Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20060/Ki3CNAboG0fE_1CH2Bv3lwvyIcU.roa
File:                     Ki3CNAboG0fE_1CH2Bv3lwvyIcU.roa (raw, json)
Hash identifier:          625zSdi65pxaECTraTxU9UoSFmpVb7Mc9ki5+n9//GE=
Subject key identifier:   2A:2D:C2:34:06:E8:1B:47:C4:FF:50:87:D8:1B:F7:97:0B:F2:21:C5
Certificate issuer:       /CN=C163A3387592F96B1BCC77F8ACFCF4F1F11FA99D
Certificate serial:       17
Authority key identifier: C1:63:A3:38:75:92:F9:6B:1B:CC:77:F8:AC:FC:F4:F1:F1:1F:A9:9D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wWOjOHWS-WsbzHf4rPz08fEfqZ0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20060/Ki3CNAboG0fE_1CH2Bv3lwvyIcU.roa
Signing time:             Tue 01 Apr 2025 01:31:09 +0000
ROA not before:           Tue 01 Apr 2025 01:31:09 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     131928
IP address blocks:        103.106.124.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20060/wWOjOHWS-WsbzHf4rPz08fEfqZ0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20060/wWOjOHWS-WsbzHf4rPz08fEfqZ0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wWOjOHWS-WsbzHf4rPz08fEfqZ0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 14:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 23 (0x17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C163A3387592F96B1BCC77F8ACFCF4F1F11FA99D
        Validity
            Not Before: Apr  1 01:31:09 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=2A2DC23406E81B47C4FF5087D81BF7970BF221C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f4:5f:2c:ac:10:b2:18:f1:e5:2b:aa:e3:5f:
                    90:99:31:6c:3e:6e:a0:7c:bc:fd:54:7e:01:34:88:
                    3a:31:f6:0c:cb:63:d8:9b:b0:ec:23:7f:0f:67:27:
                    1e:c6:65:a3:70:38:36:4e:b7:3f:c4:f9:b8:61:d2:
                    4f:08:73:5d:1d:e9:d5:f1:74:64:c2:35:da:4c:22:
                    5a:a8:b7:10:7b:91:86:2e:4c:93:9c:cc:d5:4c:5d:
                    68:68:9f:d1:c0:0b:45:c5:ce:0d:2f:d3:77:ae:ed:
                    60:07:34:e2:61:05:05:0f:37:53:85:2a:f7:13:69:
                    d2:b8:99:18:d9:4d:3a:64:f2:f3:0d:d7:f8:f3:f5:
                    b2:4c:41:58:69:73:13:fb:99:e7:8c:95:ad:48:8c:
                    db:18:c6:59:74:ef:ea:dd:6d:12:2f:e3:57:49:fd:
                    2a:c1:62:e2:67:00:82:fc:3c:fb:5e:1d:5b:49:bb:
                    eb:1d:17:84:7e:49:23:dd:62:a1:17:ad:81:a6:b3:
                    bc:8c:70:e4:34:89:bb:88:8e:f3:91:6e:a2:5c:41:
                    ff:ea:88:54:d3:ad:21:42:83:2b:f7:a2:9f:16:c9:
                    7c:c6:8a:a8:ed:a4:19:fb:b2:2e:21:9f:fe:64:cf:
                    5b:03:ec:65:b4:31:e2:9a:ae:3b:f2:62:0a:78:24:
                    19:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:2D:C2:34:06:E8:1B:47:C4:FF:50:87:D8:1B:F7:97:0B:F2:21:C5
            X509v3 Authority Key Identifier:
