Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20214/PXGXVRY9PugPn_auWRS0jrR_ExY.roa
File:                     PXGXVRY9PugPn_auWRS0jrR_ExY.roa (raw, json)
Hash identifier:          mCzu8j4CHSQkR3klyKbwZGvNIEZQjlLoRad9h38bCR4=
Subject key identifier:   3D:71:97:55:16:3D:3E:E8:0F:9F:F6:AE:59:14:B4:8E:B4:7F:13:16
Certificate issuer:       /CN=250E82975D8291C44AA7E53EA15124F0EEA20B05
Certificate serial:       28
Authority key identifier: 25:0E:82:97:5D:82:91:C4:4A:A7:E5:3E:A1:51:24:F0:EE:A2:0B:05
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/JQ6Cl12CkcRKp-U-oVEk8O6iCwU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20214/PXGXVRY9PugPn_auWRS0jrR_ExY.roa
Signing time:             Tue 10 Jun 2025 10:45:43 +0000
ROA not before:           Tue 10 Jun 2025 10:45:43 +0000
ROA not after:            Sat 23 May 2026 09:51:00 +0000
asID:                     63801
IP address blocks:        103.131.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20214/JQ6Cl12CkcRKp-U-oVEk8O6iCwU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20214/JQ6Cl12CkcRKp-U-oVEk8O6iCwU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/JQ6Cl12CkcRKp-U-oVEk8O6iCwU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 28 Jun 2025 21:03:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 40 (0x28)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=250E82975D8291C44AA7E53EA15124F0EEA20B05
        Validity
            Not Before: Jun 10 10:45:43 2025 GMT
            Not After : May 23 09:51:00 2026 GMT
        Subject: CN=3D719755163D3EE80F9FF6AE5914B48EB47F1316
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:4c:65:99:e4:ae:00:b2:fd:f2:4f:b0:b2:2d:
                    29:b3:6c:f7:7f:a6:3c:c0:b0:95:96:f8:fe:fc:6d:
                    1b:2c:3a:ee:85:4f:87:4c:10:50:8c:1f:d1:78:f4:
                    cf:a7:d4:94:d3:2c:73:4b:90:2e:e6:2e:f4:0d:59:
                    00:d4:bb:0c:02:4f:8d:5c:31:19:9d:22:b8:e2:be:
                    26:20:fa:27:24:47:e3:70:03:ea:e5:c1:47:ba:88:
                    df:04:41:d1:f5:e7:6c:12:c6:3d:75:7f:b0:f3:80:
                    3d:cb:6f:bd:1f:c3:4f:45:ce:32:75:c4:ed:67:a4:
                    a9:72:b8:34:07:2e:dc:72:61:e3:b8:ba:39:31:1c:
                    dd:ca:32:1a:ae:e9:23:a9:6b:c1:61:dc:07:64:fe:
                    0f:82:60:f0:67:3f:b2:e1:73:4c:cc:2c:14:5b:a3:
                    fc:84:0d:a7:10:80:17:e0:3f:a8:69:8d:ae:c5:f9:
                    58:e0:87:61:28:63:03:80:ea:b4:10:76:8a:e2:d1:
                    5a:11:99:d9:85:51:44:5b:0b:37:06:1b:da:0f:e6:
                    66:4a:6b:49:4a:31:f6:2e:c1:5f:c7:f6:5f:64:1c:
                    31:09:bc:2f:8b:41:6d:ee:9e:05:81:fa:78:d5:0b:
                    72:81:af:77:d9:5b:8f:d7:66:d8:a8:d3:0b:e6:4d:
                    6f:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:71:97:55:16:3D:3E:E8:0F:9F:F6:AE:59:14:B4:8E:B4:7F:13:16
            X509v3 Authority Key Identifier:
                keyid:25:0E:82:97:5D:82:91:C4:4A:A7:E5:3E:A1:51:24:F0:EE:A2:0B:05

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20214/JQ6Cl12CkcRKp-U-oVEk8O6iCwU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/JQ6Cl12CkcRKp-U-oVEk8O6iCwU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20214/PXGXVRY9PugPn_auWRS0jrR_ExY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.131.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:e2:20:15:82:4f:f4:51:e6:d4:a0:cb:90:ce:50:b9:07:2f:
         04:a9:1d:5f:2b:fd:20:f4:b4:00:24:30:b6:42:27:aa:0f:be:
         42:c4:8f:ac:6e:00:0a:06:95:bc:90:52:44:32:07:4f:8c:c1:
         2c:5b:c1:10:25:26:78:b2:a6:63:93:29:3a:03:7e:54:59:39:
         dc:43:d2:af:b4:ae:ff:56:b8:29:50:13:f5:92:38:36:d6:f4:
         f6:be:47:8d:f7:f0:47:17:90:df:9a:a1:65:5f:03:4f:07:76:
         1c:a7:31:d2:40:f0:fc:85:94:0a:46:f4:7f:21:33:c5:b6:e6:
         72:2a:14:c4:6a:4b:d8:69:45:ab:79:f6:8a:1a:90:04:76:1a:
         13:03:d4:ac:cd:84:9c:44:e2:a6:10:d5:90:ae:cc:74:69:8e:
         4c:c9:b1:2b:11:ca:b9:15:db:cb:c4:84:dd:c5:df:76:ba:db:
         d1:ff:83:1f:e2:04:d6:b0:51:c5:f9:b2:82:9a:68:84:e9:63:
         2d:a3:7b:3c:84:a9:fd:46:c8:eb:f0:df:fe:4b:d4:e6:e6:1c:
         cc:bf:81:ee:ad:54:57:09:ef:31:dc:68:14:c1:e1:bd:1b:c3:
         0c:d3:b7:8c:79:d9:27:4b:85:b1:96:60:17:fb:a4:73:8b:28:
         9b:eb:59:8f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Jun 22 05:08:13 2025 by rpki-client