Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20053/qgmdyvERIYF1hkZjTD1XSdJ5TP8.roa
File:                     qgmdyvERIYF1hkZjTD1XSdJ5TP8.roa (raw, json)
Hash identifier:          7Db51yqAn9QX5TiyaSo8O8xJ1sCw0NEFf/EWuSJCN80=
Subject key identifier:   AA:09:9D:CA:F1:11:21:81:75:86:46:63:4C:3D:57:49:D2:79:4C:FF
Certificate issuer:       /CN=151B1BA80303A776F3F7B431110766C66671EC16
Certificate serial:       13
Authority key identifier: 15:1B:1B:A8:03:03:A7:76:F3:F7:B4:31:11:07:66:C6:66:71:EC:16
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FRsbqAMDp3bz97QxEQdmxmZx7BY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20053/qgmdyvERIYF1hkZjTD1XSdJ5TP8.roa
Signing time:             Fri 04 Apr 2025 07:42:15 +0000
ROA not before:           Fri 04 Apr 2025 07:42:15 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     131926
IP address blocks:        103.104.88.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20053/FRsbqAMDp3bz97QxEQdmxmZx7BY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20053/FRsbqAMDp3bz97QxEQdmxmZx7BY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FRsbqAMDp3bz97QxEQdmxmZx7BY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19 (0x13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=151B1BA80303A776F3F7B431110766C66671EC16
        Validity
            Not Before: Apr  4 07:42:15 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=AA099DCAF1112181758646634C3D5749D2794CFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:c7:eb:f0:f2:0f:b1:35:ab:34:4e:5d:d2:e6:
                    a4:09:85:d2:74:a2:1c:68:fe:53:4e:10:2b:f1:78:
                    bd:8c:22:42:95:ce:75:70:6a:47:9e:d8:a9:b2:d1:
                    5a:93:95:bf:24:5c:af:c1:5d:51:bf:3a:92:61:04:
                    5f:e9:d6:ab:9f:5e:3a:15:73:a2:f2:38:9c:4c:54:
                    10:f0:ac:29:76:6a:6b:0b:23:da:79:e3:58:0c:ab:
                    64:64:1f:b1:8e:71:19:4d:0a:9e:90:5a:bd:33:44:
                    52:45:4e:d9:ff:8c:cd:26:e4:12:e3:44:b5:5e:ae:
                    49:c3:01:d2:26:62:97:27:f6:4a:1b:09:4b:eb:e6:
                    76:4f:23:43:09:fb:25:26:c8:ae:74:a4:94:e6:79:
                    e6:b4:90:f1:51:b6:0c:33:74:f0:1d:b7:b0:fa:bd:
                    5c:1f:d3:94:23:c8:39:43:be:fc:20:72:11:0f:f7:
                    f6:02:96:68:5e:4a:25:15:9a:29:41:6f:d4:02:b5:
                    12:29:e6:e9:16:92:07:28:6e:3d:32:de:ae:45:25:
                    49:a3:9a:a5:a1:f8:12:9d:c4:a8:59:df:ff:c4:b8:
                    7c:20:c9:45:90:00:06:82:23:46:bb:d8:87:57:52:
                    95:ed:67:0c:e7:23:d4:4d:4e:be:10:bc:0d:52:a8:
                    58:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:09:9D:CA:F1:11:21:81:75:86:46:63:4C:3D:57:49:D2:79:4C:FF
            X509v3 Authority Key Identifier:
                keyid:15:1B:1B:A8:03:03:A7:76:F3:F7:B4:31:11:07:66:C6:66:71:EC:16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20053/FRsbqAMDp3bz97QxEQdmxmZx7BY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FRsbqAMDp3bz97QxEQdmxmZx7BY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20053/qgmdyvERIYF1hkZjTD1XSdJ5TP8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.104.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         50:e2:fc:c2:49:85:f5:0d:cc:43:97:9d:65:f6:eb:78:05:b7:
         60:c5:37:b0:c5:7b:e4:a9:df:5e:9f:02:ba:bf:8f:fc:56:8c:
         06:db:bf:a4:c7:dd:93:c8:88:33:3b:aa:6b:f8:59:93:a3:ce:
         5c:14:ab:5c:c4:9c:0c:84:a3:c5:94:ec:ad:85:e1:3b:1a:15:
         96:c5:98:47:61:46:dd:32:06:00:ad:30:2e:51:12:e5:f1:b0:
         a4:ca:0f:79:c0:85:92:2a:62:5a:70:33:ff:87:b5:01:b7:a6:
         d5:47:55:bd:e9:9f:0a:7e:96:17:f9:7e:34:23:3b:9e:98:a5:
         40:e1:05:b1:03:01:a5:15:c9:ef:81:b2:70:a2:ae:a8:4f:44:
         34:a2:99:f5:87:d9:31:d8:ce:7b:59:81:77:a8:b8:29:54:22:
         65:07:c2:60:e3:cc:c0:88:61:ba:80:f6:9c:a9:32:8f:f5:46:
         87:be:93:19:33:bd:54:dd:ef:d5:a0:71:0a:6f:92:a0:03:f3:
         46:79:09:5e:3d:97:87:6f:35:a1:40:30:c5:1d:3b:73:32:26:
         ae:5b:25:fd:28:e2:37:1a:b8:39:fe:81:93:f4:08:67:42:29:
         29:32:84:81:d4:2e:01:c6:57:b6:96:b5:0f:ff:09:f9:2a:aa:
         f0:15:af:31
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:48:18 2025 by rpki-client