Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20084/Nsvran39qENj7C6G_K2RuqN3Pk4.roa
File:                     Nsvran39qENj7C6G_K2RuqN3Pk4.roa (raw, json)
Hash identifier:          0BJTahg3PKdwX+kqmS2cX6XxmhQPPhElhDfcIp0M5qs=
Subject key identifier:   36:CB:EB:6A:7D:FD:A8:43:63:EC:2E:86:FC:AD:91:BA:A3:77:3E:4E
Certificate issuer:       /CN=381CEBD5718139418E2BA504374D52816234E9EB
Certificate serial:       17
Authority key identifier: 38:1C:EB:D5:71:81:39:41:8E:2B:A5:04:37:4D:52:81:62:34:E9:EB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/OBzr1XGBOUGOK6UEN01SgWI06es.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20084/Nsvran39qENj7C6G_K2RuqN3Pk4.roa
Signing time:             Fri 28 Mar 2025 05:18:33 +0000
ROA not before:           Fri 28 Mar 2025 05:18:33 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     131943
IP address blocks:        103.126.176.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20084/OBzr1XGBOUGOK6UEN01SgWI06es.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20084/OBzr1XGBOUGOK6UEN01SgWI06es.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/OBzr1XGBOUGOK6UEN01SgWI06es.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 23 (0x17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=381CEBD5718139418E2BA504374D52816234E9EB
        Validity
            Not Before: Mar 28 05:18:33 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=36CBEB6A7DFDA84363EC2E86FCAD91BAA3773E4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:cd:fb:22:e0:3e:8d:1e:8a:c0:02:3f:f1:71:
                    7c:fc:6d:cc:33:ce:0f:b6:99:4b:2c:e4:93:02:b5:
                    a4:f5:2e:68:bc:cc:1a:a9:7c:1b:fb:91:6e:8c:7a:
                    9e:bf:fe:60:a6:84:73:ce:c1:65:2e:a3:35:3e:92:
                    b6:7f:16:b8:e9:92:dc:b6:ee:a2:f5:bf:92:20:7b:
                    53:6f:ed:10:8b:96:71:af:4b:01:e0:3c:8c:6d:06:
                    29:28:ec:7e:5a:6e:69:a5:96:8a:48:bd:41:97:b6:
                    00:ff:1a:e7:d5:3d:f4:56:2e:57:5a:99:53:a6:d7:
                    c6:16:7a:5d:ba:fa:fc:89:88:e5:2d:70:c6:8e:a1:
                    09:c0:01:78:68:5f:b3:fc:79:37:b2:f8:ff:46:cd:
                    9c:6a:e0:bf:11:fa:9e:14:95:55:b7:90:71:f2:fc:
                    5a:ba:3b:67:f1:74:3a:e3:1a:90:9b:4e:3b:a7:8e:
                    45:0f:18:2a:e0:78:79:9f:27:51:e1:a5:4a:68:d4:
                    8c:c0:89:26:5d:83:00:1a:51:d6:45:34:36:6e:3e:
                    0b:aa:2f:c5:9f:83:5e:2e:6f:ad:e0:09:94:16:41:
                    4a:79:db:d0:4e:ce:34:5f:1a:aa:78:01:30:ec:29:
                    05:55:e3:ab:3a:bc:53:29:14:9c:d6:82:33:22:77:
                    de:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:CB:EB:6A:7D:FD:A8:43:63:EC:2E:86:FC:AD:91:BA:A3:77:3E:4E
            X509v3 Authority Key Identifier:
