Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/AnDZY3dnFTy2XobfS988aKiSVeo.roa
File:                     AnDZY3dnFTy2XobfS988aKiSVeo.roa (raw, json)
Hash identifier:          fSHOUjPqyrETBTDfXC1cHUsrH40SS0dEMsKi2nbHeD4=
Subject key identifier:   02:70:D9:63:77:67:15:3C:B6:5E:86:DF:4B:DF:3C:68:A8:92:55:EA
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       041E
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/AnDZY3dnFTy2XobfS988aKiSVeo.roa
Signing time:             Thu 01 May 2025 01:48:45 +0000
ROA not before:           Thu 01 May 2025 01:48:45 +0000
ROA not after:            Wed 15 Apr 2026 01:30:03 +0000
asID:                     10013
IP address blocks:        183.181.64.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 May 2025 21:45:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1054 (0x41e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: May  1 01:48:45 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=0270D9637767153CB65E86DF4BDF3C68A89255EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:8d:a7:dd:3c:40:2c:78:23:f3:16:9b:20:0a:
                    7c:c8:04:87:cc:71:50:1c:05:63:93:cd:ca:c4:d6:
                    ea:67:80:a7:8b:7a:4e:f9:e6:38:94:0d:66:fc:36:
                    48:a7:c7:9a:f5:b1:ce:c7:c8:a9:26:87:af:f9:b5:
                    ca:f9:c7:50:3b:3e:14:11:09:78:2b:06:eb:52:a6:
                    48:2a:69:9f:ec:ca:13:05:a3:14:7e:7a:df:ad:d9:
                    73:65:16:ec:3d:67:56:de:a3:43:5f:d2:bb:dd:ae:
                    80:86:30:52:bf:9a:21:f9:9f:da:c1:24:26:09:b8:
                    b2:4c:fd:90:7d:f4:f3:7c:bd:d7:ef:f3:3d:9a:e9:
                    20:1d:df:3d:8f:95:0b:51:5d:1d:59:c3:bb:df:4a:
                    51:c2:73:75:3b:60:de:bd:43:8b:62:0a:03:f0:ae:
                    aa:a6:88:d5:ab:07:61:9d:39:42:49:6a:e6:9f:5c:
                    b2:6c:ee:b8:00:5b:50:82:ac:1d:ea:a2:8e:76:7b:
                    1f:a6:5e:b8:b3:f6:60:aa:fc:d1:a0:83:a2:e7:0d:
                    13:b3:9e:08:8e:5b:8f:ac:a9:bb:b3:f4:be:7e:17:
                    d9:4d:ed:e6:22:e4:64:57:9a:b0:a3:9a:a6:24:6d:
                    b5:3b:64:42:21:52:09:08:39:a0:57:3b:52:4b:9a:
                    c8:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:70:D9:63:77:67:15:3C:B6:5E:86:DF:4B:DF:3C:68:A8:92:55:EA
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/AnDZY3dnFTy2XobfS988aKiSVeo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.181.64.0/21

    Signature Algorithm: sha256WithRSAEncryption
         46:da:58:05:a1:5d:41:83:f3:f3:65:2e:0d:6a:1a:c5:e5:2c:
         97:2c:7e:5e:c7:de:65:6c:d6:3f:07:ea:5d:cc:3d:87:dd:b8:
         04:3b:1b:15:d0:d2:f8:e7:b1:cf:89:56:7d:64:9e:d9:31:26:
         62:11:b5:ca:26:51:55:fb:b5:73:6d:e1:aa:b4:77:91:cf:c4:
         a3:30:9d:88:eb:8b:aa:d4:a7:ff:31:33:44:f0:89:0f:f4:52:
         1a:94:1b:58:e5:68:f6:89:38:26:c5:b8:63:17:02:6a:94:03:
         de:a6:10:57:16:de:ed:d9:38:67:c4:0a:98:13:87:e7:b0:c6:
         4d:d8:40:48:80:7e:af:7a:a1:99:b8:d2:67:36:f7:1b:a8:e0:
         e9:77:5d:d5:1b:c2:31:55:ab:ef:c7:0f:db:f4:4b:ab:3f:fa:
         50:b5:29:65:89:bc:6e:16:00:ad:9e:d2:b6:62:76:c5:58:15:
         ba:1f:9a:41:17:83:f5:cb:fa:30:ca:fe:b1:80:ac:7a:f2:8f:
         3f:9a:1c:62:94:2b:71:44:a5:ee:be:76:9c:22:38:46:10:b6:
         b0:d1:b3:cf:8f:39:b6:73:57:24:91:67:5c:bc:87:02:b7:9b:
         3e:c9:0a:26:69:47:4b:72:57:43:72:e3:67:1e:e5:a5:1e:40:
         73:c5:29:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 23:38:23 2025 by rpki-client