                keyid:C1:63:A3:38:75:92:F9:6B:1B:CC:77:F8:AC:FC:F4:F1:F1:1F:A9:9D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20060/wWOjOHWS-WsbzHf4rPz08fEfqZ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wWOjOHWS-WsbzHf4rPz08fEfqZ0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20060/Ki3CNAboG0fE_1CH2Bv3lwvyIcU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.106.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0d:c0:c2:1c:83:5a:0a:e0:ef:ec:a8:45:83:67:bc:23:4f:b4:
         a1:ef:73:ed:66:c2:14:de:26:5d:90:44:a3:a3:d5:07:c8:21:
         a8:4e:0f:38:22:f6:bb:57:16:52:4b:3c:6c:7d:6a:40:61:67:
         fd:68:dd:b7:ed:8f:c7:bc:43:1c:25:b9:d5:3b:3a:0b:48:22:
         ba:19:06:8e:6c:0d:00:fa:73:50:c2:b6:49:ee:be:57:d7:d9:
         26:f4:1d:ba:2d:1d:e9:71:72:e7:82:ea:37:02:8e:2e:92:50:
         b0:c9:28:bb:74:2b:3e:93:36:e9:30:ba:cb:9a:a5:7c:2f:e4:
         02:fe:f2:a4:09:88:7e:8f:cc:34:55:b5:98:6a:65:8b:4d:94:
         e6:f2:51:8b:76:d3:54:bf:99:06:f5:7b:2c:0b:26:54:a1:e2:
         e4:08:60:a7:0d:4d:af:33:b1:c3:d4:59:8a:a1:75:30:1a:43:
         92:20:ba:c8:d3:f0:7f:57:2a:36:24:85:c0:a2:e3:dd:00:17:
         42:89:32:a8:4e:54:d1:2c:e1:86:28:c5:be:83:07:1b:c9:b9:
         44:f6:69:6e:28:f3:c9:f5:0a:70:d6:c7:22:d2:25:1d:0e:04:
         8a:16:ba:1b:11:17:b1:d6:17:c9:97:ee:8b:08:a5:01:aa:f6:
         a8:e9:f8:1d
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIBFzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDMTYz
QTMzODc1OTJGOTZCMUJDQzc3RjhBQ0ZDRjRGMUYxMUZBOTlEMB4XDTI1MDQwMTAx
MzEwOVoXDTI2MDMxNTAxMzAwM1owMzExMC8GA1UEAxMoMkEyREMyMzQwNkU4MUI0
N0M0RkY1MDg3RDgxQkY3OTcwQkYyMjFDNTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMD0XyysELIY8eUrquNfkJkxbD5uoHy8/VR+ATSIOjH2DMtj2Juw
7CN/D2cnHsZlo3A4Nk63P8T5uGHSTwhzXR3p1fF0ZMI12kwiWqi3EHuRhi5Mk5zM
1UxdaGif0cALRcXODS/Td67tYAc04mEFBQ83U4Uq9xNp0riZGNlNOmTy8w3X+PP1
skxBWGlzE/uZ54yVrUiM2xjGWXTv6t1tEi/jV0n9KsFi4mcAgvw8+14dW0m76x0X
hH5JI91ioRetgaazvIxw5DSJu4iO85FuolxB/+qIVNOtIUKDK/einxbJfMaKqO2k
GfuyLiGf/mTPWwPsZbQx4pquO/JiCngkGbkCAwEAAaOCAigwggIkMB0GA1UdDgQW
BBQqLcI0BugbR8T/UIfYG/eXC/IhxTAfBgNVHSMEGDAWgBTBY6M4dZL5axvMd/is
/PTx8R+pnTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAwNjAvd1dPak9IV1MtV3NiekhmNHJQejA4ZkVmcVowLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvd1dPak9IV1MtV3NiekhmNHJQejA4
ZkVmcVowLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzIwMDYwL0tpM0NOQWJvRzBmRV8xQ0gyQnYzbHd2eUljVS5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAJnanwwDQYJKoZIhvcNAQELBQADggEBAA3AwhyDWgrg7+yoRYNnvCNP
tKHvc+1mwhTeJl2QRKOj1QfIIahODzgi9rtXFlJLPGx9akBhZ/1o3bftj8e8Qxwl
udU7OgtIIroZBo5sDQD6c1DCtknuvlfX2Sb0HbotHelxcueC6jcCji6SULDJKLt0
Kz6TNukwusuapXwv5AL+8qQJiH6PzDRVtZhqZYtNlObyUYt201S/mQb1eywLJlSh
4uQIYKcNTa8zscPUWYqhdTAaQ5IgusjT8H9XKjYkhcCi490AF0KJMqhOVNEs4YYo
xb6DBxvJuUT2aW4o88n1CnDWxyLSJR0OBIoWuhsRF7HWF8mX7osIpQGq9qjp+B0=
-----END CERTIFICATE-----
Generated at Sat Apr 26 17:16:01 2025 by rpki-client