Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/7RkmjbTTrKObsjWvfeB2PBn_Ixk.roa
File:                     7RkmjbTTrKObsjWvfeB2PBn_Ixk.roa (raw, json)
Hash identifier:          yLMxVHcvibdSaHuHo2s+BL8yR1FkIo+CRMI0+eE6wXU=
Subject key identifier:   ED:19:26:8D:B4:D3:AC:A3:9B:B2:35:AF:7D:E0:76:3C:19:FF:23:19
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       03E5
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/7RkmjbTTrKObsjWvfeB2PBn_Ixk.roa
Signing time:             Thu 01 May 2025 01:42:52 +0000
ROA not before:           Thu 01 May 2025 01:42:52 +0000
ROA not after:            Wed 15 Apr 2026 01:30:03 +0000
asID:                     10013
IP address blocks:        111.234.52.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 May 2025 21:45:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 997 (0x3e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: May  1 01:42:52 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=ED19268DB4D3ACA39BB235AF7DE0763C19FF2319
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a6:61:ff:64:0a:26:b0:c2:42:b0:f6:49:13:
                    a8:49:ae:27:16:ec:ad:76:98:dc:e6:cf:a8:bb:d4:
                    b2:3b:6c:2e:8b:05:53:7a:f9:be:c2:49:b8:e0:7d:
                    ca:40:bb:1f:a4:b6:03:1d:24:d9:db:8b:b1:4b:f5:
                    c6:26:e1:ac:c1:66:1e:07:f4:07:b7:99:c7:5c:9b:
                    8c:85:5e:a1:43:3e:90:c7:b8:f2:c7:ab:0f:f4:7e:
                    ea:06:90:73:75:a6:c7:bb:9d:50:1d:0c:ac:23:39:
                    7f:0a:8d:74:6d:03:00:55:62:c9:ad:87:29:20:3d:
                    d0:55:fa:a1:d0:c3:3b:b5:73:22:b8:f4:e2:ea:93:
                    63:22:6e:5c:7f:70:87:e0:0f:51:fe:09:f0:d1:96:
                    3c:ec:e1:6e:33:8d:eb:fa:eb:42:51:71:1f:6f:bb:
                    13:ff:07:9a:11:6b:5d:90:e2:68:7d:44:3d:56:ca:
                    8a:85:c5:2e:53:09:6e:ea:b8:88:e1:19:20:9e:48:
                    21:a8:db:fd:50:ad:67:c9:66:c0:e6:68:85:b7:14:
                    48:b6:3c:d3:f5:1a:59:9c:70:3a:b5:67:ce:0e:b8:
                    88:25:ca:5a:3e:53:64:b2:8f:67:df:31:1d:4a:59:
                    d7:11:fe:4d:8b:b0:b2:3d:27:1b:91:91:b0:da:21:
                    25:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:19:26:8D:B4:D3:AC:A3:9B:B2:35:AF:7D:E0:76:3C:19:FF:23:19
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/7RkmjbTTrKObsjWvfeB2PBn_Ixk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.234.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         54:83:e2:26:2a:89:ab:2c:31:6b:99:db:de:59:a9:03:bc:ac:
         06:3b:c2:13:d9:34:ae:c3:df:0c:a3:e7:00:97:3d:7c:a7:4f:
         7f:e8:a2:12:da:c2:83:97:b5:17:aa:55:f8:cf:11:c6:7c:bd:
         f3:4b:dd:54:cd:c5:78:81:10:63:66:85:d9:0b:ea:fe:f1:4a:
         4f:55:e8:64:13:9c:a0:9b:7d:f2:ce:95:1e:cd:e5:37:f2:ba:
         a4:19:a1:af:50:75:67:a4:13:ff:66:c9:1c:80:6b:ec:0b:29:
         ba:b3:03:9e:76:e2:ed:e8:62:34:f5:3f:66:c6:50:15:8d:19:
         23:eb:75:e0:e8:84:c5:a5:81:c0:c4:5e:78:08:9b:64:f8:58:
         25:08:93:6b:b5:a7:89:ba:09:58:15:b5:2a:6c:04:8d:fb:76:
         26:06:e7:5c:a6:21:4e:40:73:fa:97:55:3b:6a:83:17:b3:f4:
         57:f1:3d:07:bd:70:7b:f2:7a:21:92:3e:83:f4:af:e1:be:79:
         3e:d1:89:ca:32:d1:2c:56:91:75:9c:f9:0f:95:a3:9c:09:ca:
         08:96:a5:f6:5b:24:28:35:62:c4:12:6f:25:6d:ad:a7:de:c2:
         e4:3b:dc:99:42:d6:4b:25:51:61:39:24:07:d3:4a:f0:9e:4b:
         a0:fa:3c:ed
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICA+UwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3
MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNTA1MDEw
MTQyNTJaFw0yNjA0MTUwMTMwMDNaMDMxMTAvBgNVBAMTKEVEMTkyNjhEQjREM0FD
QTM5QkIyMzVBRjdERTA3NjNDMTlGRjIzMTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQChpmH/ZAomsMJCsPZJE6hJricW7K12mNzmz6i71LI7bC6LBVN6
+b7CSbjgfcpAux+ktgMdJNnbi7FL9cYm4azBZh4H9Ae3mcdcm4yFXqFDPpDHuPLH
qw/0fuoGkHN1pse7nVAdDKwjOX8KjXRtAwBVYsmthykgPdBV+qHQwzu1cyK49OLq
k2Miblx/cIfgD1H+CfDRljzs4W4zjev660JRcR9vuxP/B5oRa12Q4mh9RD1WyoqF
xS5TCW7quIjhGSCeSCGo2/1QrWfJZsDmaIW3FEi2PNP1GlmccDq1Z84OuIglylo+
U2Syj2ffMR1KWdcR/k2LsLI9JxuRkbDaISWRAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQU7RkmjbTTrKObsjWvfeB2PBn/IxkwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp
qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR
Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzk0LzdSa21qYlRUcktPYnNqV3ZmZUIyUEJuX0l4ay5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAJv6jQwDQYJKoZIhvcNAQELBQADggEBAFSD4iYqiassMWuZ295ZqQO8rAY7
whPZNK7D3wyj5wCXPXynT3/oohLawoOXtReqVfjPEcZ8vfNL3VTNxXiBEGNmhdkL
6v7xSk9V6GQTnKCbffLOlR7N5TfyuqQZoa9QdWekE/9myRyAa+wLKbqzA5524u3o
YjT1P2bGUBWNGSPrdeDohMWlgcDEXngIm2T4WCUIk2u1p4m6CVgVtSpsBI37diYG
51ymIU5Ac/qXVTtqgxez9FfxPQe9cHvyeiGSPoP0r+G+eT7Ricoy0SxWkXWc+Q+V
o5wJygiWpfZbJCg1YsQSbyVtrafewuQ73JlC1kslUWE5JAfTSvCeS6D6PO0=
-----END CERTIFICATE-----
Generated at Sun May 18 02:00:47 2025 by rpki-client