Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/g8FcpcgRXDHLxZ5TrjpJmMa-lvg.roa
File:                     g8FcpcgRXDHLxZ5TrjpJmMa-lvg.roa (raw, json)
Hash identifier:          9PLGcciwYrMNAIRDJHu6yRARKbx6ZhczhQZd3EYxnHo=
Subject key identifier:   83:C1:5C:A5:C8:11:5C:31:CB:C5:9E:53:AE:3A:49:98:C6:BE:96:F8
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       01F3
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/g8FcpcgRXDHLxZ5TrjpJmMa-lvg.roa
Signing time:             Fri 01 Aug 2025 01:33:50 +0000
ROA not before:           Fri 01 Aug 2025 01:33:50 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     16509
IP address blocks:        103.2.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 499 (0x1f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Aug  1 01:33:50 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=83C15CA5C8115C31CBC59E53AE3A4998C6BE96F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:fb:00:02:ea:d3:0a:e2:3c:8c:99:79:f7:c4:
                    4d:d1:70:12:e9:58:ae:e4:c1:ca:2b:a2:b7:57:d1:
                    14:f1:3f:6c:e4:c9:8b:da:7d:9b:db:a0:af:51:75:
                    a8:db:55:86:7e:a6:3a:90:1e:06:2f:31:c0:6d:4e:
                    4c:42:51:71:c2:f6:2a:f1:20:7d:be:5a:2d:88:8c:
                    1d:ea:86:9d:83:12:0d:17:4a:bc:48:a2:2c:df:ca:
                    d8:f9:27:9a:b7:4c:3b:c1:33:00:57:74:8c:f6:b9:
                    fa:32:a5:f7:fa:e7:fa:a7:4b:e6:5a:e0:3b:60:18:
                    bd:33:ca:c4:45:fd:ca:c8:a0:75:b5:43:2f:4a:e6:
                    61:62:a9:d7:07:93:56:74:04:e0:d5:94:7e:ed:76:
                    d0:91:d5:05:bd:85:d8:33:75:df:c2:fc:52:53:97:
                    57:a9:09:69:60:8b:6b:05:7e:d1:39:f6:4b:30:ef:
                    bf:b6:45:3c:c6:38:d2:ba:18:e7:f1:20:65:a8:d9:
                    08:55:a8:88:e4:98:89:31:3b:f5:a1:31:e0:5e:e9:
                    49:3b:bc:e8:b7:69:82:49:56:88:58:cd:14:03:82:
                    74:96:03:69:f1:70:45:ad:d4:bd:44:b0:cb:1e:96:
                    ce:f6:2c:5a:04:a5:7e:cf:ff:76:06:39:66:42:49:
                    42:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:C1:5C:A5:C8:11:5C:31:CB:C5:9E:53:AE:3A:49:98:C6:BE:96:F8
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/g8FcpcgRXDHLxZ5TrjpJmMa-lvg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.2.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:8e:a1:40:71:65:ee:30:4a:9c:f7:c1:27:82:d0:aa:5c:9d:
         55:1a:21:00:47:bf:2b:50:17:20:c0:cc:a8:f7:df:2c:d8:81:
         4a:e0:29:3b:e5:8d:83:ab:30:09:8e:4f:bf:13:41:d5:55:ec:
         d8:91:1c:88:0e:ab:0d:da:e6:86:e5:8a:11:a4:7b:d8:7e:ef:
         8a:b1:08:3d:f8:28:18:43:61:d9:82:bf:3f:99:51:79:81:71:
         27:3d:03:e6:03:7b:c8:f4:69:82:50:00:ae:2c:9a:40:15:83:
         8b:38:21:21:d2:d9:1b:ec:cf:49:32:73:49:7a:e4:fd:90:01:
         df:60:af:70:3f:8a:a7:8f:72:d5:c9:97:fe:fd:ab:7e:26:22:
         c2:23:2f:e1:31:59:47:11:b8:be:60:58:6a:e0:9b:d2:32:7e:
         ec:13:09:87:56:5e:1c:f2:89:68:94:80:6b:32:8d:83:9b:ef:
         9d:14:16:84:78:04:fc:8d:32:2d:d2:c1:d2:0f:07:3c:38:cb:
         69:25:cf:f2:de:9c:96:1e:50:f9:a5:27:40:ae:fb:3c:e8:e6:
         66:c1:8e:4c:a7:65:19:52:5b:56:02:43:2d:f1:71:bd:5d:23:
         2b:32:2c:84:5b:c2:55:2b:8d:09:e2:be:f7:a3:24:8e:7b:2a:
         e5:99:b8:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:45:54 2025 by rpki-client