Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/E-wGUBQe-nHsdB0CsQ9fz3qdI1Y.roa
File:                     E-wGUBQe-nHsdB0CsQ9fz3qdI1Y.roa (raw, json)
Hash identifier:          osfdKJKw3fqcWuJDkiG7CyQ2Q+80BfnuBG24NBtSCQE=
Subject key identifier:   13:EC:06:50:14:1E:FA:71:EC:74:1D:02:B1:0F:5F:CF:7A:9D:23:56
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       03E4
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/E-wGUBQe-nHsdB0CsQ9fz3qdI1Y.roa
Signing time:             Thu 01 May 2025 01:42:51 +0000
ROA not before:           Thu 01 May 2025 01:42:51 +0000
ROA not after:            Wed 15 Apr 2026 01:30:03 +0000
asID:                     10013
IP address blocks:        111.234.32.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 May 2025 13:18:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 996 (0x3e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: May  1 01:42:51 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=13EC0650141EFA71EC741D02B10F5FCF7A9D2356
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:94:02:bd:93:a6:75:bc:f6:e3:87:39:af:dc:
                    8d:87:93:02:05:cd:ff:20:60:49:f6:f9:91:fd:c4:
                    bd:b7:e4:1c:9b:7c:ea:e0:0c:b4:52:58:32:21:8e:
                    c1:d7:fd:03:4e:44:50:07:c9:39:89:7d:4e:e6:e5:
                    b4:c2:75:9d:af:ba:74:8a:2e:85:46:39:4c:83:c9:
                    a6:d5:ac:85:58:59:f8:6d:d5:35:92:8e:52:f2:ed:
                    b4:70:7f:3f:96:24:fb:a1:c0:d2:78:41:2d:03:32:
                    60:1e:44:9c:87:96:5b:94:94:54:65:10:8f:b4:48:
                    c5:6d:7a:d8:5b:9c:4f:71:a7:61:fc:b1:1c:29:2f:
                    82:f3:1a:4f:ad:de:ee:52:49:dc:3e:b2:37:ab:17:
                    64:e3:c0:ab:61:9b:b3:9d:a8:fc:df:bd:24:02:5c:
                    68:3e:fa:f1:43:f1:e9:73:d5:63:ac:ef:1f:d6:3d:
                    90:1d:ff:24:f4:d0:90:31:77:d1:0e:cd:19:9c:59:
                    7c:2f:c6:79:23:e9:3c:02:73:a0:c3:f7:46:75:f3:
                    30:78:f2:7c:b0:2c:0d:cb:31:10:5b:35:42:20:56:
                    62:99:14:87:36:e1:13:49:54:22:d0:fe:cd:bd:7d:
                    fe:84:87:5e:f9:2d:33:b8:9c:20:dc:5c:45:4b:64:
                    fa:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:EC:06:50:14:1E:FA:71:EC:74:1D:02:B1:0F:5F:CF:7A:9D:23:56
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/E-wGUBQe-nHsdB0CsQ9fz3qdI1Y.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.234.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         15:0f:86:ff:8c:af:62:a1:73:d1:3a:3a:eb:b9:79:81:12:fb:
         54:af:0e:45:4a:b0:b3:af:3a:83:86:b5:b0:f9:98:a8:98:29:
         5c:7e:69:3e:5d:56:4c:f5:81:98:86:97:0d:92:74:a2:d4:e8:
         dc:47:62:c4:0e:48:45:09:57:48:bd:52:69:65:b0:9e:9b:91:
         97:e7:0c:1a:4b:63:50:4c:9b:a0:0b:5f:19:20:93:e2:0c:2a:
         fc:f6:43:eb:60:47:e8:91:f6:4e:a5:91:ef:88:8b:7b:e8:95:
         b3:4b:01:65:a6:1c:2c:8d:a9:6f:fc:73:61:be:bb:80:a5:67:
         37:24:f8:30:fc:56:4f:0a:8d:86:76:14:d9:b5:df:39:f1:94:
         07:9f:78:fb:8e:7c:32:2a:b2:72:f3:2b:d8:55:6e:6a:d9:5c:
         7f:b2:3a:c7:31:51:30:c2:61:44:24:b1:58:74:b0:13:20:3e:
         c8:eb:49:1b:d2:ed:d2:02:6b:54:44:5a:52:4c:5d:c8:22:a0:
         43:a4:9c:56:1d:a2:4c:c2:24:8a:2a:8b:99:bb:bf:a9:41:6a:
         e6:22:72:86:66:e5:97:f3:03:b9:33:d2:68:13:28:66:b3:bc:
         ea:e7:f0:ad:78:cb:c2:db:6b:41:59:17:7e:51:d3:07:ae:21:
         1a:b1:72:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 15:30:28 2025 by rpki-client