Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/903/JdFSL2yw2DOGZtLzvIiu3JJqQ1s.roa
File:                     JdFSL2yw2DOGZtLzvIiu3JJqQ1s.roa (raw, json)
Hash identifier:          TwwjEsfC9xaO3foZCHM/bfklCy5s+OGJTBOGEvgBTNo=
Subject key identifier:   25:D1:52:2F:6C:B0:D8:33:86:66:D2:F3:BC:88:AE:DC:92:6A:43:5B
Certificate issuer:       /CN=94C2F0BE180089A7593D9ED37D04E852ED5A259A
Certificate serial:       04
Authority key identifier: 94:C2:F0:BE:18:00:89:A7:59:3D:9E:D3:7D:04:E8:52:ED:5A:25:9A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lMLwvhgAiadZPZ7TfQToUu1aJZo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/903/JdFSL2yw2DOGZtLzvIiu3JJqQ1s.roa
Signing time:             Thu 16 Jan 2025 08:06:38 +0000
ROA not before:           Thu 16 Jan 2025 08:06:38 +0000
ROA not after:            Fri 16 Jan 2026 07:42:57 +0000
asID:                     24253
IP address blocks:        103.157.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/903/lMLwvhgAiadZPZ7TfQToUu1aJZo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/903/lMLwvhgAiadZPZ7TfQToUu1aJZo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lMLwvhgAiadZPZ7TfQToUu1aJZo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94C2F0BE180089A7593D9ED37D04E852ED5A259A
        Validity
            Not Before: Jan 16 08:06:38 2025 GMT
            Not After : Jan 16 07:42:57 2026 GMT
        Subject: CN=25D1522F6CB0D8338666D2F3BC88AEDC926A435B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:63:b5:9f:c3:d5:b4:52:82:8d:c9:5c:da:da:
                    da:c7:33:f6:0f:2a:b3:21:90:58:df:51:ed:be:4c:
                    b0:6a:2d:49:ff:1a:1d:12:4a:69:82:78:6f:2a:7a:
                    43:f7:24:a6:51:85:fe:9b:75:f3:c1:36:78:29:cd:
                    81:c9:dd:a3:ff:26:6d:4c:3b:6d:70:61:ca:a4:c4:
                    2e:9d:6e:95:35:1d:85:ca:58:7f:7e:03:b8:f5:ff:
                    16:b7:77:2a:f8:9e:60:d8:5f:34:ce:0f:47:3f:a1:
                    fc:61:a1:42:0c:16:9b:58:90:e6:fd:75:9c:f8:84:
                    d6:52:36:0b:65:2a:91:bc:10:03:a0:9e:ff:d8:1e:
                    84:56:be:90:83:ba:27:5f:ca:5d:9b:d9:a0:be:4c:
                    cc:c2:21:02:ef:9e:d2:85:a0:3e:64:e9:0c:3f:e7:
                    8d:f3:b6:4a:93:94:4e:f7:66:b8:74:72:9a:f0:37:
                    be:bb:63:b2:ca:8a:6c:4d:63:4f:f5:f6:0d:1a:86:
                    a7:e6:81:5e:ef:d8:7f:d1:a0:64:c1:83:dd:4b:66:
                    5e:1e:cb:91:b0:e1:80:70:87:c5:8f:a9:11:95:f5:
                    67:f2:66:dd:db:6e:b4:35:7f:45:86:ea:4c:0e:45:
                    eb:bc:75:a9:c8:7b:f3:3e:27:e6:1b:ad:f1:f0:be:
                    f0:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:D1:52:2F:6C:B0:D8:33:86:66:D2:F3:BC:88:AE:DC:92:6A:43:5B
            X509v3 Authority Key Identifier:
                keyid:94:C2:F0:BE:18:00:89:A7:59:3D:9E:D3:7D:04:E8:52:ED:5A:25:9A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/903/lMLwvhgAiadZPZ7TfQToUu1aJZo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lMLwvhgAiadZPZ7TfQToUu1aJZo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/903/JdFSL2yw2DOGZtLzvIiu3JJqQ1s.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.157.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:a7:bb:ba:4d:ce:d5:f8:98:87:2a:4d:47:ad:77:96:67:9a:
         7f:5e:78:ff:d9:47:93:c7:cf:00:20:0c:24:54:95:0e:01:42:
         38:39:0e:15:c3:4a:0d:dc:b0:c0:a0:af:c0:92:30:5e:b4:97:
         a8:ff:70:61:20:09:38:b3:87:80:d4:29:45:39:53:70:52:f9:
         8a:e9:39:70:67:19:c0:26:f2:51:1a:3a:dd:a9:58:df:56:f0:
         b4:a0:38:a4:66:9e:cc:1f:0e:23:2d:6d:7f:6b:3f:04:c9:b7:
         cd:94:35:35:33:27:82:03:c1:58:41:a3:ca:30:2a:5f:2e:0b:
         ca:7d:e8:d2:08:e8:3a:e5:ff:00:1c:b4:74:4f:9f:ce:42:87:
         b5:1b:12:eb:47:bc:10:45:23:86:a3:ae:f7:95:2f:99:47:f0:
         90:33:23:a8:2e:a7:b2:48:e9:bc:c3:9e:ee:77:c3:4e:5c:f5:
         f6:df:70:18:e5:66:ee:15:21:0f:12:b4:ec:59:e6:51:1a:4c:
         23:55:67:7d:18:8f:b3:dd:b4:00:94:9f:52:7c:82:8e:55:06:
         54:86:43:5e:0c:14:6e:85:cc:ea:b3:94:f9:f8:4d:9e:ba:f0:
         87:78:e3:70:b3:23:76:0a:0b:ce:c0:1b:fe:13:20:61:5d:28:
         b3:52:88:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:07:01 2025 by rpki-client