Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/2n_tmEkxh0mr3sCKnix7J5h3ilU.roa
File:                     2n_tmEkxh0mr3sCKnix7J5h3ilU.roa (raw, json)
Hash identifier:          +E6HLM7cqIUJV0bNKM1qGKnHCFWRAfanysFDo7DIae8=
Subject key identifier:   DA:7F:ED:98:49:31:87:49:AB:DE:C0:8A:9E:2C:7B:27:98:77:8A:55
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0413
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/2n_tmEkxh0mr3sCKnix7J5h3ilU.roa
Signing time:             Thu 01 May 2025 01:48:41 +0000
ROA not before:           Thu 01 May 2025 01:48:41 +0000
ROA not after:            Wed 15 Apr 2026 01:30:03 +0000
asID:                     10013
IP address blocks:        175.103.144.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 May 2025 21:45:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1043 (0x413)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: May  1 01:48:41 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=DA7FED9849318749ABDEC08A9E2C7B2798778A55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:46:b1:af:f2:79:3e:da:e0:ce:5e:0a:d4:f7:
                    c4:7b:4e:6e:da:d7:21:2d:e1:af:d3:bd:9c:a2:77:
                    69:4d:6a:26:9a:51:10:20:50:94:fc:60:52:8d:b0:
                    0c:dc:ca:88:ed:8f:19:75:17:e3:68:9a:fe:9d:72:
                    b0:c4:44:0c:2c:4d:63:6c:a4:fa:2c:3c:f4:3e:56:
                    ef:94:1a:0f:df:f2:d7:98:22:72:82:13:7f:8c:b0:
                    30:09:c7:47:d9:9e:8f:d4:29:0b:d6:94:cc:66:06:
                    e2:62:d6:2b:7f:87:bd:17:e0:e5:be:d8:cf:6a:5c:
                    fe:ad:b2:ce:31:54:c8:a1:81:a5:94:8a:bf:00:af:
                    2d:29:21:dd:54:a4:cb:df:39:35:8e:72:e0:19:c7:
                    c6:40:02:e8:41:c5:81:ae:90:4b:55:25:ba:06:40:
                    b1:90:6d:10:e1:b3:fb:9f:4e:7d:0f:85:95:ec:bc:
                    15:12:83:2d:bc:54:bd:2c:ee:35:8a:b2:39:77:bb:
                    9e:a0:3f:de:79:a6:65:80:8c:e0:91:8f:fd:b3:78:
                    c9:90:fe:90:e9:7a:c6:e7:82:9c:82:2d:35:7c:bd:
                    d8:d4:fc:14:43:07:21:42:34:41:7d:ce:f8:bf:f2:
                    ec:b5:6e:37:99:93:9f:67:54:f9:9a:cc:0f:30:d1:
                    11:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:7F:ED:98:49:31:87:49:AB:DE:C0:8A:9E:2C:7B:27:98:77:8A:55
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/2n_tmEkxh0mr3sCKnix7J5h3ilU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.103.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         66:a5:ee:f8:2d:eb:4c:92:ee:6b:54:cc:b3:0c:ba:c1:49:17:
         37:14:9c:ff:58:c4:e9:36:ef:fb:f3:af:4c:58:cf:2d:a0:10:
         c5:37:11:50:1f:7e:f4:a3:43:21:9c:b1:39:c7:7f:b3:a4:4f:
         df:98:b8:a2:6e:13:c3:53:d6:d1:ac:1e:dc:07:d9:ac:d4:8b:
         1b:fe:8c:6b:7a:1b:c4:71:b7:c2:d6:42:91:08:0e:b6:b6:b9:
         7b:86:7d:d1:e0:02:29:9d:02:a7:ea:29:14:d1:b6:de:83:aa:
         bf:4b:b4:72:b2:23:cb:e4:72:92:d6:37:c0:5c:bc:e6:24:54:
         02:87:33:8a:04:0d:2f:23:8a:30:9f:88:0b:03:3f:38:5a:af:
         e6:a4:f1:57:fc:ae:f6:96:da:0f:30:e3:46:de:65:72:c8:70:
         7c:ed:52:54:d6:03:eb:ec:ed:69:43:a3:7f:4b:4c:b5:56:74:
         ed:c5:c9:30:f5:ea:4d:7d:e7:7c:81:fa:c7:ab:40:37:5d:4c:
         d6:7d:5d:92:c3:8c:1c:5c:59:cb:21:26:07:b0:cb:52:50:92:
         a8:aa:9a:fd:5a:85:fa:46:19:d3:12:fb:32:88:35:9c:a7:ed:
         b6:56:3b:06:11:58:0e:70:a0:bf:67:aa:5f:af:8e:38:bb:26:
         34:55:9a:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 03:16:04 2025 by rpki-client