Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20031/BiFSzOA9HCjORbD3Lp4poUry2S4.roa
File:                     BiFSzOA9HCjORbD3Lp4poUry2S4.roa (raw, json)
Hash identifier:          55ZjJ6XMYcSXCkyXNXq+bcjZWk0uviD88iMBc5sI27g=
Subject key identifier:   06:21:52:CC:E0:3D:1C:28:CE:45:B0:F7:2E:9E:29:A1:4A:F2:D9:2E
Certificate issuer:       /CN=7642A07D9AC9D227EA42F79E6D131CB1A920EDCE
Certificate serial:       46
Authority key identifier: 76:42:A0:7D:9A:C9:D2:27:EA:42:F7:9E:6D:13:1C:B1:A9:20:ED:CE
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/dkKgfZrJ0ifqQveebRMcsakg7c4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/BiFSzOA9HCjORbD3Lp4poUry2S4.roa
Signing time:             Wed 01 Oct 2025 01:31:29 +0000
ROA not before:           Wed 01 Oct 2025 01:31:29 +0000
ROA not after:            Tue 15 Sep 2026 01:30:02 +0000
asID:                     7511
IP address blocks:        103.53.120.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/dkKgfZrJ0ifqQveebRMcsakg7c4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/dkKgfZrJ0ifqQveebRMcsakg7c4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/dkKgfZrJ0ifqQveebRMcsakg7c4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Oct 2025 20:03:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 70 (0x46)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7642A07D9AC9D227EA42F79E6D131CB1A920EDCE
        Validity
            Not Before: Oct  1 01:31:29 2025 GMT
            Not After : Sep 15 01:30:02 2026 GMT
        Subject: CN=062152CCE03D1C28CE45B0F72E9E29A14AF2D92E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:51:76:e7:04:e1:f3:3f:b2:82:59:d4:9a:61:
                    92:42:e9:1f:eb:36:f0:d3:c5:b5:46:1b:d8:7d:8d:
                    40:19:67:ef:50:6d:66:3d:58:57:65:fc:32:49:75:
                    a9:d6:e1:fc:d8:13:2e:a5:5c:6f:65:50:86:b9:d3:
                    0c:5e:5b:42:63:8e:36:d8:fd:b5:b4:d5:00:88:65:
                    5f:f4:42:1c:ee:a1:55:39:35:9d:e2:74:56:fd:5b:
                    a5:6c:ed:52:05:5c:b5:a6:4f:c5:bb:48:4a:97:71:
                    d3:8d:06:23:4e:4f:c5:0d:92:6a:c7:91:e1:6a:03:
                    73:24:7c:fc:11:3a:b6:6b:9b:e6:bb:fb:2c:b5:41:
                    e6:35:3d:d7:d3:31:4a:1e:ad:8a:02:b0:e0:cc:83:
                    73:45:7d:7a:c9:1d:80:cb:ce:25:bd:c3:10:2e:50:
                    e2:d2:fc:19:45:07:bc:d7:15:1f:1b:01:88:89:a6:
                    0f:9b:ff:17:cc:72:7a:cc:17:43:55:bc:22:06:88:
                    17:39:a0:b5:c4:bd:d1:4c:05:84:e4:9f:22:ab:ab:
                    32:16:ae:e4:3a:b6:f4:a1:f6:56:55:15:69:31:31:
                    0c:9f:d6:d3:fd:fb:8c:77:e9:39:32:fe:65:92:3f:
                    87:dd:62:c5:9e:40:a7:e0:90:d3:ac:1e:97:ec:9b:
                    e1:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:21:52:CC:E0:3D:1C:28:CE:45:B0:F7:2E:9E:29:A1:4A:F2:D9:2E
            X509v3 Authority Key Identifier:
                keyid:76:42:A0:7D:9A:C9:D2:27:EA:42:F7:9E:6D:13:1C:B1:A9:20:ED:CE

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/dkKgfZrJ0ifqQveebRMcsakg7c4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/dkKgfZrJ0ifqQveebRMcsakg7c4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/BiFSzOA9HCjORbD3Lp4poUry2S4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.53.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         69:93:88:13:40:36:5d:71:a0:d4:a9:af:20:a6:b1:60:bf:bc:
         1d:55:f9:29:26:e2:73:0a:e2:e5:5a:d1:21:b5:05:96:a5:60:
         c3:3e:99:22:22:8f:01:6b:7e:48:51:a3:32:cd:25:2e:30:39:
         18:b8:bb:43:ed:4a:4c:05:59:04:1e:a5:05:76:d8:19:ee:c4:
         b2:0d:b2:c2:db:52:d0:ba:8c:24:f7:86:7c:43:f6:15:8d:c8:
         e4:b2:71:72:38:1d:72:d6:5b:80:69:e5:95:3e:af:2d:b6:83:
         23:d6:b7:9e:97:87:67:03:63:73:97:2e:2e:68:87:61:58:aa:
         8a:c8:92:c7:6a:84:ca:b6:ce:1c:ee:ab:c6:91:03:c4:1d:bb:
         f5:13:db:31:01:5f:c2:95:6f:22:9d:39:20:44:4d:81:3f:30:
         29:2c:9f:54:1a:3f:ce:30:12:20:79:8b:bc:f5:33:9c:ab:e7:
         73:c4:88:05:a5:6c:40:80:77:8a:d2:22:54:d1:82:6f:38:d1:
         c1:8a:54:fb:f5:41:de:8f:96:5d:57:c7:fa:12:ad:0d:3e:0a:
         98:0e:90:19:8b:66:db:92:6c:91:74:ab:3a:dd:e8:ab:c6:b8:
         06:99:aa:f3:fb:3f:24:82:e8:f3:fd:a9:6d:30:3e:e9:d6:5e:
         c4:05:fa:82
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Oct 8 21:28:25 2025 by rpki-client