Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/JMYGwEUCAkm1xG8QxNKC4N9SdCY.roa
File:                     JMYGwEUCAkm1xG8QxNKC4N9SdCY.roa (raw, json)
Hash identifier:          peVnzMsXnHJMij4L7lS2iH+97PrOvBnPLRWM1AANsL0=
Subject key identifier:   24:C6:06:C0:45:02:02:49:B5:C4:6F:10:C4:D2:82:E0:DF:52:74:26
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       03B7
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/JMYGwEUCAkm1xG8QxNKC4N9SdCY.roa
Signing time:             Thu 01 May 2025 01:40:32 +0000
ROA not before:           Thu 01 May 2025 01:40:32 +0000
ROA not after:            Wed 15 Apr 2026 01:30:03 +0000
asID:                     10013
IP address blocks:        49.240.0.0/15 maxlen: 15
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 May 2025 14:37:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 951 (0x3b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: May  1 01:40:32 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=24C606C045020249B5C46F10C4D282E0DF527426
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:45:ae:9c:da:de:b0:2c:d4:a4:08:2b:2f:b8:
                    9d:d5:26:27:29:18:36:2b:5a:46:e5:80:f9:7a:66:
                    42:21:e5:e8:28:44:4e:ca:11:1b:7a:c8:48:4d:59:
                    4a:2f:f5:b0:74:14:6c:8e:f3:32:e3:df:28:9e:c0:
                    fa:59:c4:e1:52:36:99:3d:3f:7b:08:15:05:6b:25:
                    dc:22:e8:f7:1b:1a:d8:45:bd:bc:fb:30:a7:3e:45:
                    0a:81:71:12:35:2e:29:62:f5:f3:ed:3f:22:51:93:
                    f2:37:ee:99:c8:f4:b5:a0:33:b7:e2:d7:f4:28:9b:
                    47:23:76:8a:34:7b:69:57:22:de:ab:7a:6a:a9:32:
                    c8:c8:3c:b3:50:86:9f:d2:cb:d5:b6:62:8b:04:17:
                    4b:9f:33:06:53:ad:1e:27:85:a2:c4:03:1f:a7:0b:
                    72:f4:7d:0d:cf:69:ef:58:a7:ca:d8:76:f2:7a:02:
                    ee:47:7e:32:2c:14:62:11:b4:d7:84:3e:0f:2d:ef:
                    39:bc:84:3a:a0:50:55:a5:ff:bb:38:c9:25:3d:45:
                    3e:ee:e7:d5:30:06:03:e6:8c:3e:29:a5:51:47:47:
                    ad:1e:b1:54:f8:2e:cb:2d:43:66:94:a8:32:a0:e5:
                    92:e5:d1:fe:37:e3:d5:ee:ec:2f:18:a7:c0:d5:5c:
                    63:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:C6:06:C0:45:02:02:49:B5:C4:6F:10:C4:D2:82:E0:DF:52:74:26
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/JMYGwEUCAkm1xG8QxNKC4N9SdCY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.240.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         39:ef:ad:eb:90:c2:4b:c2:ea:a3:54:f6:9e:56:61:ac:45:16:
         23:0f:76:b0:52:ca:15:d0:36:34:54:30:40:b7:bb:38:14:0c:
         f3:68:28:a0:99:42:49:5a:a8:91:4b:ae:9f:c2:49:97:4c:60:
         fc:f7:89:4c:da:eb:69:b1:7a:ee:85:47:57:f4:ed:cb:96:74:
         76:82:fd:98:75:0d:f2:ef:84:14:bb:f6:79:a6:ea:96:6e:8b:
         2c:65:1f:cc:ff:8b:b9:f5:c9:14:51:7f:92:6d:90:e2:fe:2e:
         97:ff:e4:54:8b:c5:3d:d4:9e:4f:27:a9:b6:94:84:b6:47:98:
         02:87:24:c2:1b:69:10:67:90:3b:39:b4:cf:ce:11:4f:1f:d7:
         4c:b0:88:bb:4e:d2:f8:78:5f:05:61:c6:c0:71:3c:e9:d6:11:
         45:0e:b4:72:47:85:69:cb:24:f7:5e:fa:b1:c4:0a:8e:71:2e:
         68:5d:7c:37:3e:16:4d:d9:f7:61:b5:04:e7:e1:17:35:7e:5b:
         3c:30:dd:c9:b7:d9:97:7e:35:5e:fd:9b:1e:d7:5c:91:01:0f:
         4c:fb:d9:2e:02:01:0d:2f:73:fc:8d:f6:d5:6d:07:00:15:78:
         85:56:58:0f:c4:0d:64:c2:bd:9e:d3:f5:d5:6b:f7:a8:77:dd:
         ea:4f:e8:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 16:53:54 2025 by rpki-client