Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/93TbAl873bC4bFFJWlw7C2sRl_Y.roa
File:                     93TbAl873bC4bFFJWlw7C2sRl_Y.roa (raw, json)
Hash identifier:          94Kw4LaNkC23497g41wHQW+xR2KlEnsz/icnh+6KvvA=
Subject key identifier:   F7:74:DB:02:5F:3B:DD:B0:B8:6C:51:49:5A:5C:3B:0B:6B:11:97:F6
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0399
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/93TbAl873bC4bFFJWlw7C2sRl_Y.roa
Signing time:             Thu 01 May 2025 01:37:33 +0000
ROA not before:           Thu 01 May 2025 01:37:33 +0000
ROA not after:            Wed 15 Apr 2026 01:30:03 +0000
asID:                     10013
IP address blocks:        220.215.96.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 May 2025 21:45:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 921 (0x399)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: May  1 01:37:33 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=F774DB025F3BDDB0B86C51495A5C3B0B6B1197F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:26:3d:ed:2c:2a:00:28:68:ed:f7:04:8d:da:
                    1e:90:92:a9:1c:7a:ff:fd:18:a5:25:1f:00:1e:49:
                    6f:df:53:7b:0a:cc:aa:40:f9:63:a2:c1:00:bc:6a:
                    b2:d9:99:37:99:e8:a4:1b:38:4c:b1:4f:40:b0:41:
                    b5:68:73:f4:5a:03:6c:4f:27:7c:7b:b0:24:b9:bc:
                    42:02:f5:82:68:60:74:b3:09:f7:50:ad:78:64:8f:
                    b2:14:b2:be:f4:26:6d:3f:be:a8:e1:02:2f:a7:24:
                    ba:4a:a0:3d:f7:d5:51:16:6d:94:7d:ed:eb:17:0e:
                    df:da:f5:17:35:a9:fa:d8:aa:a2:e0:e5:e7:80:02:
                    cb:9f:7e:6c:3b:a2:9a:10:13:a8:f7:fa:08:89:cc:
                    0d:77:ce:b4:72:5a:ea:c8:c0:39:88:3a:35:74:77:
                    46:8b:ab:a8:3c:84:73:56:5a:70:56:48:ff:f8:a2:
                    4a:5c:14:78:a2:48:9a:6e:c1:b0:d1:fb:b9:1f:68:
                    7e:6b:fa:48:30:3a:e0:30:6f:49:da:53:2b:db:ef:
                    9b:78:bb:b0:4d:34:4b:b5:c0:b3:12:98:c6:e2:ad:
                    57:0f:db:d8:de:8d:d8:7f:16:cb:98:7e:c8:2b:e9:
                    15:a8:92:55:3d:80:d8:d8:af:bf:41:05:2f:ec:58:
                    02:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:74:DB:02:5F:3B:DD:B0:B8:6C:51:49:5A:5C:3B:0B:6B:11:97:F6
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/93TbAl873bC4bFFJWlw7C2sRl_Y.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.215.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         01:99:58:79:fd:70:94:6f:0b:a0:f1:b1:65:28:91:9d:10:8c:
         ca:8b:9f:cd:cd:f5:0b:86:12:4e:0b:ff:bf:f6:a7:ea:f5:87:
         c8:e3:ee:a6:7b:07:6d:dc:8e:e9:1c:18:a7:81:99:ec:92:4a:
         d7:ce:a0:02:29:f8:dd:0b:04:80:83:5b:d8:2e:ea:09:09:8f:
         8c:8f:9e:cc:8a:f5:03:1a:5d:8f:c7:fb:1a:f5:91:78:96:58:
         ab:78:ae:9c:78:3f:a0:d6:7f:b7:05:5b:11:1d:97:02:56:83:
         e6:a8:fe:79:f5:a8:97:e4:f1:09:29:a5:8c:79:67:df:da:59:
         74:f0:35:84:fb:5a:4a:c3:63:30:60:ae:42:ce:ff:da:b6:dc:
         92:61:6d:1f:ab:c9:51:ee:8b:46:01:ba:e0:ff:b8:b5:ac:a4:
         fa:44:9d:e7:71:c6:ec:89:be:b3:23:68:b3:ca:4b:dc:0d:e4:
         b0:c7:7e:78:a8:52:da:ba:7c:31:66:90:a6:bd:0d:6e:c9:0a:
         04:77:b9:e8:24:b7:18:ff:40:bb:eb:99:a8:1c:8f:ce:5f:d6:
         b0:6b:c5:ff:51:27:f4:9f:9e:9c:02:e6:f3:8d:15:42:4a:ed:
         30:dd:29:7b:64:47:10:93:02:78:e5:b4:2d:39:e9:83:67:ef:
         bd:b5:2d:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 04:55:38 2025 by rpki-client