Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/598/tzr7Z0moISbnQM6E6hzUkJ7ajAQ.roa
File:                     tzr7Z0moISbnQM6E6hzUkJ7ajAQ.roa (raw, json)
Hash identifier:          suZiyBApECuBaHgm20mIIqkLZ50rL3Gk05T1CQMsPLY=
Subject key identifier:   B7:3A:FB:67:49:A8:21:26:E7:40:CE:84:EA:1C:D4:90:9E:DA:8C:04
Certificate issuer:       /CN=C2FDF90A996F0A30D31E909C72BE056DD44A06E4
Certificate serial:       70
Authority key identifier: C2:FD:F9:0A:99:6F:0A:30:D3:1E:90:9C:72:BE:05:6D:D4:4A:06:E4
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wv35CplvCjDTHpCccr4FbdRKBuQ.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/598/tzr7Z0moISbnQM6E6hzUkJ7ajAQ.roa
Signing time:             Fri 31 Jan 2025 01:30:59 +0000
ROA not before:           Fri 31 Jan 2025 01:30:59 +0000
ROA not after:            Thu 15 Jan 2026 01:30:03 +0000
asID:                     59105
IP address blocks:        103.48.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/598/wv35CplvCjDTHpCccr4FbdRKBuQ.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/598/wv35CplvCjDTHpCccr4FbdRKBuQ.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wv35CplvCjDTHpCccr4FbdRKBuQ.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 112 (0x70)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2FDF90A996F0A30D31E909C72BE056DD44A06E4
        Validity
            Not Before: Jan 31 01:30:59 2025 GMT
            Not After : Jan 15 01:30:03 2026 GMT
        Subject: CN=B73AFB6749A82126E740CE84EA1CD4909EDA8C04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:6d:ac:38:b7:91:e5:ae:28:9c:85:05:a6:fd:
                    68:67:7a:32:f9:9b:ca:b3:7d:36:0e:16:05:7a:78:
                    7e:7d:47:f7:5e:d6:28:e7:2b:1f:64:cc:d6:9e:ba:
                    87:d7:92:b1:c8:e4:b2:ca:4c:62:27:fd:d3:7f:01:
                    8e:e9:10:f4:66:09:00:cb:ab:e1:da:ff:85:23:23:
                    9c:bb:13:fb:04:17:ae:6a:e7:31:ae:e1:a0:0c:33:
                    e4:e1:60:a9:40:1f:71:60:7c:fe:5f:bb:8d:0d:75:
                    91:d5:27:81:d5:72:0a:78:fd:cc:22:c8:18:f6:b8:
                    c3:34:a5:2c:be:3f:e8:f1:9c:6e:8b:19:74:0b:38:
                    dd:ef:44:7f:88:7b:58:f6:7b:56:0c:11:e7:55:10:
                    c0:0e:50:98:e5:bc:0e:ed:91:e1:bc:8f:8f:52:d9:
                    04:7b:dd:73:98:e5:38:18:ae:42:25:36:3e:a4:5d:
                    48:24:fa:97:94:a6:12:09:bf:25:a0:0c:c3:98:07:
                    43:8e:7d:08:23:57:43:61:92:92:24:6a:d5:b9:7f:
                    b5:1e:81:17:e2:5c:2e:7f:3a:b9:74:46:35:2a:78:
                    98:6f:b0:f3:a0:13:54:cc:c5:fb:52:35:91:50:76:
                    c3:fa:be:1f:e6:76:5f:4e:35:a7:08:fe:ed:42:79:
                    39:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:3A:FB:67:49:A8:21:26:E7:40:CE:84:EA:1C:D4:90:9E:DA:8C:04
            X509v3 Authority Key Identifier:
                keyid:C2:FD:F9:0A:99:6F:0A:30:D3:1E:90:9C:72:BE:05:6D:D4:4A:06:E4

