Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/9ui5vSvVFZZKHHKdg7slhILVhjc.roa
File:                     9ui5vSvVFZZKHHKdg7slhILVhjc.roa (raw, json)
Hash identifier:          Vp85gi/INSwGYb9BRWEjHDSp/tc71DdFA1rGnNj3N1Y=
Subject key identifier:   F6:E8:B9:BD:2B:D5:15:96:4A:1C:72:9D:83:BB:25:84:82:D5:86:37
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       03B4
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/9ui5vSvVFZZKHHKdg7slhILVhjc.roa
Signing time:             Thu 01 May 2025 01:40:30 +0000
ROA not before:           Thu 01 May 2025 01:40:30 +0000
ROA not after:            Wed 15 Apr 2026 01:30:03 +0000
asID:                     10013
IP address blocks:        59.156.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 May 2025 14:37:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 948 (0x3b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: May  1 01:40:30 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=F6E8B9BD2BD515964A1C729D83BB258482D58637
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a2:d6:44:60:f7:cf:a7:d2:12:47:8a:39:5d:
                    a1:27:d7:45:de:3f:4f:05:ad:df:c5:75:be:7c:f0:
                    0d:95:84:4d:9a:aa:40:b4:3b:3c:76:2f:7b:b7:b3:
                    b9:bd:20:50:68:1b:fd:d1:31:20:b7:9f:5e:dc:9f:
                    59:70:f8:d9:d6:9b:c8:4b:92:e3:88:a4:78:83:f6:
                    73:3a:b1:46:5f:53:9a:00:d5:1b:50:57:d1:c8:cc:
                    5a:77:d0:2d:7c:7d:dc:b3:20:b7:84:79:4b:85:48:
                    99:a9:ad:52:82:05:97:14:31:a1:99:69:ec:83:bf:
                    76:09:a5:be:98:7a:93:ef:20:0a:52:9c:49:f3:48:
                    ff:7c:db:85:2b:f7:f1:77:e9:1a:14:0f:28:ae:4e:
                    9c:37:8a:7c:4e:fc:0d:fd:7a:eb:5e:92:d8:2d:51:
                    a9:0e:31:f2:36:1f:a4:8e:d5:ed:da:fd:e1:f3:fb:
                    ff:b8:b2:4c:d6:78:27:85:95:3c:59:6e:73:36:5c:
                    02:c8:b2:80:18:08:5a:51:ce:1e:0c:e4:d9:c3:44:
                    2b:c3:cf:40:f3:1d:7e:9c:43:67:c2:a4:c5:54:0c:
                    1d:0c:b1:93:5b:35:bf:a4:4a:83:38:c1:24:f3:93:
                    62:b3:87:e1:5a:e0:d6:08:0b:2d:71:02:1f:7c:b7:
                    22:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:E8:B9:BD:2B:D5:15:96:4A:1C:72:9D:83:BB:25:84:82:D5:86:37
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/9ui5vSvVFZZKHHKdg7slhILVhjc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.156.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:30:12:b4:6b:4c:d0:c3:c4:48:e6:41:5f:49:cd:3c:74:86:
         7e:39:7c:3b:b2:5b:f5:77:33:07:3a:59:2f:8f:98:6f:fc:32:
         a9:c0:e8:88:bf:51:5b:6b:a6:8e:bc:38:e1:13:1a:76:67:e8:
         d2:d5:25:b5:f7:c9:71:7d:c5:1e:7f:54:c2:a5:e2:39:c8:ae:
         0c:40:83:67:c0:e8:12:2d:82:13:e9:fb:b5:bc:7f:a6:50:56:
         e8:b5:f7:d0:7c:e6:b4:e6:a6:9b:5c:c2:1d:43:56:27:1b:4b:
         3c:53:be:86:d8:e5:f0:b4:72:ca:63:f2:0b:36:99:b4:8b:3a:
         34:50:aa:d7:d5:98:4e:8b:18:96:ea:95:cd:72:2f:d1:1a:48:
         5f:33:67:6c:24:d9:7e:b8:8a:8e:45:28:78:be:07:cf:d7:95:
         64:c5:9c:f1:1b:de:76:3f:ef:2c:35:3f:56:5c:1c:e4:c2:33:
         ad:4a:0e:12:92:46:3e:00:25:42:8f:b0:01:c6:bd:51:b9:11:
         7f:63:ce:ef:0a:69:b1:96:2c:91:5e:2b:a3:44:9a:d5:40:92:
         0e:4f:b2:ed:ea:08:e5:64:7b:be:bc:30:fe:ef:94:94:41:df:
         6c:2e:c1:7e:61:7a:d1:27:c0:7a:c4:f0:be:3b:44:0b:2b:be:
         4d:7f:55:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 16:38:59 2025 by rpki-client