Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/26xPKu44esUlQaL-icjIWHz2ZTE.roa
File:                     26xPKu44esUlQaL-icjIWHz2ZTE.roa (raw, json)
Hash identifier:          KS7SRaTK2G30w76yg9lJ9yfnPeWFJGlH0z9pIJoehB8=
Subject key identifier:   DB:AC:4F:2A:EE:38:7A:C5:25:41:A2:FE:89:C8:C8:58:7C:F6:65:31
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       038C
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/26xPKu44esUlQaL-icjIWHz2ZTE.roa
Signing time:             Thu 01 May 2025 01:37:28 +0000
ROA not before:           Thu 01 May 2025 01:37:28 +0000
ROA not after:            Wed 15 Apr 2026 01:30:03 +0000
asID:                     10013
IP address blocks:        36.54.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 May 2025 14:37:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 908 (0x38c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: May  1 01:37:28 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=DBAC4F2AEE387AC52541A2FE89C8C8587CF66531
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:90:ce:3b:b8:6c:82:30:3d:21:f3:84:2c:35:
                    b2:49:e4:c6:ed:fe:7c:fc:a3:2d:a0:b5:6d:a5:68:
                    60:68:04:5b:1d:40:d1:b7:c4:8c:35:bb:5a:b4:08:
                    c2:02:59:e1:f2:69:f7:14:04:85:0d:f9:78:6c:96:
                    30:0f:c1:cb:d5:a1:ac:2c:f9:86:76:e3:08:87:b5:
                    d1:98:45:f4:a4:fa:95:e1:bc:ec:19:30:57:fd:61:
                    45:d5:b4:f0:4b:5a:ac:36:2b:b4:d9:f6:fe:7c:5f:
                    ee:ac:5c:8a:dd:a8:d1:84:51:1f:9e:c1:9f:37:c4:
                    e2:13:fd:50:31:b3:64:dd:3c:3d:89:fc:ef:f9:c0:
                    0f:92:40:a5:a3:b9:71:b6:62:f9:06:d9:50:e5:57:
                    24:27:17:d9:65:87:82:59:f1:aa:d1:15:0b:84:01:
                    af:48:e4:9a:c1:35:8c:80:bd:20:57:cf:04:2b:b1:
                    51:cd:58:50:f5:c8:28:e0:fd:b7:1b:00:5d:33:1d:
                    03:5d:a5:ce:39:94:40:f6:d6:f4:38:da:a3:dd:6b:
                    c3:a4:6b:74:de:b0:e7:a4:25:73:44:fe:8f:33:40:
                    9d:32:82:e6:50:4f:ad:c2:44:8e:f2:54:a4:d8:3d:
                    59:cf:62:99:77:53:ee:b0:33:40:04:24:58:30:95:
                    93:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:AC:4F:2A:EE:38:7A:C5:25:41:A2:FE:89:C8:C8:58:7C:F6:65:31
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/26xPKu44esUlQaL-icjIWHz2ZTE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.54.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         47:d3:5b:75:3c:f2:99:4b:3e:3e:7a:3f:95:c1:57:d9:79:1c:
         cf:8c:15:84:64:d9:00:15:6a:fa:8f:e1:71:67:79:6a:a3:53:
         4d:9d:db:8c:e8:f4:7d:29:0c:61:c1:fc:5c:fb:1b:00:ef:bc:
         59:05:32:cf:9f:9a:14:b8:22:7a:a1:c2:db:33:ac:cd:dc:5a:
         e0:f8:b7:62:1d:2f:f7:3d:c1:74:f8:b2:7f:d1:dd:e5:49:91:
         7d:f4:2b:c1:eb:6b:2f:2c:16:1d:af:71:3f:9a:2e:7d:08:a9:
         c6:83:d2:fa:40:13:4b:c9:1d:33:f6:2b:7d:d8:e6:60:68:2e:
         f4:31:f8:91:f2:8b:ef:04:b7:bb:a4:02:cb:e8:e5:68:57:7a:
         4a:c0:f8:ae:63:a5:01:4c:1f:26:68:43:c2:47:5d:05:10:48:
         4b:b9:eb:7d:03:40:ae:ad:60:ae:c8:11:ad:b4:81:c8:6f:7c:
         26:22:d2:b7:f7:82:17:5e:0b:1d:ee:a4:fa:a6:73:56:4e:0e:
         a1:d3:8f:0b:1c:0a:54:72:c3:8f:cf:2d:fd:3a:a1:fe:28:7f:
         21:f2:fd:17:a5:c2:36:a8:cc:a3:5e:54:8b:44:75:cb:6e:6f:
         ab:47:14:70:f3:65:1a:27:11:36:c3:08:35:6c:98:41:fe:07:
         a3:0e:ee:e5
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICA4wwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3
MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNTA1MDEw
MTM3MjhaFw0yNjA0MTUwMTMwMDNaMDMxMTAvBgNVBAMTKERCQUM0RjJBRUUzODdB
QzUyNTQxQTJGRTg5QzhDODU4N0NGNjY1MzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCdkM47uGyCMD0h84QsNbJJ5Mbt/nz8oy2gtW2laGBoBFsdQNG3
xIw1u1q0CMICWeHyafcUBIUN+XhsljAPwcvVoaws+YZ24wiHtdGYRfSk+pXhvOwZ
MFf9YUXVtPBLWqw2K7TZ9v58X+6sXIrdqNGEUR+ewZ83xOIT/VAxs2TdPD2J/O/5
wA+SQKWjuXG2YvkG2VDlVyQnF9llh4JZ8arRFQuEAa9I5JrBNYyAvSBXzwQrsVHN
WFD1yCjg/bcbAF0zHQNdpc45lED21vQ42qPda8Oka3TesOekJXNE/o8zQJ0yguZQ
T63CRI7yVKTYPVnPYpl3U+6wM0AEJFgwlZPHAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQU26xPKu44esUlQaL+icjIWHz2ZTEwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp
qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR
Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzk0LzI2eFBLdTQ0ZXNVbFFhTC1pY2pJV0h6MlpURS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAckNoAwDQYJKoZIhvcNAQELBQADggEBAEfTW3U88plLPj56P5XBV9l5HM+M
FYRk2QAVavqP4XFneWqjU02d24zo9H0pDGHB/Fz7GwDvvFkFMs+fmhS4Inqhwtsz
rM3cWuD4t2IdL/c9wXT4sn/R3eVJkX30K8Hray8sFh2vcT+aLn0IqcaD0vpAE0vJ
HTP2K33Y5mBoLvQx+JHyi+8Et7ukAsvo5WhXekrA+K5jpQFMHyZoQ8JHXQUQSEu5
630DQK6tYK7IEa20gchvfCYi0rf3ghdeCx3upPqmc1ZODqHTjwscClRyw4/PLf06
of4ofyHy/RelwjaozKNeVItEdctub6tHFHDzZRonETbDCDVsmEH+B6MO7uU=
-----END CERTIFICATE-----
Generated at Sun May 18 16:50:05 2025 by rpki-client