Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/6mRoEVnTiNjgYx4Xik43c7Gmd_I.roa
File:                     6mRoEVnTiNjgYx4Xik43c7Gmd_I.roa (raw, json)
Hash identifier:          cb1HR0kjQgmtDX+mj0ddNenkS4wjtjronjIIfI2fhuM=
Subject key identifier:   EA:64:68:11:59:D3:88:D8:E0:63:1E:17:8A:4E:37:73:B1:A6:77:F2
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0426
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/6mRoEVnTiNjgYx4Xik43c7Gmd_I.roa
Signing time:             Thu 01 May 2025 01:48:49 +0000
ROA not before:           Thu 01 May 2025 01:48:49 +0000
ROA not after:            Wed 15 Apr 2026 01:30:03 +0000
asID:                     10013
IP address blocks:        210.159.152.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 May 2025 18:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1062 (0x426)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: May  1 01:48:49 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=EA64681159D388D8E0631E178A4E3773B1A677F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:18:af:a0:4d:8e:ef:d2:34:eb:ab:97:36:3e:
                    94:77:64:f5:21:9a:59:2b:d7:31:a6:ab:89:b5:a5:
                    67:ec:f4:c0:66:26:d4:09:ff:73:61:d3:70:a9:1c:
                    d4:06:a8:70:08:dd:6b:e3:80:6b:4c:43:07:19:a5:
                    59:5d:e8:e7:01:4c:93:cc:5a:da:c3:cd:8a:35:72:
                    8a:03:65:b8:de:8a:a6:f2:4d:41:6e:d4:ce:01:64:
                    08:54:9d:d7:49:a5:ee:56:68:04:50:0d:3a:4d:b5:
                    e0:19:ae:07:29:8e:68:da:07:c6:87:24:67:e4:3b:
                    ad:e7:73:1f:9e:36:78:cf:ef:f8:59:29:dc:8d:3c:
                    98:30:87:e7:d1:bc:a1:15:74:36:9b:93:15:21:98:
                    b9:27:2e:4b:2f:1c:4f:bc:88:4b:42:f4:fe:31:b9:
                    6e:81:dd:fd:16:09:c7:e1:af:4a:9a:ad:14:68:8c:
                    65:52:64:ac:14:b5:b8:18:72:bb:ab:46:de:f7:8f:
                    23:48:45:d2:f8:28:49:13:3a:82:6e:8a:bc:22:3c:
                    ef:c7:1d:c5:81:60:76:d3:10:46:e0:03:8d:ad:b5:
                    bb:6c:63:b0:c0:af:6a:b5:ef:76:17:b1:cf:e1:b0:
                    38:58:98:21:83:d8:32:64:6f:db:93:c3:ee:d1:19:
                    80:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:64:68:11:59:D3:88:D8:E0:63:1E:17:8A:4E:37:73:B1:A6:77:F2
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/6mRoEVnTiNjgYx4Xik43c7Gmd_I.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.159.152.0/21

    Signature Algorithm: sha256WithRSAEncryption
         2e:2a:31:b8:fa:17:9e:9c:94:bc:ad:02:1b:54:f7:e2:2d:56:
         0c:5b:4d:0e:60:02:28:62:a2:5a:80:21:14:1d:e1:e2:c9:4b:
         53:63:85:49:fd:17:f5:68:a2:34:82:8e:03:84:ac:87:34:c0:
         e4:7f:0c:e0:ed:74:20:f4:45:7a:4d:0c:53:82:7e:eb:6d:1e:
         0d:29:07:03:dd:9a:bb:ac:01:09:8c:0d:b1:c0:be:d2:a0:39:
         88:43:41:b5:6c:38:1e:7a:9f:65:4b:75:b5:bd:a1:47:8c:df:
         17:cc:2f:71:9c:d9:2d:97:32:e4:1c:c1:c0:d0:49:55:d1:0b:
         73:b4:f6:0d:50:2d:f4:75:0d:0b:23:b3:16:85:53:f8:8a:c9:
         0f:61:b4:15:18:8b:96:88:0b:0b:25:4c:c2:f5:58:20:23:92:
         a9:20:79:7a:3b:25:b0:5a:8e:4e:b5:5e:32:5c:e7:c8:79:24:
         d2:26:40:59:ca:ad:da:0e:af:5b:22:59:b2:f3:6c:a2:d2:e2:
         bf:87:39:49:30:2d:8c:9c:2a:43:a8:32:b7:3c:14:28:1e:8f:
         51:45:de:22:c0:00:d4:3e:91:28:99:b7:4d:e7:dc:ce:8a:97:
         b5:7f:ca:5f:fd:fa:8d:90:ce:2d:81:98:73:f8:85:d3:99:5c:
         19:b4:74:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 19:53:32 2025 by rpki-client