Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/454/plrrw1zZJMDvs5vsLiu3LSmU9So.roa
File:                     plrrw1zZJMDvs5vsLiu3LSmU9So.roa (raw, json)
Hash identifier:          En+hNR2/MWIF7+CfXeorjfU098aLo4gYHrkrOQgBa3g=
Subject key identifier:   A6:5A:EB:C3:5C:D9:24:C0:EF:B3:9B:EC:2E:2B:B7:2D:29:94:F5:2A
Certificate issuer:       /CN=AD4741F0349FBC15A708E28A2CE307906CAC5DE0
Certificate serial:       68
Authority key identifier: AD:47:41:F0:34:9F:BC:15:A7:08:E2:8A:2C:E3:07:90:6C:AC:5D:E0
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/plrrw1zZJMDvs5vsLiu3LSmU9So.roa
Signing time:             Fri 01 Aug 2025 01:30:50 +0000
ROA not before:           Fri 01 Aug 2025 01:30:50 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     10000
IP address blocks:        103.29.48.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104 (0x68)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD4741F0349FBC15A708E28A2CE307906CAC5DE0
        Validity
            Not Before: Aug  1 01:30:50 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=A65AEBC35CD924C0EFB39BEC2E2BB72D2994F52A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:1d:f2:a6:2e:81:23:fd:2c:14:fb:fc:68:8f:
                    12:9c:1b:61:d4:2d:45:34:65:0c:a0:42:84:6e:77:
                    de:2b:fb:e1:ab:32:d7:1e:8b:a0:16:a9:2f:69:f3:
                    56:dd:fc:b2:3e:7a:39:3c:31:d8:94:9b:9f:5a:55:
                    05:67:0a:68:6e:42:d5:3d:3b:a9:ad:77:c6:bd:51:
                    8c:55:57:4b:13:7e:66:ea:b4:c9:b3:f2:55:bc:ab:
                    e0:7f:57:98:50:b0:92:7a:7f:44:cd:35:bf:f0:6c:
                    31:b3:d4:ad:32:b4:24:f5:c3:a6:3f:e5:29:a9:a3:
                    22:5a:9c:a5:99:b3:d5:88:6b:01:4b:3c:ac:7c:10:
                    c4:62:b6:1d:26:17:6f:01:0e:c6:7f:78:2a:68:da:
                    38:5e:ad:8a:24:39:3b:55:f3:19:30:e6:02:ad:43:
                    3b:3c:68:44:41:ee:f5:6d:73:53:f0:e3:31:0b:86:
                    2d:be:f6:45:bd:38:db:30:9d:25:f5:23:11:c5:53:
                    c1:3a:8e:5f:66:9c:3e:77:72:33:3d:72:9c:9b:e3:
                    98:41:35:9b:12:bc:a9:e3:7f:5d:ee:6b:e3:0b:53:
                    3d:8e:44:9e:3e:6c:b7:b3:1a:f4:14:c1:d0:b0:79:
                    d2:ff:94:7b:bf:33:f6:5a:45:cf:fb:56:13:63:6b:
                    23:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:5A:EB:C3:5C:D9:24:C0:EF:B3:9B:EC:2E:2B:B7:2D:29:94:F5:2A
            X509v3 Authority Key Identifier:
                keyid:AD:47:41:F0:34:9F:BC:15:A7:08:E2:8A:2C:E3:07:90:6C:AC:5D:E0

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/plrrw1zZJMDvs5vsLiu3LSmU9So.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.29.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         cd:2c:e1:8a:13:ee:f5:a5:a9:b9:8c:37:75:ba:16:9b:92:3d:
         75:9e:e0:a4:50:49:ab:d1:d3:58:d7:53:53:91:20:9e:72:b0:
         48:16:ad:81:e3:7b:a0:03:5d:f3:b1:cd:7c:b9:47:fd:8b:ea:
         d3:10:03:df:bb:09:1a:af:1d:2f:b1:b0:c9:c8:2b:fe:12:ae:
         02:c7:7e:06:e6:c3:86:0f:1a:23:6e:ad:35:b9:3a:be:25:66:
         e4:fb:d1:00:dc:f7:44:d9:15:0d:ee:08:99:6c:a2:24:00:8f:
         21:02:ea:5e:80:c3:34:f9:da:df:78:84:23:08:7a:74:d9:18:
         4c:ba:39:64:0f:37:07:cb:bb:a3:94:3b:3d:1d:7e:ad:97:07:
         2d:79:a5:e7:0f:5f:61:71:d6:90:dc:8b:b3:da:63:75:dd:74:
         f0:3c:6d:52:d4:e6:25:c0:e1:66:5f:a3:3b:19:e9:27:e8:8b:
         e5:5b:ce:6d:88:67:eb:e7:9a:e5:c7:e3:49:62:6a:bc:a3:d9:
         d9:93:d8:74:2f:a3:04:d1:45:d3:84:15:24:bd:0a:0f:91:26:
         69:40:98:7d:31:c0:43:49:31:39:32:35:03:86:e4:84:ed:4d:
         e4:73:23:a8:a5:5d:5e:3a:c9:ca:5a:50:60:db:a8:99:7e:9f:
         8d:10:c7:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 10:42:48 2025 by rpki-client