Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/7W1oRI0pDPccaTtrMhDy0GhmwGY.roa
File:                     7W1oRI0pDPccaTtrMhDy0GhmwGY.roa (raw, json)
Hash identifier:          JL05OFbe6qyUgY5wljSRcFfdrb6UMi+8HQkKZPmGQyM=
Subject key identifier:   ED:6D:68:44:8D:29:0C:F7:1C:69:3B:6B:32:10:F2:D0:68:66:C0:66
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0365
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/7W1oRI0pDPccaTtrMhDy0GhmwGY.roa
Signing time:             Thu 01 May 2025 01:33:23 +0000
ROA not before:           Thu 01 May 2025 01:33:23 +0000
ROA not after:            Wed 15 Apr 2026 01:30:03 +0000
asID:                     10013
IP address blocks:        27.120.184.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 May 2025 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 869 (0x365)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: May  1 01:33:23 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=ED6D68448D290CF71C693B6B3210F2D06866C066
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:fb:95:bd:83:10:97:d4:41:38:3a:a0:35:4f:
                    7d:32:f1:f6:3d:20:81:48:09:99:7e:55:c4:c1:93:
                    87:a3:4f:a3:c7:01:17:d1:1e:aa:cc:f2:b9:4d:ef:
                    4b:12:2a:4a:a0:18:11:2f:68:47:20:f1:cc:ee:9d:
                    f0:45:aa:a3:d8:8b:43:51:15:7f:50:bc:e4:8d:80:
                    b2:fc:f8:3b:6d:37:8d:27:45:cb:e1:11:62:1b:68:
                    2a:12:00:37:00:a3:1d:13:69:84:ce:10:03:bd:8e:
                    1a:9a:d1:ca:69:b8:8b:49:ea:5d:e6:5d:01:68:2f:
                    e3:89:09:b5:63:9e:5f:b2:12:d2:00:c3:46:e0:2e:
                    1d:94:f6:ec:c4:86:fc:cd:8a:15:79:36:05:a4:79:
                    fb:8d:6d:63:0b:a7:b8:d6:7d:9c:6a:d0:5e:e6:d7:
                    90:5c:1b:c7:8a:d6:1c:7b:05:19:ec:4d:1b:36:4d:
                    f9:5b:12:9e:b7:6d:e5:df:a5:39:fe:9e:ca:6c:b2:
                    19:a2:12:47:12:dd:fb:90:54:6d:e6:64:d4:70:a2:
                    3b:74:d4:23:fb:81:d6:65:f5:98:80:f4:a7:1b:fb:
                    36:ba:ad:88:2c:7e:08:b7:a4:2b:20:66:ca:a1:7b:
                    9c:42:70:1b:8a:9e:97:ef:c4:01:75:6c:c2:29:05:
                    f2:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:6D:68:44:8D:29:0C:F7:1C:69:3B:6B:32:10:F2:D0:68:66:C0:66
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/7W1oRI0pDPccaTtrMhDy0GhmwGY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.120.184.0/21

    Signature Algorithm: sha256WithRSAEncryption
         9d:83:eb:d3:33:b7:14:e9:ae:1b:7e:f2:a7:82:e4:83:22:a3:
         64:1c:7f:af:e4:ba:d2:45:c6:7c:7f:02:a3:b1:45:42:83:13:
         f3:e2:28:0c:ba:7e:74:34:62:2a:2e:dc:e3:eb:c0:63:2c:e9:
         84:6f:a4:31:4d:67:cf:4b:e6:d7:f6:9a:23:1e:60:74:e6:76:
         87:11:ff:50:c0:5f:c2:05:78:34:ea:5c:33:ae:41:e2:b8:fe:
         e8:fd:0c:60:00:ca:de:54:d7:8d:1a:33:65:4a:3c:b5:9c:60:
         41:db:32:41:51:6d:37:c7:d0:43:64:bb:7b:48:39:c8:86:cd:
         72:c3:12:60:53:48:bf:bf:21:77:8b:d6:23:7d:2a:51:b9:7b:
         e4:d7:7e:54:4a:21:0e:b5:8a:bd:76:37:9c:14:0f:2f:59:52:
         72:d2:0c:8f:68:2a:7a:60:21:21:d9:0e:71:f5:0e:69:43:a1:
         53:34:33:d8:5f:b6:56:8c:3d:9a:31:c2:fc:d8:59:17:91:24:
         0f:7f:3e:80:70:38:60:ea:ed:49:45:d6:45:04:31:ba:a7:9d:
         a0:a8:0e:76:02:a5:a5:5c:f5:7b:15:f7:bd:a9:3b:78:ca:10:
         1c:86:d7:d6:3b:1a:c6:e5:9e:e9:44:b4:3a:b6:1f:de:96:27:
         3b:bb:ac:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 07:05:30 2025 by rpki-client