Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/873/9Pc6u6Sqf1-Gu6hdKKlor2WYeK0.roa
File:                     9Pc6u6Sqf1-Gu6hdKKlor2WYeK0.roa (raw, json)
Hash identifier:          PRTNFL4vwd70Cfs7cI7kmA/e52O//AyO8xO0cEv+YKw=
Subject key identifier:   F4:F7:3A:BB:A4:AA:7F:5F:86:BB:A8:5D:28:A9:68:AF:65:98:78:AD
Certificate issuer:       /CN=80CACF70A4B6C1B6F624EF43484072406B8D3F36
Certificate serial:       1A
Authority key identifier: 80:CA:CF:70:A4:B6:C1:B6:F6:24:EF:43:48:40:72:40:6B:8D:3F:36
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/gMrPcKS2wbb2JO9DSEByQGuNPzY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/873/9Pc6u6Sqf1-Gu6hdKKlor2WYeK0.roa
Signing time:             Sat 08 Feb 2025 06:48:21 +0000
ROA not before:           Sat 08 Feb 2025 06:48:21 +0000
ROA not after:            Fri 06 Feb 2026 03:05:32 +0000
asID:                     23831
IP address blocks:        103.6.16.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/873/gMrPcKS2wbb2JO9DSEByQGuNPzY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/873/gMrPcKS2wbb2JO9DSEByQGuNPzY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/gMrPcKS2wbb2JO9DSEByQGuNPzY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 26 (0x1a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80CACF70A4B6C1B6F624EF43484072406B8D3F36
        Validity
            Not Before: Feb  8 06:48:21 2025 GMT
            Not After : Feb  6 03:05:32 2026 GMT
        Subject: CN=F4F73ABBA4AA7F5F86BBA85D28A968AF659878AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:7a:ad:25:8e:0a:a2:eb:c3:2b:21:73:c4:5d:
                    1d:e7:70:25:8e:dd:51:01:b6:29:9e:41:32:ea:bf:
                    77:4a:76:bd:ff:76:bb:45:30:86:1b:21:f3:14:05:
                    d8:09:51:a0:ab:0e:45:02:af:ac:2c:a1:cd:d6:02:
                    0d:09:e7:9b:55:da:e2:b4:3e:88:a6:a7:bb:18:28:
                    fd:5f:81:f3:59:fa:b4:01:0b:5e:e2:d7:58:a5:b1:
                    1b:41:ae:d9:f7:b7:85:f6:c9:b0:8f:8d:7b:97:9d:
                    c1:db:58:c5:5a:d6:2f:c5:37:4c:ec:63:41:be:60:
                    74:af:bd:71:20:38:9c:7a:41:34:4b:06:ef:fb:00:
                    ad:1e:02:6b:79:59:b3:a8:b2:bd:40:ff:89:ab:48:
                    cf:93:e9:6b:a7:8b:62:b2:a7:32:c5:57:5a:88:24:
                    ee:a6:24:28:ce:04:b9:a6:77:cc:7f:3f:9c:35:27:
                    01:c2:98:ce:00:4e:c4:24:83:13:c2:3c:6d:c8:db:
                    ac:47:23:77:b2:a4:5c:45:99:5f:17:b2:5e:13:ae:
                    1b:be:df:5a:83:1c:3f:e1:bf:62:12:a8:97:69:f3:
                    62:30:6b:d9:fa:0c:9a:29:5a:79:bb:3c:ae:50:3c:
                    26:29:50:9b:cb:3a:d7:20:c7:bb:cd:df:c8:93:00:
                    ee:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:F7:3A:BB:A4:AA:7F:5F:86:BB:A8:5D:28:A9:68:AF:65:98:78:AD
            X509v3 Authority Key Identifier:
