Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20220/g77O_eofWUr5OPTroEpIOoDKTTc.roa
File:                     g77O_eofWUr5OPTroEpIOoDKTTc.roa (raw, json)
Hash identifier:          t6B4Uu6aKe3FkZYKVb5fMClhSWuD/IwZzOgh+M5sDVY=
Subject key identifier:   83:BE:CE:FD:EA:1F:59:4A:F9:38:F4:EB:A0:4A:48:3A:80:CA:4D:37
Certificate issuer:       /CN=FF0CF78BA02D6955CE5D696ABCA0A7FE1D2C571A
Certificate serial:       22
Authority key identifier: FF:0C:F7:8B:A0:2D:69:55:CE:5D:69:6A:BC:A0:A7:FE:1D:2C:57:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/_wz3i6AtaVXOXWlqvKCn_h0sVxo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20220/g77O_eofWUr5OPTroEpIOoDKTTc.roa
Signing time:             Sun 01 Jun 2025 01:28:24 +0000
ROA not before:           Sun 01 Jun 2025 01:28:24 +0000
ROA not after:            Sat 23 May 2026 09:51:00 +0000
asID:                     149042
IP address blocks:        103.214.168.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20220/_wz3i6AtaVXOXWlqvKCn_h0sVxo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20220/_wz3i6AtaVXOXWlqvKCn_h0sVxo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/_wz3i6AtaVXOXWlqvKCn_h0sVxo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Jun 2025 17:39:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 34 (0x22)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF0CF78BA02D6955CE5D696ABCA0A7FE1D2C571A
        Validity
            Not Before: Jun  1 01:28:24 2025 GMT
            Not After : May 23 09:51:00 2026 GMT
        Subject: CN=83BECEFDEA1F594AF938F4EBA04A483A80CA4D37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:59:56:23:d5:7e:ea:c7:16:be:97:de:9b:6a:
                    63:89:bf:ee:27:45:2f:15:e4:d2:8e:08:2a:66:cd:
                    95:9a:29:ea:70:65:af:c0:b2:2c:35:4f:c8:32:6d:
                    f8:bf:d9:d4:8b:90:25:5d:3b:a3:0f:d2:b9:bb:fb:
                    90:c5:d8:6d:e7:08:cd:d9:b7:ca:9a:dd:7e:44:49:
                    ec:5a:41:f4:af:94:27:f8:91:6d:ab:d4:47:00:d3:
                    be:1c:97:02:79:2c:ba:c3:91:2e:3e:3a:ed:8a:cc:
                    fc:6d:e6:0b:69:27:3f:a0:af:7e:22:bf:40:f4:9f:
                    08:b5:4d:94:20:b0:d8:46:51:96:b8:c7:76:51:06:
                    00:fd:dd:9d:da:cd:c4:5f:58:5a:09:c2:b1:2d:c1:
                    cc:04:b2:48:0d:a4:b2:05:8a:5b:f2:a1:ad:e2:2e:
                    83:81:62:15:12:0c:05:07:07:22:2f:2a:37:00:ee:
                    de:47:6e:05:39:b1:0c:51:93:d2:c8:88:d2:b7:0b:
                    80:ac:c9:72:08:3c:d1:9c:9f:4d:f6:c5:0f:5c:a8:
                    78:87:63:62:1c:5c:49:90:69:0f:69:a0:bd:b7:7f:
                    0b:97:47:1c:bc:f6:1f:ae:2e:a2:d2:2e:e1:a1:c6:
                    9f:96:15:53:ed:d1:c5:0f:35:af:b5:d6:e0:9a:2c:
                    07:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:BE:CE:FD:EA:1F:59:4A:F9:38:F4:EB:A0:4A:48:3A:80:CA:4D:37
            X509v3 Authority Key Identifier:
                keyid:FF:0C:F7:8B:A0:2D:69:55:CE:5D:69:6A:BC:A0:A7:FE:1D:2C:57:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20220/_wz3i6AtaVXOXWlqvKCn_h0sVxo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/_wz3i6AtaVXOXWlqvKCn_h0sVxo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20220/g77O_eofWUr5OPTroEpIOoDKTTc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.214.168.0/23

    Signature Algorithm: sha256WithRSAEncryption
         94:4c:af:90:df:a1:bf:ac:e7:96:d0:5f:1b:79:5f:5f:f5:74:
         29:8a:64:ea:d6:00:5f:1d:d9:5a:68:61:43:36:62:9e:6e:f5:
         3e:52:5e:92:18:69:66:34:89:89:bd:68:d6:8b:3d:21:a0:20:
         91:00:61:53:9c:77:aa:24:d3:56:cc:8f:e2:80:81:f3:8a:91:
         51:b9:4b:c5:9c:2e:5c:b4:91:13:ab:ac:2a:33:c1:00:06:5a:
         8b:f4:2c:a0:ab:84:78:5d:19:a3:fd:66:a1:85:30:84:83:71:
         36:33:94:56:aa:b2:d4:0c:52:79:14:ce:12:a7:12:7d:4f:82:
         71:a2:6c:0b:e6:56:09:18:58:30:73:d5:08:95:47:7b:de:5c:
         6d:e9:f0:e4:08:20:6b:17:ee:6c:f7:23:92:74:f4:75:95:df:
         b5:86:78:c0:cf:34:87:00:3d:ae:55:85:00:98:ae:d7:a1:ff:
         ae:29:db:48:cd:10:f3:cf:5a:bb:a1:64:43:66:e8:75:86:0f:
         d6:41:81:7b:96:da:f6:ee:b6:ce:6c:64:c7:bc:79:35:39:66:
         cd:26:bb:5c:c5:de:22:58:a2:0f:73:bd:1a:82:d8:4e:62:ba:
         9c:70:57:cd:aa:de:9b:f9:d2:4d:6d:ed:71:24:8f:cd:6a:68:
         59:c3:eb:97
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 5 19:55:19 2025 by rpki-client