Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20214/-hY0Txahey-phWtRvAvwAIYth9A.roa
File:                     -hY0Txahey-phWtRvAvwAIYth9A.roa (raw, json)
Hash identifier:          XBTF2xX2XSiXh35iU+RSDBwa9pjdewfeGBpMfN7D1Vw=
Subject key identifier:   FA:16:34:4F:16:A1:7B:2F:A9:85:6B:51:BC:0B:F0:00:86:2D:87:D0
Certificate issuer:       /CN=250E82975D8291C44AA7E53EA15124F0EEA20B05
Certificate serial:       22
Authority key identifier: 25:0E:82:97:5D:82:91:C4:4A:A7:E5:3E:A1:51:24:F0:EE:A2:0B:05
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/JQ6Cl12CkcRKp-U-oVEk8O6iCwU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20214/-hY0Txahey-phWtRvAvwAIYth9A.roa
Signing time:             Tue 01 Apr 2025 01:30:48 +0000
ROA not before:           Tue 01 Apr 2025 01:30:48 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     58790
IP address blocks:        103.131.151.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20214/JQ6Cl12CkcRKp-U-oVEk8O6iCwU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20214/JQ6Cl12CkcRKp-U-oVEk8O6iCwU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/JQ6Cl12CkcRKp-U-oVEk8O6iCwU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 34 (0x22)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=250E82975D8291C44AA7E53EA15124F0EEA20B05
        Validity
            Not Before: Apr  1 01:30:48 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=FA16344F16A17B2FA9856B51BC0BF000862D87D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:2b:e7:28:a5:06:f5:61:2f:85:48:e1:ba:38:
                    a2:c9:46:36:40:1d:8e:33:42:35:46:48:a1:43:cc:
                    9d:a5:17:6d:4c:9f:6c:f8:be:c4:ae:fd:c8:af:3d:
                    61:1c:f1:e6:ee:f7:2e:e1:0f:3f:42:f3:01:f4:83:
                    c6:6a:ef:16:11:b4:8b:b5:d5:13:6d:8a:36:66:f3:
                    de:bc:f9:82:52:29:f6:e3:ff:30:7a:6f:ec:da:3c:
                    a7:c2:be:90:43:56:84:7a:47:2c:ae:77:5e:e5:0b:
                    db:47:0c:53:05:73:92:ee:4b:84:15:48:c0:50:22:
                    6c:7a:34:ae:e9:f9:5c:4f:8e:33:02:b7:79:83:c2:
                    36:8f:28:d6:f5:b1:08:fe:dc:d2:d1:ab:d9:18:a9:
                    c2:70:d7:b2:62:1e:28:5e:78:a4:91:63:2f:af:53:
                    d8:43:19:19:32:78:32:34:53:a9:65:9f:9c:dd:e7:
                    c3:41:1c:12:e3:a0:8d:92:79:0b:06:ae:76:6e:59:
                    4d:7e:92:77:7a:ef:9f:d7:d4:2d:84:5c:4a:03:22:
                    2a:c1:2e:ae:03:71:01:09:02:df:33:4d:53:5a:33:
                    fd:56:f0:e1:78:0f:e3:9a:a1:1b:a8:d7:ab:cc:e2:
                    0d:42:04:e6:81:1e:40:ac:e0:03:41:40:f8:e1:fa:
                    8b:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:16:34:4F:16:A1:7B:2F:A9:85:6B:51:BC:0B:F0:00:86:2D:87:D0
            X509v3 Authority Key Identifier:
                keyid:25:0E:82:97:5D:82:91:C4:4A:A7:E5:3E:A1:51:24:F0:EE:A2:0B:05

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20214/JQ6Cl12CkcRKp-U-oVEk8O6iCwU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/JQ6Cl12CkcRKp-U-oVEk8O6iCwU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20214/-hY0Txahey-phWtRvAvwAIYth9A.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.131.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:f1:46:b8:9d:d5:7d:9c:58:2d:17:5d:87:41:a1:68:08:1a:
         15:26:29:a5:78:74:b8:6a:e8:be:d1:36:9c:db:d3:83:3c:f7:
         dc:38:89:9f:4c:32:d6:93:51:66:02:8f:69:40:a9:5f:b8:6a:
         88:a8:fd:87:f7:9a:68:ad:ad:9f:06:ac:bb:24:97:dc:06:0a:
         2e:59:64:aa:4d:cc:7c:39:03:16:de:ed:ff:3f:8c:ca:a1:5c:
         61:f8:30:61:a3:25:d9:9e:31:98:e6:dc:b6:f2:2a:1a:a4:3d:
         62:bb:a3:e3:d4:07:ff:14:dc:df:1b:6d:5c:f6:e0:f7:38:c6:
         cc:2b:d5:00:1b:f1:83:b0:26:aa:00:52:d4:b3:54:0a:f3:a8:
         79:35:e7:63:c8:49:cb:b0:b8:d4:b9:04:c5:19:3e:7e:39:d6:
         b5:22:4b:3a:ba:2a:c8:46:29:f9:e9:3a:55:f7:e5:85:69:93:
         e8:a0:82:06:ef:7a:d0:f8:8c:71:ab:5e:bc:30:14:7b:ae:17:
         8d:47:04:1d:9a:3c:81:96:9c:06:ef:20:90:07:cf:68:a4:66:
         9e:da:f6:97:b8:a9:8e:31:2a:9c:6b:e1:b2:6f:20:73:61:d8:
         93:28:18:c1:76:91:f2:b9:7c:6e:30:02:bb:bc:21:d2:4e:bb:
         19:4b:99:0a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Apr 6 23:46:47 2025 by rpki-client