Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/JxO-HXj72d-4LD-2mxmGZ--aQ0M.roa
File:                     JxO-HXj72d-4LD-2mxmGZ--aQ0M.roa (raw, json)
Hash identifier:          lpTfZddhLj2nHj09O/wdPVPApI1pDiYQkWhQJfmZF2Y=
Subject key identifier:   27:13:BE:1D:78:FB:D9:DF:B8:2C:3F:B6:9B:19:86:67:EF:9A:43:43
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0378
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/JxO-HXj72d-4LD-2mxmGZ--aQ0M.roa
Signing time:             Thu 01 May 2025 01:33:31 +0000
ROA not before:           Thu 01 May 2025 01:33:31 +0000
ROA not after:            Wed 15 Apr 2026 01:30:03 +0000
asID:                     10013
IP address blocks:        119.150.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 May 2025 21:45:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 888 (0x378)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: May  1 01:33:31 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=2713BE1D78FBD9DFB82C3FB69B198667EF9A4343
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e8:20:f8:09:0a:bd:4c:19:c1:fa:ac:87:5c:
                    58:0f:6e:ae:fa:93:f7:5d:54:bd:5b:71:f0:82:6c:
                    16:21:30:35:23:6b:0d:e2:d7:69:b4:79:57:da:21:
                    a2:82:af:49:81:21:40:e0:91:04:28:a9:06:a3:14:
                    e3:64:06:5e:06:da:07:cb:fb:17:b6:8e:93:7f:70:
                    af:ad:24:01:24:2c:44:2a:5b:1d:4d:61:ef:9f:35:
                    ea:7b:b9:de:3e:d2:ea:4c:45:9d:e6:70:dd:21:9d:
                    7e:89:99:62:cb:5c:db:6f:2e:03:24:35:c3:6d:c4:
                    68:cc:4d:d2:ff:00:80:8a:8d:8c:18:8d:c5:38:d3:
                    e7:d4:eb:7c:7d:ef:57:91:97:75:16:5e:c1:e5:68:
                    0c:f3:e8:8e:93:4a:bc:61:96:f5:50:86:8f:0f:48:
                    67:74:7a:05:72:ae:df:ab:6c:4a:c6:ba:d9:15:eb:
                    ff:6e:ca:de:45:08:11:80:de:2f:f1:e8:6a:c4:73:
                    8f:16:32:0f:26:86:08:ac:fd:32:b2:c2:fa:68:09:
                    ad:b8:9c:b6:90:66:74:1f:07:81:52:be:40:14:e4:
                    f2:35:0c:33:7f:ad:46:1c:18:f0:11:6b:b7:3d:c1:
                    ed:40:5c:78:1d:3c:71:53:c0:1f:2d:a9:c1:c8:07:
                    54:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:13:BE:1D:78:FB:D9:DF:B8:2C:3F:B6:9B:19:86:67:EF:9A:43:43
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/JxO-HXj72d-4LD-2mxmGZ--aQ0M.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.150.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:2e:0f:9c:5b:e7:2f:7c:53:a8:8b:13:34:76:ad:22:e1:26:
         8b:44:84:2d:68:0b:a2:60:72:8c:cd:42:98:b5:05:bc:3f:e2:
         92:1d:58:b6:25:58:f2:2f:11:32:45:2c:e2:a3:7a:e7:22:89:
         af:bf:1f:4b:56:bd:0f:70:60:2f:96:3c:6e:94:28:cb:cc:93:
         4b:a2:ab:29:9a:80:b5:1a:25:48:d5:ca:d1:27:38:6e:f4:c3:
         6d:c6:e9:2f:d3:96:c3:7b:5b:08:c8:29:23:4f:2d:7d:1c:d3:
         06:da:ce:dd:0c:0b:37:2f:ad:15:07:12:54:a2:f2:c1:bb:55:
         e6:40:2b:49:02:43:da:0d:02:24:b4:2b:bb:c4:08:ec:97:7c:
         80:4b:0d:b9:61:0f:72:fa:03:02:cc:f2:19:11:a0:65:3c:55:
         b6:09:e6:c4:7f:d0:7d:f9:dd:12:ed:1b:1b:fe:3f:47:11:b9:
         8f:db:c0:c9:11:5f:49:26:65:ff:82:3c:2b:1a:30:41:32:d7:
         d1:ab:c8:47:1b:e2:ad:33:79:ee:32:e2:e8:52:94:8a:e9:42:
         2f:de:27:c7:75:ab:9c:0b:12:05:c1:70:a7:34:dd:01:30:c4:
         fb:f6:3c:d2:34:3a:09:44:f3:9b:62:de:bc:8d:40:1a:1b:0b:
         c0:95:0f:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 23:32:18 2025 by rpki-client