Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/948/7F5SDcJWLxcn3l4mfqxkLE37cLc.roa
File:                     7F5SDcJWLxcn3l4mfqxkLE37cLc.roa (raw, json)
Hash identifier:          v5h/WnpJXJ9hgDniS+bT6skLLIap7FbN4ml0NLceulM=
Subject key identifier:   EC:5E:52:0D:C2:56:2F:17:27:DE:5E:26:7E:AC:64:2C:4D:FB:70:B7
Certificate issuer:       /CN=C4B9536C4EC785B8812E53A219D2B09A7DCBCE0C
Certificate serial:       43
Authority key identifier: C4:B9:53:6C:4E:C7:85:B8:81:2E:53:A2:19:D2:B0:9A:7D:CB:CE:0C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/7F5SDcJWLxcn3l4mfqxkLE37cLc.roa
Signing time:             Tue 10 Jun 2025 10:48:49 +0000
ROA not before:           Tue 10 Jun 2025 10:48:49 +0000
ROA not after:            Sat 23 May 2026 09:51:00 +0000
asID:                     38628
IP address blocks:        103.16.236.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 28 Jun 2025 21:03:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 67 (0x43)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C4B9536C4EC785B8812E53A219D2B09A7DCBCE0C
        Validity
            Not Before: Jun 10 10:48:49 2025 GMT
            Not After : May 23 09:51:00 2026 GMT
        Subject: CN=EC5E520DC2562F1727DE5E267EAC642C4DFB70B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:44:3f:3d:b4:6a:76:ee:ba:25:b7:b3:6c:49:
                    b0:3c:e5:fb:da:b6:3b:be:47:57:10:30:eb:bb:ca:
                    0e:65:dc:a7:5b:43:a9:19:10:0e:65:d8:b5:35:7a:
                    ec:d9:e8:05:d7:68:b4:35:ac:fd:7c:38:96:fc:c6:
                    02:73:e3:d0:74:52:3d:71:c7:c3:a3:2f:38:b0:31:
                    85:54:ea:78:51:13:1a:1f:e2:29:04:6f:de:27:fb:
                    f8:87:e8:c5:2c:a0:af:bb:35:f4:22:f9:40:49:72:
                    12:98:d6:aa:4b:40:6f:aa:9f:bc:3a:dd:c6:c2:f4:
                    fb:73:f6:4b:ae:cc:fc:3a:72:d0:b7:3f:f1:3b:5a:
                    5d:c6:d9:0e:92:5c:15:d0:3a:c3:6a:af:a3:80:c7:
                    ce:bd:70:4d:c4:09:40:bb:ab:2d:4f:b9:81:e3:4a:
                    f0:d8:2b:04:e4:33:b1:b5:82:98:7a:8d:c7:96:26:
                    c1:41:2b:9c:8f:49:3d:b3:d3:a1:38:0f:39:de:98:
                    1b:ff:76:1a:2a:6c:ea:19:39:b6:1a:db:61:e1:ea:
                    9b:2d:f8:1e:2a:4e:cb:95:75:27:83:ac:10:5b:e5:
                    12:59:a6:fe:0f:a0:1e:13:64:b8:34:3f:c7:df:fb:
                    0d:d0:6b:43:ae:7a:80:ae:a6:01:0e:d5:2e:63:3a:
                    b3:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:5E:52:0D:C2:56:2F:17:27:DE:5E:26:7E:AC:64:2C:4D:FB:70:B7
            X509v3 Authority Key Identifier:
                keyid:C4:B9:53:6C:4E:C7:85:B8:81:2E:53:A2:19:D2:B0:9A:7D:CB:CE:0C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/7F5SDcJWLxcn3l4mfqxkLE37cLc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.16.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         aa:07:d9:2b:3c:3b:f6:7d:97:6c:f2:c2:cb:15:37:5a:0d:a8:
         2e:44:22:82:75:f8:57:db:db:a8:11:6f:0f:f8:7c:54:ca:37:
         e9:87:ba:10:24:62:99:6f:89:fc:33:c0:ad:e9:f4:75:15:ef:
         2e:02:5e:56:05:37:fe:28:26:2d:13:79:84:59:b5:a9:cb:91:
         c3:41:a5:b8:8f:7d:32:21:1d:a6:84:c1:8a:8d:79:d8:8b:57:
         89:bb:e8:b3:ef:51:e5:fc:aa:07:ec:e9:8c:fe:6d:10:a2:85:
         9c:2f:0a:c8:79:06:0d:04:83:c3:23:88:4f:50:f8:af:92:1a:
         b9:eb:a2:5d:38:ab:48:56:0e:5d:27:a9:b7:7a:61:b0:77:7f:
         78:c8:7d:79:47:08:ac:45:d8:06:62:63:96:ff:a2:9a:b2:a1:
         b0:c4:00:7f:73:68:e4:bb:fe:c2:b3:46:46:bf:bf:ce:8d:ed:
         c2:4d:0d:35:80:f4:01:cc:4f:d8:38:c1:cf:48:ae:f7:dc:0e:
         19:27:60:b0:54:f3:c5:9a:7a:91:1f:c5:d3:b3:d1:e6:25:77:
         ee:3c:36:2c:f6:13:3f:5e:7c:35:0b:c4:d3:18:96:ed:c8:9b:
         61:61:8b:34:68:30:36:d5:87:bb:f3:e2:1f:c7:e3:59:3c:dd:
         8a:36:97:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 05:11:08 2025 by rpki-client