Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/5ckqPshKUbkS6NczahjKv6EkFSM.roa
File:                     5ckqPshKUbkS6NczahjKv6EkFSM.roa (raw, json)
Hash identifier:          Wn3JMHmzuLn5l5iQlwOTaW8cLxXlYDl2NbD7kPvDyhs=
Subject key identifier:   E5:C9:2A:3E:C8:4A:51:B9:12:E8:D7:33:6A:18:CA:BF:A1:24:15:23
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       03F0
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/5ckqPshKUbkS6NczahjKv6EkFSM.roa
Signing time:             Thu 01 May 2025 01:45:17 +0000
ROA not before:           Thu 01 May 2025 01:45:17 +0000
ROA not after:            Wed 15 Apr 2026 01:30:03 +0000
asID:                     10013
IP address blocks:        220.215.0.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 May 2025 21:45:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1008 (0x3f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: May  1 01:45:17 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=E5C92A3EC84A51B912E8D7336A18CABFA1241523
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:c3:c9:00:15:75:36:7c:7f:2e:64:18:16:e2:
                    73:12:e0:7a:04:8f:7d:1b:9f:d4:7a:ed:95:23:c5:
                    5c:b2:1d:1e:6d:bd:99:fc:d2:cd:b6:bf:b4:03:ab:
                    67:40:be:67:8a:6a:6a:5d:27:bc:e6:3e:22:1c:f2:
                    0c:c8:9c:4e:eb:22:d1:b4:8d:b4:7f:cb:ef:56:07:
                    e6:34:d0:0f:e5:8d:83:14:3d:97:57:b8:51:c4:af:
                    01:87:67:ef:62:30:46:12:e6:21:b9:80:6d:16:2c:
                    e8:ea:27:55:3b:23:07:76:18:f7:d6:e5:33:11:66:
                    32:45:f6:8e:84:da:b7:8f:41:ed:42:bb:eb:ca:bb:
                    32:ea:4d:69:53:23:81:d8:df:eb:83:a7:6f:f3:34:
                    31:49:06:6e:de:6e:86:1c:29:de:15:4b:3f:1e:ea:
                    1c:73:b2:db:f7:99:d2:b1:25:5c:62:25:2c:51:43:
                    75:6a:05:ab:74:f7:6c:78:75:08:ec:a6:09:25:cc:
                    f4:3e:71:ef:bd:18:dd:90:65:7e:6f:a6:1a:6c:68:
                    e2:da:31:c2:e3:04:39:6d:5d:b5:46:ff:96:4b:ba:
                    a7:01:a3:00:ac:17:f3:82:5e:8e:9f:38:bf:be:3e:
                    4c:1b:34:ef:82:ff:95:26:e3:35:7a:39:1b:39:db:
                    10:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:C9:2A:3E:C8:4A:51:B9:12:E8:D7:33:6A:18:CA:BF:A1:24:15:23
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/5ckqPshKUbkS6NczahjKv6EkFSM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.215.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         1c:9a:9c:c4:1b:4d:11:e9:91:0e:53:34:40:bc:03:53:41:2a:
         09:af:d1:ca:fd:12:ea:ea:7b:5c:f3:3d:23:6b:40:ac:69:d9:
         3c:8b:13:25:d5:16:a0:8f:0d:84:5e:52:d0:6e:02:5c:60:ab:
         d6:07:64:d4:e7:90:5d:32:bc:f3:57:15:bc:02:05:6a:54:30:
         aa:57:9a:14:c0:ed:30:1e:86:d6:4b:13:31:9f:56:44:65:4d:
         51:9a:8d:80:5b:48:2d:f2:12:b8:b4:40:18:53:f5:47:19:d0:
         a7:b7:4a:8f:36:56:b1:4e:e8:2b:27:1e:d4:04:e1:71:03:05:
         8b:07:4e:30:82:ba:48:3a:aa:c6:11:04:81:2d:d4:1d:39:b1:
         6f:b5:6e:9b:ba:84:e1:1e:80:65:40:61:1a:9f:b3:90:4f:aa:
         16:cd:cf:42:64:1a:47:f5:d1:cf:7b:dc:db:59:6a:42:1a:5e:
         dc:e0:10:2e:9e:32:11:a4:98:f9:d0:0f:99:24:42:a0:3c:13:
         d4:e0:40:20:fa:d1:33:ca:ec:63:b3:d5:5d:ca:65:49:d8:37:
         94:5e:cd:74:eb:e1:ea:cc:31:0c:a9:5b:17:35:45:69:25:61:
         85:55:5c:44:c1:27:6e:28:5d:26:be:fc:35:e3:11:c9:a7:98:
         4d:a7:17:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 04:34:38 2025 by rpki-client