                keyid:80:CA:CF:70:A4:B6:C1:B6:F6:24:EF:43:48:40:72:40:6B:8D:3F:36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/873/gMrPcKS2wbb2JO9DSEByQGuNPzY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/gMrPcKS2wbb2JO9DSEByQGuNPzY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/873/9Pc6u6Sqf1-Gu6hdKKlor2WYeK0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.6.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5e:41:50:c1:8d:81:ec:f2:ac:d2:e6:b2:6c:84:42:d1:73:97:
         95:d6:0c:16:58:c0:fd:dd:84:ba:3d:5c:5e:e7:64:72:d6:de:
         8d:36:f9:b6:c3:89:fb:04:5f:55:4d:35:e5:7e:9d:b7:87:91:
         ca:2d:92:54:34:34:92:a4:53:bf:ce:cf:b7:7f:a1:14:00:ca:
         d9:47:4c:dc:c4:7d:30:93:fd:b8:80:18:b9:bc:30:8c:e9:07:
         fb:8c:ef:95:fa:da:db:a2:4c:41:85:99:7e:72:57:41:1b:c4:
         c1:3c:ec:2c:40:93:af:03:7c:1d:bc:01:6d:a1:2a:72:96:f5:
         31:a6:7d:90:da:75:bf:6f:b5:2d:ab:33:bc:8c:89:63:55:1b:
         64:dd:29:2c:cb:7f:99:39:87:21:98:0d:34:ff:42:f1:6f:21:
         e3:93:a5:7d:71:c3:99:42:72:0f:a0:d9:30:89:8e:9f:51:12:
         5d:a3:a4:06:d4:2b:31:28:76:8f:53:33:a2:11:c3:f3:91:45:
         8c:2f:2c:d8:2b:e5:37:02:88:a1:39:4a:2e:ef:6c:f1:1d:88:
         9a:87:89:82:6d:62:e8:b3:b1:8f:cb:81:08:02:f6:f2:0b:b4:
         18:9f:5a:9c:e8:fc:d8:cf:5f:a3:61:10:3c:3a:44:d9:60:e2:
         96:f5:04:85
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBGjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4MENB
Q0Y3MEE0QjZDMUI2RjYyNEVGNDM0ODQwNzI0MDZCOEQzRjM2MB4XDTI1MDIwODA2
NDgyMVoXDTI2MDIwNjAzMDUzMlowMzExMC8GA1UEAxMoRjRGNzNBQkJBNEFBN0Y1
Rjg2QkJBODVEMjhBOTY4QUY2NTk4NzhBRDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAOJ6rSWOCqLrwyshc8RdHedwJY7dUQG2KZ5BMuq/d0p2vf92u0Uw
hhsh8xQF2AlRoKsORQKvrCyhzdYCDQnnm1Xa4rQ+iKanuxgo/V+B81n6tAELXuLX
WKWxG0Gu2fe3hfbJsI+Ne5edwdtYxVrWL8U3TOxjQb5gdK+9cSA4nHpBNEsG7/sA
rR4Ca3lZs6iyvUD/iatIz5Ppa6eLYrKnMsVXWogk7qYkKM4EuaZ3zH8/nDUnAcKY
zgBOxCSDE8I8bcjbrEcjd7KkXEWZXxeyXhOuG77fWoMcP+G/YhKol2nzYjBr2foM
milaebs8rlA8JilQm8s61yDHu83fyJMA7rMCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBT09zq7pKp/X4a7qF0oqWivZZh4rTAfBgNVHSMEGDAWgBSAys9wpLbBtvYk70NI
QHJAa40/NjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvODczL2dNclBjS1Myd2JiMkpPOURTRUJ5UUd1TlB6WS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2dNclBjS1Myd2JiMkpPOURTRUJ5UUd1
TlB6WS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC84NzMvOVBjNnU2U3FmMS1HdTZoZEtLbG9yMldZZUswLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAmcGEDANBgkqhkiG9w0BAQsFAAOCAQEAXkFQwY2B7PKs0uaybIRC0XOXldYM
FljA/d2Euj1cXudkctbejTb5tsOJ+wRfVU015X6dt4eRyi2SVDQ0kqRTv87Pt3+h
FADK2UdM3MR9MJP9uIAYubwwjOkH+4zvlfra26JMQYWZfnJXQRvEwTzsLECTrwN8
HbwBbaEqcpb1MaZ9kNp1v2+1LaszvIyJY1UbZN0pLMt/mTmHIZgNNP9C8W8h45Ol
fXHDmUJyD6DZMImOn1ESXaOkBtQrMSh2j1MzohHD85FFjC8s2CvlNwKIoTlKLu9s
8R2ImoeJgm1i6LOxj8uBCAL28gu0GJ9anOj82M9fo2EQPDpE2WDilvUEhQ==
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:48:00 2025 by rpki-client