Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/552/r6kqBsaSTQy8FuYhE9xYUeKA3qM.roa
File:                     r6kqBsaSTQy8FuYhE9xYUeKA3qM.roa (raw, json)
Hash identifier:          SPrX8pYwxVh/0vC83BIkPrvI03PX4GixpvwH+wXxjvA=
Subject key identifier:   AF:A9:2A:06:C6:92:4D:0C:BC:16:E6:21:13:DC:58:51:E2:80:DE:A3
Certificate issuer:       /CN=ACC888708D19A38FB3B18FD1B492974D5D8096F6
Certificate serial:       13
Authority key identifier: AC:C8:88:70:8D:19:A3:8F:B3:B1:8F:D1:B4:92:97:4D:5D:80:96:F6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rMiIcI0Zo4-zsY_RtJKXTV2AlvY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/552/r6kqBsaSTQy8FuYhE9xYUeKA3qM.roa
Signing time:             Tue 22 Apr 2025 02:09:55 +0000
ROA not before:           Tue 22 Apr 2025 02:09:55 +0000
ROA not after:            Wed 15 Apr 2026 01:30:03 +0000
asID:                     58645
IP address blocks:        103.13.168.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/552/rMiIcI0Zo4-zsY_RtJKXTV2AlvY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/552/rMiIcI0Zo4-zsY_RtJKXTV2AlvY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rMiIcI0Zo4-zsY_RtJKXTV2AlvY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 20:45:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19 (0x13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ACC888708D19A38FB3B18FD1B492974D5D8096F6
        Validity
            Not Before: Apr 22 02:09:55 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=AFA92A06C6924D0CBC16E62113DC5851E280DEA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:f3:1c:08:7e:c3:9c:e6:91:ec:17:fb:6d:0c:
                    70:34:12:3e:71:34:e7:ff:51:c2:70:62:92:c5:4b:
                    f9:04:ed:d6:5f:80:6e:24:2c:f0:1d:66:af:5f:7d:
                    6e:9e:f8:7d:ac:2a:5e:35:66:2c:91:7d:8e:df:8d:
                    40:d0:e6:c3:8e:65:e2:de:69:26:da:63:53:81:76:
                    45:81:17:5c:1f:9f:ed:01:8a:8a:78:b7:32:04:41:
                    a3:c5:9b:7b:a7:35:54:bb:e0:6f:33:01:a8:04:2f:
                    4b:d5:38:2d:f0:15:5c:93:13:ca:67:85:56:37:33:
                    84:a4:b3:1b:9f:0a:73:40:d3:b8:91:39:66:d6:75:
                    f6:f3:7d:94:df:9b:33:fe:ae:f9:07:43:5c:92:8d:
                    35:b7:1a:85:d8:f8:46:cd:82:43:5f:3a:32:1e:ef:
                    73:4c:d2:f4:30:c7:61:10:3b:a8:c4:c9:47:c7:0e:
                    44:40:61:56:d3:90:2f:d6:f2:a6:27:00:6f:5c:45:
                    79:19:c6:d2:8d:ce:d5:4b:60:21:22:18:ee:a7:00:
                    02:00:49:7e:7c:34:64:61:76:f4:9e:c7:ca:8d:3c:
                    3f:58:53:de:55:12:85:9c:7f:25:78:c1:0a:96:99:
                    dd:f9:13:04:2a:67:d5:3d:5e:73:8a:cd:e8:87:9e:
                    93:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:A9:2A:06:C6:92:4D:0C:BC:16:E6:21:13:DC:58:51:E2:80:DE:A3
            X509v3 Authority Key Identifier:
                keyid:AC:C8:88:70:8D:19:A3:8F:B3:B1:8F:D1:B4:92:97:4D:5D:80:96:F6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/552/rMiIcI0Zo4-zsY_RtJKXTV2AlvY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rMiIcI0Zo4-zsY_RtJKXTV2AlvY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/552/r6kqBsaSTQy8FuYhE9xYUeKA3qM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.13.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         80:8a:85:83:ae:78:60:a8:92:b2:1f:51:25:f3:c2:fa:f2:26:
         b4:f5:b5:cf:73:50:ed:0b:a7:fa:c8:17:6a:dc:48:66:d3:6a:
         29:22:24:26:12:de:28:35:4b:d7:0d:0c:22:d6:33:b6:c1:85:
         24:7c:ca:39:e6:5c:65:e6:45:91:69:c1:5e:a5:fb:39:3c:30:
         fb:e6:4d:1e:13:2a:02:ef:8c:95:66:6c:6e:11:03:af:9c:f2:
         ca:81:67:39:7b:3d:92:40:43:55:63:52:14:5e:07:e8:d0:7a:
         5c:e7:2e:b1:95:1b:f5:4f:a5:8e:1a:68:43:90:16:b9:f1:f3:
         c5:61:dc:53:a9:13:14:fd:76:c4:21:a4:f9:31:8c:de:b4:fd:
         f0:7b:a0:33:f6:21:89:f4:ac:e6:5b:6b:eb:75:2b:28:d0:c1:
         8d:91:1f:8d:27:24:2f:81:e5:fc:b7:88:03:18:48:4b:d2:97:
         ef:dd:48:62:e1:39:9d:a6:c4:6f:dc:67:95:dc:40:fd:18:60:
         67:61:c0:e4:bb:e0:3f:58:5e:92:09:b4:06:40:2f:15:83:e1:
         e6:98:2d:d8:70:41:72:20:eb:f4:6e:df:a8:a2:cb:5a:4d:56:
         1a:e0:fb:49:d0:7c:7d:43:53:c7:52:d5:bb:a2:54:c6:13:b9:
         d0:39:10:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:52:46 2025 by rpki-client on console.sobornost.net