Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/4eqjO3cmWYjnjFmBqORYglGSVyc.roa
File:                     4eqjO3cmWYjnjFmBqORYglGSVyc.roa (raw, json)
Hash identifier:          PW9tgSZpeIk1FXqt1DD1+u985apXR+J9cX+vW9UKxeE=
Subject key identifier:   E1:EA:A3:3B:77:26:59:88:E7:8C:59:81:A8:E4:58:82:51:92:57:27
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0441
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/4eqjO3cmWYjnjFmBqORYglGSVyc.roa
Signing time:             Wed 25 Jun 2025 01:09:59 +0000
ROA not before:           Wed 25 Jun 2025 01:09:59 +0000
ROA not after:            Mon 15 Jun 2026 01:30:02 +0000
asID:                     0
IP address blocks:        61.44.192.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1089 (0x441)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jun 25 01:09:59 2025 GMT
            Not After : Jun 15 01:30:02 2026 GMT
        Subject: CN=E1EAA33B77265988E78C5981A8E4588251925727
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:58:bc:f0:c8:8f:e9:88:bb:18:91:af:fe:1d:
                    73:97:2a:f2:8d:c4:be:6e:f4:a1:a9:ba:98:71:35:
                    8e:89:86:17:a6:5e:b5:d7:e4:22:a6:c7:97:2a:5d:
                    7d:d6:88:d3:46:0b:7d:49:b8:cc:98:af:5e:73:66:
                    64:39:3e:e2:fb:13:02:2d:65:4a:4a:8a:55:84:b1:
                    50:31:97:d6:5d:bd:da:3d:a1:03:3c:3d:e8:78:24:
                    25:0a:74:69:ee:30:bf:f4:76:70:c8:20:11:84:3f:
                    77:dc:89:f0:e6:73:bd:80:a7:82:59:e4:d1:88:cb:
                    3f:6d:0b:f7:e5:a2:04:85:44:06:6d:65:8b:87:42:
                    98:db:b5:3d:53:6f:9e:85:1e:ae:94:1a:c1:e3:ae:
                    79:84:8b:2a:ad:4d:16:42:76:3c:02:be:33:89:93:
                    32:a3:67:2f:86:da:d7:4b:04:ab:53:fa:cb:32:c1:
                    6a:06:5a:ca:c4:bc:c5:23:77:3a:9c:04:c9:35:c9:
                    4d:14:0b:a9:13:11:de:87:9e:2e:59:43:c0:5c:2e:
                    19:d6:3c:af:af:9c:ac:07:54:aa:38:2f:75:97:22:
                    8c:1b:2a:58:fa:f0:a5:18:e0:bd:67:0b:53:ff:1e:
                    73:32:53:44:48:50:d0:44:0b:4f:8f:84:c3:0d:0f:
                    c5:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:EA:A3:3B:77:26:59:88:E7:8C:59:81:A8:E4:58:82:51:92:57:27
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/4eqjO3cmWYjnjFmBqORYglGSVyc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.44.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         03:4e:8d:a9:47:c6:cd:4e:04:a8:91:48:9c:a1:a2:18:e5:07:
         c4:d8:34:76:b2:d5:a9:42:39:6a:f6:34:2a:d6:ca:b4:46:df:
         2d:29:3c:65:6c:04:76:9c:8e:21:b3:2a:94:50:70:ca:a0:6c:
         b2:b3:90:5e:ea:4e:45:02:97:e0:01:86:ca:0b:09:e5:49:3f:
         39:99:78:fa:21:d2:d9:cc:50:85:cf:b9:51:de:a0:da:05:ba:
         8e:64:7f:33:83:2c:91:c5:79:26:2a:1b:b4:eb:4e:e3:ad:a7:
         a0:9c:9e:9f:51:fb:ba:4f:7b:98:56:51:69:0e:0b:98:69:37:
         75:68:2a:11:b0:ce:30:cd:da:e8:4a:c9:6e:a7:00:81:9c:a1:
         60:a9:19:83:dd:c7:ad:b1:3b:43:ed:31:fa:c9:11:85:0a:38:
         19:aa:a8:bb:2e:11:a5:06:19:ae:5f:3a:b0:2b:72:b9:e8:37:
         6d:46:73:e1:c3:60:2f:2d:0d:3a:6e:94:53:58:cb:cc:fd:ad:
         f8:c7:6a:b6:62:c2:9d:41:fd:f1:28:3a:bd:51:ff:6b:3f:39:
         86:7f:3d:13:1e:3c:b7:0f:b4:b8:a0:2c:dc:d0:d3:5d:b0:e2:
         83:c1:04:ae:04:c1:6d:59:50:b1:96:9b:c8:cb:4c:c3:e7:e3:
         9b:20:f5:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 12:29:42 2025 by rpki-client