Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/0EB57PiZ34WP7_wdjv7sfHUvp4A.roa
File:                     0EB57PiZ34WP7_wdjv7sfHUvp4A.roa (raw, json)
Hash identifier:          c5YGDPpTg2JvaZvS0Mcg3QqZaT5r/HVklT6fEs93pe0=
Subject key identifier:   D0:40:79:EC:F8:99:DF:85:8F:EF:FC:1D:8E:FE:EC:7C:75:2F:A7:80
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       03D7
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/0EB57PiZ34WP7_wdjv7sfHUvp4A.roa
Signing time:             Thu 01 May 2025 01:42:45 +0000
ROA not before:           Thu 01 May 2025 01:42:45 +0000
ROA not after:            Wed 15 Apr 2026 01:30:03 +0000
asID:                     10013
IP address blocks:        61.5.248.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 May 2025 18:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 983 (0x3d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: May  1 01:42:45 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=D04079ECF899DF858FEFFC1D8EFEEC7C752FA780
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:57:b1:4c:4e:63:bd:00:91:e2:73:59:5d:92:
                    57:d9:ef:49:90:46:97:d8:bf:62:62:ac:6d:50:21:
                    fd:dd:f5:07:78:45:1e:35:62:2f:a1:af:98:c7:dd:
                    be:7f:13:4f:34:6e:e2:aa:8b:39:84:67:b0:ec:cd:
                    a2:27:91:d9:bb:08:16:09:7e:fc:e6:8b:9a:0e:06:
                    af:8f:9e:ca:a6:9e:3a:4c:97:08:d3:27:0d:bc:22:
                    bf:ca:56:ec:f8:f0:63:a7:50:f7:45:c5:a1:a0:55:
                    32:74:3e:89:fa:3f:15:03:f0:74:fb:2f:08:f6:83:
                    af:60:19:42:f2:a3:56:ae:85:fb:32:15:47:ba:c1:
                    95:27:2b:13:02:9d:59:b5:b3:b5:88:8e:d9:1b:6e:
                    5f:b2:e6:d5:e4:c1:70:e8:33:21:3c:30:9b:4c:65:
                    97:2f:f3:9b:18:8d:a1:af:2b:41:03:69:e6:ef:b1:
                    83:e3:1b:cb:ff:76:a1:49:e7:60:bf:d7:2c:65:65:
                    d6:5c:2e:ba:5b:ea:96:ab:fd:0f:a9:16:23:7a:89:
                    8c:a9:ba:2a:68:aa:12:2e:ff:7f:db:20:86:e0:9b:
                    75:ee:cd:bb:7a:94:32:87:a6:99:ca:66:1b:86:8d:
                    3d:da:b8:5f:17:87:fc:41:89:fe:53:68:eb:20:ff:
                    e0:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:40:79:EC:F8:99:DF:85:8F:EF:FC:1D:8E:FE:EC:7C:75:2F:A7:80
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/0EB57PiZ34WP7_wdjv7sfHUvp4A.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.5.248.0/21

    Signature Algorithm: sha256WithRSAEncryption
         49:64:02:96:4a:b5:e1:41:1f:72:e7:0a:84:68:6d:b2:36:64:
         9a:3d:58:61:61:97:1f:0f:bc:e2:c5:27:1b:e9:d3:29:48:e6:
         4c:da:28:95:58:85:d2:78:43:70:66:7d:47:b4:e1:23:96:28:
         76:65:f5:b1:64:0d:a7:ca:0f:3b:66:1b:d3:3d:ab:ab:1b:89:
         18:16:80:29:8b:b1:b0:53:ba:ab:ac:dc:4c:ee:1a:a9:c0:76:
         26:96:dc:e1:59:97:bb:7b:d7:35:eb:6d:0c:3f:42:5f:c5:18:
         48:9b:35:6a:1a:31:35:be:b2:43:f9:e4:bc:85:30:77:81:93:
         db:5d:f2:cb:f1:c6:96:68:46:68:fd:a5:9a:88:6b:46:76:ff:
         53:63:c8:a1:09:02:21:51:fb:d2:1f:69:02:37:8e:ca:4c:e2:
         6e:b2:f8:e1:bb:f3:b6:0a:0a:90:c6:41:82:ae:3c:19:fe:b7:
         d7:47:5b:dc:33:ab:25:1f:3e:3b:ca:5c:f9:27:1f:7c:f2:f7:
         9e:3c:62:76:bc:ae:22:18:6a:2f:32:6c:70:8c:93:aa:5a:77:
         c1:71:30:2a:40:f8:bb:16:dd:9b:b4:ee:b1:50:b9:ce:b9:3a:
         09:9c:d3:74:64:c6:ca:f6:87:e1:1c:73:e6:c3:04:2d:77:9e:
         8d:0c:cb:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 21:23:28 2025 by rpki-client