                keyid:38:1C:EB:D5:71:81:39:41:8E:2B:A5:04:37:4D:52:81:62:34:E9:EB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20084/OBzr1XGBOUGOK6UEN01SgWI06es.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/OBzr1XGBOUGOK6UEN01SgWI06es.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20084/Nsvran39qENj7C6G_K2RuqN3Pk4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.126.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8f:07:56:99:3e:65:eb:c1:a4:1a:22:28:ea:15:5b:a5:f5:35:
         13:81:d0:dc:25:85:89:21:86:67:f1:90:72:68:84:d6:3d:f2:
         2d:ae:e4:86:48:6b:38:2e:40:40:13:fb:78:8a:c9:a3:36:f8:
         73:30:0f:6c:bf:64:c2:47:de:6d:6d:69:4e:8f:55:07:1d:87:
         79:14:18:43:1a:15:c0:a4:ef:cf:df:c1:3b:48:20:fd:48:5c:
         60:11:c3:c6:15:5d:79:a4:fd:01:ef:7b:96:2f:ff:cd:65:2e:
         9e:ae:b1:99:30:70:57:ff:48:4c:8d:99:79:03:b1:b0:3b:f3:
         a3:c8:83:92:24:67:92:3c:ac:50:77:ea:e8:32:2e:d8:12:e7:
         68:1e:9e:da:0d:ae:6a:bf:80:af:83:fe:57:40:fd:82:8f:af:
         58:da:ab:bd:34:16:3a:61:b3:5c:7b:5f:1c:f5:de:1d:55:35:
         11:c2:82:4f:28:bf:f9:3f:43:b0:18:ea:8b:e1:a4:14:15:61:
         28:5a:ed:ab:8e:f8:92:9a:00:3e:9c:cd:b1:f1:d9:8e:e7:8f:
         c3:a8:82:66:b6:49:04:6c:08:65:a6:9b:47:e5:66:86:b7:39:
         52:03:be:41:c7:9a:8b:68:84:41:89:a2:e1:75:78:d8:a9:0d:
         2c:d8:5b:f5
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIBFzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygzODFD
RUJENTcxODEzOTQxOEUyQkE1MDQzNzRENTI4MTYyMzRFOUVCMB4XDTI1MDMyODA1
MTgzM1oXDTI2MDMxNTAxMzAwM1owMzExMC8GA1UEAxMoMzZDQkVCNkE3REZEQTg0
MzYzRUMyRTg2RkNBRDkxQkFBMzc3M0U0RTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMfN+yLgPo0eisACP/FxfPxtzDPOD7aZSyzkkwK1pPUuaLzMGql8
G/uRbox6nr/+YKaEc87BZS6jNT6Stn8WuOmS3LbuovW/kiB7U2/tEIuWca9LAeA8
jG0GKSjsflpuaaWWiki9QZe2AP8a59U99FYuV1qZU6bXxhZ6Xbr6/ImI5S1wxo6h
CcABeGhfs/x5N7L4/0bNnGrgvxH6nhSVVbeQcfL8Wro7Z/F0OuMakJtOO6eORQ8Y
KuB4eZ8nUeGlSmjUjMCJJl2DABpR1kU0Nm4+C6ovxZ+DXi5vreAJlBZBSnnb0E7O
NF8aqngBMOwpBVXjqzq8UykUnNaCMyJ33kUCAwEAAaOCAigwggIkMB0GA1UdDgQW
BBQ2y+tqff2oQ2PsLob8rZG6o3c+TjAfBgNVHSMEGDAWgBQ4HOvVcYE5QY4rpQQ3
TVKBYjTp6zAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAwODQvT0J6cjFYR0JPVUdPSzZVRU4wMVNnV0kwNmVzLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvT0J6cjFYR0JPVUdPSzZVRU4wMVNn
V0kwNmVzLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzIwMDg0L05zdnJhbjM5cUVOajdDNkdfSzJSdXFOM1BrNC5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAJnfrAwDQYJKoZIhvcNAQELBQADggEBAI8HVpk+ZevBpBoiKOoVW6X1
NROB0NwlhYkhhmfxkHJohNY98i2u5IZIazguQEAT+3iKyaM2+HMwD2y/ZMJH3m1t
aU6PVQcdh3kUGEMaFcCk78/fwTtIIP1IXGARw8YVXXmk/QHve5Yv/81lLp6usZkw
cFf/SEyNmXkDsbA786PIg5IkZ5I8rFB36ugyLtgS52gentoNrmq/gK+D/ldA/YKP
r1jaq700Fjphs1x7Xxz13h1VNRHCgk8ov/k/Q7AY6ovhpBQVYSha7auO+JKaAD6c
zbHx2Y7nj8Oogma2SQRsCGWmm0flZoa3OVIDvkHHmotohEGJouF1eNipDSzYW/U=
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:41:43 2025 by rpki-client