Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/818/oD0quaPKmGzxZJuofG-ek3b9Fpo.roa
File:                     oD0quaPKmGzxZJuofG-ek3b9Fpo.roa (raw, json)
Hash identifier:          WRLFSxy2UW7yxMiy4FFhJwDBDR9echIlcpxGj3lpuOY=
Subject key identifier:   A0:3D:2A:B9:A3:CA:98:6C:F1:64:9B:A8:7C:6F:9E:93:76:FD:16:9A
Certificate issuer:       /CN=1B2E7E62DA8F12F3BB33E0B5E3CE002FDA28CF25
Certificate serial:       15
Authority key identifier: 1B:2E:7E:62:DA:8F:12:F3:BB:33:E0:B5:E3:CE:00:2F:DA:28:CF:25
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Gy5-YtqPEvO7M-C1484AL9oozyU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/818/oD0quaPKmGzxZJuofG-ek3b9Fpo.roa
Signing time:             Sat 05 Apr 2025 01:22:17 +0000
ROA not before:           Sat 05 Apr 2025 01:22:17 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     131931
IP address blocks:        103.164.72.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/818/Gy5-YtqPEvO7M-C1484AL9oozyU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/818/Gy5-YtqPEvO7M-C1484AL9oozyU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Gy5-YtqPEvO7M-C1484AL9oozyU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 20:45:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 21 (0x15)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B2E7E62DA8F12F3BB33E0B5E3CE002FDA28CF25
        Validity
            Not Before: Apr  5 01:22:17 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=A03D2AB9A3CA986CF1649BA87C6F9E9376FD169A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d1:ce:84:43:6c:c3:ab:ec:b2:b0:32:5d:da:
                    84:9d:39:ce:31:dd:00:00:96:c0:f3:68:0d:86:eb:
                    d6:db:d4:5a:30:16:c2:23:40:50:d8:68:7a:c9:b1:
                    45:a9:27:0c:80:bb:7f:5f:09:12:76:c1:85:24:a2:
                    19:29:2a:0b:66:69:80:7f:dc:8e:59:8a:a0:a0:0d:
                    18:08:86:ba:14:3b:5d:4b:44:99:bf:4b:21:f3:a1:
                    1c:d1:5a:c6:8c:9c:e8:50:c5:17:4e:a7:a1:19:28:
                    17:fa:1a:76:a2:b6:6d:a4:67:92:c5:9d:7b:81:6d:
                    ce:86:d0:3c:2c:26:21:87:f3:e8:f6:58:dd:20:e2:
                    4d:35:b2:3d:3e:a0:a2:e3:06:4b:ae:20:2b:a3:20:
                    78:92:a9:7f:42:a3:71:b4:e8:b7:9f:fd:da:2d:5f:
                    21:c2:64:12:6d:d3:3f:d4:9f:c4:10:21:75:ec:6b:
                    76:5e:9a:17:c2:c8:34:ff:5a:13:b8:d6:c8:b2:9e:
                    ad:93:c9:a8:d5:3c:6b:b8:25:49:9d:35:b7:5a:1e:
                    8e:cd:95:6c:72:cc:8a:e4:82:0d:67:93:3b:ee:26:
                    06:34:e0:72:29:d3:ea:82:ee:9c:28:c9:5f:7d:5c:
                    1b:f9:f2:02:16:27:30:68:da:39:74:fd:79:bb:ee:
                    b3:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:3D:2A:B9:A3:CA:98:6C:F1:64:9B:A8:7C:6F:9E:93:76:FD:16:9A
            X509v3 Authority Key Identifier:
                keyid:1B:2E:7E:62:DA:8F:12:F3:BB:33:E0:B5:E3:CE:00:2F:DA:28:CF:25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/818/Gy5-YtqPEvO7M-C1484AL9oozyU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Gy5-YtqPEvO7M-C1484AL9oozyU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/818/oD0quaPKmGzxZJuofG-ek3b9Fpo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.164.72.0/23

    Signature Algorithm: sha256WithRSAEncryption
         25:95:42:1d:a5:9e:36:c9:4b:4f:47:53:ed:9c:6f:99:fb:90:
         c3:0c:2c:38:5e:31:bf:9b:e1:7e:9f:24:e0:ea:24:0f:56:3c:
         f0:35:00:72:cc:cd:a8:82:9b:18:d2:f7:d5:ac:5c:9d:8b:8c:
         2f:22:ec:4e:4e:ed:0a:2b:0c:4e:1e:f7:a4:af:a0:08:bf:85:
         67:86:b1:90:48:cc:dc:1f:ce:df:89:c2:51:f4:1e:95:ba:fb:
         28:63:b0:88:ac:f2:d8:bf:58:83:03:d5:d9:af:22:0e:8b:e8:
         d6:fd:b8:dd:53:16:f6:fb:e5:be:a7:79:2c:f6:fb:84:c5:aa:
         70:5e:ec:e5:f6:7d:7c:97:c8:38:13:85:5c:b5:37:8b:fb:23:
         6b:6f:13:35:48:4d:16:92:9b:5b:69:15:46:43:63:42:0e:69:
         7a:f5:f2:71:04:1d:32:c0:13:32:5a:ad:7a:e7:6a:46:ef:c2:
         4d:08:4e:cc:da:96:42:2e:aa:45:6b:57:c1:53:e5:8f:08:d5:
         8d:90:fd:47:14:33:19:29:6a:cb:d9:49:9b:2b:b9:59:a9:c2:
         e2:ff:33:c4:c1:3b:3d:2d:81:f9:7c:f2:8e:13:46:77:67:a9:
         bc:4c:0a:e7:b3:d2:38:eb:6d:5c:05:42:26:92:1f:89:3f:23:
         cb:4c:56:30
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBFTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxQjJF
N0U2MkRBOEYxMkYzQkIzM0UwQjVFM0NFMDAyRkRBMjhDRjI1MB4XDTI1MDQwNTAx
MjIxN1oXDTI2MDMxNTAxMzAwM1owMzExMC8GA1UEAxMoQTAzRDJBQjlBM0NBOTg2
Q0YxNjQ5QkE4N0M2RjlFOTM3NkZEMTY5QTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKvRzoRDbMOr7LKwMl3ahJ05zjHdAACWwPNoDYbr1tvUWjAWwiNA
UNhoesmxRaknDIC7f18JEnbBhSSiGSkqC2ZpgH/cjlmKoKANGAiGuhQ7XUtEmb9L
IfOhHNFaxoyc6FDFF06noRkoF/oadqK2baRnksWde4FtzobQPCwmIYfz6PZY3SDi
TTWyPT6gouMGS64gK6MgeJKpf0KjcbTot5/92i1fIcJkEm3TP9SfxBAhdexrdl6a
F8LINP9aE7jWyLKerZPJqNU8a7glSZ01t1oejs2VbHLMiuSCDWeTO+4mBjTgcinT
6oLunCjJX31cG/nyAhYnMGjaOXT9ebvus58CAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBSgPSq5o8qYbPFkm6h8b56Tdv0WmjAfBgNVHSMEGDAWgBQbLn5i2o8S87sz4LXj
zgAv2ijPJTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvODE4L0d5NS1ZdHFQRXZPN00tQzE0ODRBTDlvb3p5VS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0d5NS1ZdHFQRXZPN00tQzE0ODRBTDlv
b3p5VS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC84MTgvb0QwcXVhUEttR3p4Wkp1b2ZHLWVrM2I5RnBvLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAWekSDANBgkqhkiG9w0BAQsFAAOCAQEAJZVCHaWeNslLT0dT7ZxvmfuQwwws
OF4xv5vhfp8k4OokD1Y88DUAcszNqIKbGNL31axcnYuMLyLsTk7tCisMTh73pK+g
CL+FZ4axkEjM3B/O34nCUfQelbr7KGOwiKzy2L9YgwPV2a8iDovo1v243VMW9vvl
vqd5LPb7hMWqcF7s5fZ9fJfIOBOFXLU3i/sja28TNUhNFpKbW2kVRkNjQg5pevXy
cQQdMsATMlqteudqRu/CTQhOzNqWQi6qRWtXwVPljwjVjZD9RxQzGSlqy9lJmyu5
WanC4v8zxME7PS2B+XzyjhNGd2epvEwK57PSOOttXAVCJpIfiT8jy0xWMA==
-----END CERTIFICATE-----
Generated at Mon Apr 28 22:52:56 2025 by rpki-client on console.sobornost.net