c:fa:48:0d:34:cd:99:bd:4c:15:d0:2d:46:
         0f:12:01:19:22:27:16:ad:a6:fd:fc:3b:70:6d:b4:f1:93:55:
         94:fc:c5:82:75:41:08:92:d4:5d:23:9f:78:eb:6a:14:a3:64:
         70:1c:b8:f6:46:0f:83:e9:71:38:22:85:46:d2:c1:31:35:5d:
         d9:9c:6f:60:c2:4b:eb:53:7f:94:21:69:1c:01:bb:0a:99:56:
         3f:74:e6:22:8e:91:ae:f7:54:b2:34:57:de:b2:23:fb:c3:26:
         73:5a:49:4f:05:79:5c:6f:48:87:45:ed:ca:75:fe:d5:3c:61:
         38:40:9f:6b:52:0a:36:78:8d:b7:10:38:63:19:28:e9:0b:61:
         39:63:f9:01:03:9a:9b:a4:00:23:ff:5c:90:7c:a0:52:93:88:
         28:ec:38:6c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Jun 22 02:19:52 2025 by rpki-client