Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/Jscw0FNYFVpxTrUo-RMWm5gC7oc.roa
File:                     Jscw0FNYFVpxTrUo-RMWm5gC7oc.roa (raw, json)
Hash identifier:          UL1ZMTRRXlkJ9t/rKVqgHoK+prT5Ua0AHPDliQlAHC4=
Subject key identifier:   26:C7:30:D0:53:58:15:5A:71:4E:B5:28:F9:13:16:9B:98:02:EE:87
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       03A9
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/Jscw0FNYFVpxTrUo-RMWm5gC7oc.roa
Signing time:             Thu 01 May 2025 01:40:25 +0000
ROA not before:           Thu 01 May 2025 01:40:25 +0000
ROA not after:            Wed 15 Apr 2026 01:30:03 +0000
asID:                     10013
IP address blocks:        110.74.48.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 May 2025 18:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 937 (0x3a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: May  1 01:40:25 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=26C730D05358155A714EB528F913169B9802EE87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b7:12:24:bb:33:4e:a4:49:f1:c4:99:9e:bb:
                    11:6a:c8:d2:e5:12:05:97:e9:26:99:f9:c2:dc:19:
                    15:84:3b:fe:7f:17:02:0a:7e:10:28:3d:8f:9b:0d:
                    96:cd:13:eb:c8:b4:9d:4f:c7:1d:fb:a4:7f:12:b5:
                    81:70:44:a2:5e:c6:67:b1:55:0f:0e:fc:6e:72:b7:
                    57:f9:9a:a3:6b:f4:f7:6d:c0:30:3b:4f:cb:3e:e4:
                    5a:1b:d9:37:89:08:4c:29:1d:0f:f5:43:a1:af:f7:
                    b9:7a:72:57:90:c9:4b:98:9e:22:ea:ad:5c:99:aa:
                    0e:81:c2:60:24:cf:d2:33:fa:70:56:37:05:42:27:
                    ca:04:99:56:cf:4d:f9:2a:70:c0:ad:c0:20:fa:e6:
                    6e:e0:e1:83:d3:9c:ac:98:74:91:f1:39:07:02:26:
                    a3:34:29:aa:5e:6e:5d:4d:60:d8:b5:cd:1a:b4:26:
                    f6:b8:57:2c:66:67:b8:02:dd:d6:e7:f3:18:07:80:
                    06:9b:50:55:db:c6:de:1c:77:dd:9e:78:15:4d:26:
                    9c:a4:2b:c5:05:a6:5a:18:38:0d:8c:75:a1:05:b1:
                    47:fb:c4:67:64:d1:4a:3d:7d:f7:e6:2e:27:e4:d0:
                    83:cc:00:61:50:7e:57:25:c9:d2:5a:fb:79:a5:98:
                    8a:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:C7:30:D0:53:58:15:5A:71:4E:B5:28:F9:13:16:9B:98:02:EE:87
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/Jscw0FNYFVpxTrUo-RMWm5gC7oc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.74.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         05:49:02:7b:ad:a3:b5:d8:81:a3:09:b1:dd:39:9b:91:5b:8f:
         75:37:b4:5b:90:1d:62:3f:16:ca:c8:1b:00:6f:01:5d:98:cc:
         cd:61:07:1e:08:7d:f5:76:a1:27:31:d0:fb:6a:00:04:56:3c:
         b4:37:b6:8c:40:70:be:6d:5a:42:bc:31:52:c5:a2:e6:f8:fe:
         83:78:8e:44:a1:b9:eb:ed:55:3a:86:6c:16:2f:f6:4c:4a:cc:
         63:4a:36:c5:86:13:3f:0e:4d:27:bc:b3:fc:6e:78:63:a9:2f:
         52:4f:44:bb:52:ce:51:f5:de:bf:b5:f0:94:a1:6c:da:51:4b:
         71:06:7a:8f:02:17:de:34:f6:3d:8a:eb:12:34:66:ac:e8:a3:
         84:ff:81:5c:d1:01:38:c2:a0:33:20:5f:9e:31:bf:e9:fb:08:
         e4:55:bb:b3:46:64:7b:37:19:fb:61:d2:85:79:f7:e6:dd:7b:
         59:78:6a:01:ed:8c:74:a8:85:14:2c:de:e3:a9:3f:af:e8:f6:
         ec:54:37:c1:53:8e:ea:78:b9:06:ad:82:6e:63:55:7b:45:3e:
         cb:47:67:d1:1b:bf:7e:4f:b7:f3:3f:da:c3:95:0f:08:79:85:
         c2:e1:dc:3a:39:42:2d:e5:f1:34:04:4c:a3:32:b0:70:07:3f:
         83:48:f8:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 21:23:29 2025 by rpki-client