Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/8Hl3HOLllYjb4TGxJrJljreikwY.roa
File:                     8Hl3HOLllYjb4TGxJrJljreikwY.roa (raw, json)
Hash identifier:          DvRbkmsVDMD05rCn895iHYA58ecKlc43eMS9KyWotPw=
Subject key identifier:   F0:79:77:1C:E2:E5:95:88:DB:E1:31:B1:26:B2:65:8E:B7:A2:93:06
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       03DC
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/8Hl3HOLllYjb4TGxJrJljreikwY.roa
Signing time:             Thu 01 May 2025 01:42:48 +0000
ROA not before:           Thu 01 May 2025 01:42:48 +0000
ROA not after:            Wed 15 Apr 2026 01:30:03 +0000
asID:                     10013
IP address blocks:        110.3.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 May 2025 21:45:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 988 (0x3dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: May  1 01:42:48 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=F079771CE2E59588DBE131B126B2658EB7A29306
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b7:fc:96:05:a5:69:46:6d:07:fd:b5:d9:92:
                    09:67:52:1d:66:d8:c6:7d:4d:9d:a3:74:16:77:59:
                    01:d9:a0:1e:52:f0:4f:5b:0c:34:88:03:02:14:a8:
                    38:65:25:c7:fb:12:43:41:fa:3f:26:cc:0f:3d:72:
                    3e:81:2a:8b:03:09:de:8e:2b:ea:24:fd:94:b4:52:
                    5e:cf:3d:94:73:62:6a:87:6e:91:fd:0e:07:51:62:
                    bb:24:5f:3b:74:45:23:60:6f:f7:42:0f:03:dd:93:
                    2c:33:84:6c:c5:93:8c:67:08:5d:9d:9d:df:18:51:
                    2b:80:08:02:df:da:0b:ad:d8:eb:d2:e0:62:76:a6:
                    2c:51:9d:c9:3a:1a:95:f2:bb:4d:df:09:3d:f6:0e:
                    40:87:62:60:d0:a1:f5:d4:6d:16:19:64:a5:b1:8e:
                    44:35:b5:2e:d8:c6:78:35:a3:d7:95:6f:40:b4:9a:
                    e7:84:47:d2:fd:7b:14:14:7f:74:18:12:18:47:39:
                    17:05:3b:af:67:e4:aa:fb:19:6e:9e:0a:5b:0a:be:
                    c3:20:8a:95:ff:e2:b7:39:de:14:a3:ad:c1:a6:d9:
                    e2:ed:39:9d:b1:7f:9a:79:26:5e:77:e7:06:89:30:
                    1f:13:08:83:df:a6:7d:71:b3:60:69:35:ff:e3:fd:
                    5e:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:79:77:1C:E2:E5:95:88:DB:E1:31:B1:26:B2:65:8E:B7:A2:93:06
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/8Hl3HOLllYjb4TGxJrJljreikwY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.3.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         14:18:01:0e:31:95:c7:87:1f:63:1a:29:57:0b:64:75:50:1c:
         67:96:b8:6d:7e:24:55:66:46:67:a2:2b:0b:8e:0d:63:7d:b4:
         6b:ca:6e:6a:ec:79:0d:6b:39:77:ca:ee:0d:cf:07:66:ab:a7:
         ca:6c:a1:66:03:90:78:db:31:4d:39:83:52:bd:c9:a3:ff:fa:
         0e:3a:fa:8d:fa:83:8e:d2:96:08:62:28:3b:51:32:7e:11:af:
         0e:6c:0b:89:af:02:5c:a5:b8:b5:c5:e3:99:be:4a:6c:92:c5:
         56:88:41:a7:4f:14:9c:ad:b3:ab:d7:ac:b1:77:b6:09:4c:2a:
         3f:2a:e6:99:8b:fe:98:9f:6f:37:27:99:33:d7:7f:57:b5:72:
         ad:66:55:ac:41:52:e4:dc:b5:99:37:98:62:80:13:4c:ff:fa:
         f9:2b:66:59:c4:c3:cd:17:3c:0d:c7:cc:07:9e:fd:06:c9:6b:
         38:a8:f2:39:b1:b9:63:ad:3d:d9:31:b0:30:94:70:c3:6b:f3:
         bf:a8:4e:26:48:bc:b9:fb:76:44:23:cf:94:9c:52:ff:e0:a2:
         44:b1:59:e8:6a:b2:3e:d6:78:45:4f:ad:82:b0:40:58:45:c9:
         9d:6d:7c:95:d3:78:11:85:9f:e7:46:65:5a:33:f4:64:7f:38:
         4a:15:0f:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 04:02:20 2025 by rpki-client