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/598/wv35CplvCjDTHpCccr4FbdRKBuQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wv35CplvCjDTHpCccr4FbdRKBuQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/598/tzr7Z0moISbnQM6E6hzUkJ7ajAQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.48.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:43:1b:f0:00:ee:5e:c6:90:ab:49:90:1d:e8:ff:a1:df:71:
         0c:a8:62:14:c2:72:10:5e:4c:49:f7:87:54:71:a3:1b:33:9f:
         9d:c6:aa:09:39:7b:7b:c9:19:2a:18:3d:f5:49:0f:f7:31:5c:
         59:b3:69:16:f4:8b:b8:47:68:d6:2c:61:0f:77:19:4d:15:66:
         ca:09:a7:2d:94:cd:46:37:f9:73:d4:f1:5c:7f:ca:89:25:07:
         fc:e5:84:0c:b2:6d:82:d8:c5:2f:eb:37:d9:53:56:8b:de:ae:
         20:a8:09:2d:01:69:3c:ff:c4:6a:e4:6f:94:06:0a:73:49:4e:
         a8:c1:98:4a:81:94:12:e5:38:26:f6:98:a2:15:d8:b4:04:18:
         55:92:51:e2:2c:b4:c9:52:22:61:a4:a7:98:30:c8:9c:1d:61:
         5f:9e:d0:af:1f:7b:e1:bd:46:26:73:95:9b:a8:c3:99:e9:6b:
         cc:7c:03:d0:f3:45:c1:85:25:9f:26:2e:53:53:db:e0:ae:da:
         cc:22:fe:87:85:ba:94:71:cb:0e:24:58:69:8a:af:53:f7:93:
         5c:85:cd:d0:5e:f6:06:a4:16:5d:34:60:b4:0c:cf:ce:57:00:
         20:71:9b:ba:bf:3c:a7:32:1a:ff:42:21:1d:b9:7f:4f:3b:40:
         04:9c:54:01
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBcDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDMkZE
RjkwQTk5NkYwQTMwRDMxRTkwOUM3MkJFMDU2REQ0NEEwNkU0MB4XDTI1MDEzMTAx
MzA1OVoXDTI2MDExNTAxMzAwM1owMzExMC8GA1UEAxMoQjczQUZCNjc0OUE4MjEy
NkU3NDBDRTg0RUExQ0Q0OTA5RURBOEMwNDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANdtrDi3keWuKJyFBab9aGd6MvmbyrN9Ng4WBXp4fn1H917WKOcr
H2TM1p66h9eSscjksspMYif9038BjukQ9GYJAMur4dr/hSMjnLsT+wQXrmrnMa7h
oAwz5OFgqUAfcWB8/l+7jQ11kdUngdVyCnj9zCLIGPa4wzSlLL4/6PGcbosZdAs4
3e9Ef4h7WPZ7VgwR51UQwA5QmOW8Du2R4byPj1LZBHvdc5jlOBiuQiU2PqRdSCT6
l5SmEgm/JaAMw5gHQ459CCNXQ2GSkiRq1bl/tR6BF+JcLn86uXRGNSp4mG+w86AT
VMzF+1I1kVB2w/q+H+Z2X041pwj+7UJ5OV8CAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBS3OvtnSaghJudAzoTqHNSQntqMBDAfBgNVHSMEGDAWgBTC/fkKmW8KMNMekJxy
vgVt1EoG5DAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNTk4L3d2MzVDcGx2Q2pEVEhwQ2NjcjRGYmRSS0J1US5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3d2MzVDcGx2Q2pEVEhwQ2NjcjRGYmRS
S0J1US5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC81OTgvdHpyN1owbW9JU2JuUU02RTZoelVrSjdhakFRLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAGcwHzANBgkqhkiG9w0BAQsFAAOCAQEAfEMb8ADuXsaQq0mQHej/od9xDKhi
FMJyEF5MSfeHVHGjGzOfncaqCTl7e8kZKhg99UkP9zFcWbNpFvSLuEdo1ixhD3cZ
TRVmygmnLZTNRjf5c9TxXH/KiSUH/OWEDLJtgtjFL+s32VNWi96uIKgJLQFpPP/E
auRvlAYKc0lOqMGYSoGUEuU4JvaYohXYtAQYVZJR4iy0yVIiYaSnmDDInB1hX57Q
rx974b1GJnOVm6jDmelrzHwD0PNFwYUlnyYuU1Pb4K7azCL+h4W6lHHLDiRYaYqv
U/eTXIXN0F72BqQWXTRgtAzPzlcAIHGbur88pzIa/0IhHbl/TztABJxUAQ==
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:37:45 2025 by rpki-client