Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/MTA8p5uwc48-UpnwtzZ4t-y2pQY.roa
File:                     MTA8p5uwc48-UpnwtzZ4t-y2pQY.roa (raw, json)
Hash identifier:          8C47v9NuIHPHkWqozCZbumt4UYl7s3dOyKKhEXztbLc=
Subject key identifier:   31:30:3C:A7:9B:B0:73:8F:3E:52:99:F0:B7:36:78:B7:EC:B6:A5:06
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0419
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/MTA8p5uwc48-UpnwtzZ4t-y2pQY.roa
Signing time:             Thu 01 May 2025 01:48:44 +0000
ROA not before:           Thu 01 May 2025 01:48:44 +0000
ROA not after:            Wed 15 Apr 2026 01:30:03 +0000
asID:                     10013
IP address blocks:        183.181.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 May 2025 21:45:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1049 (0x419)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: May  1 01:48:44 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=31303CA79BB0738F3E5299F0B73678B7ECB6A506
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:69:c0:f3:76:9e:32:bf:48:4b:ce:1d:f6:ca:
                    0f:21:c8:55:7d:07:a1:c6:ce:79:54:ff:b6:31:55:
                    bc:ff:33:aa:ad:02:aa:8e:3e:94:a0:83:99:3e:94:
                    40:57:a2:03:cc:46:5a:c4:53:77:92:d1:d5:ea:fd:
                    8e:3e:ef:b4:da:ef:44:52:e1:90:0b:bf:9d:2a:db:
                    99:54:b0:22:2f:bc:4e:82:11:f4:1f:52:11:b4:25:
                    fc:f1:d9:37:20:e1:82:f9:23:ee:90:d3:e5:b1:42:
                    94:2f:24:71:20:ff:8c:f6:83:16:35:75:7f:5a:1c:
                    5c:3f:af:ff:3f:1e:f9:b9:6c:22:4a:96:ac:8e:97:
                    4c:38:52:b4:83:f2:b6:86:71:89:e7:9f:81:64:26:
                    98:13:c9:6a:4e:38:9c:26:b7:4f:cf:36:14:82:b3:
                    8e:e9:f1:30:58:93:1b:07:7d:c5:23:5c:c6:23:0b:
                    9c:3b:54:10:e8:77:7f:13:32:d6:bb:f1:f4:14:46:
                    c1:b7:13:fa:75:15:90:8f:2b:cd:b7:5a:aa:83:5d:
                    be:3c:b4:20:27:28:08:6b:b0:7c:a4:e9:e9:db:92:
                    e6:40:f9:a7:ec:d2:ef:46:02:5a:26:e2:38:32:91:
                    3c:e8:c3:63:0f:2a:c2:3c:12:34:d8:63:cc:82:7c:
                    35:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:30:3C:A7:9B:B0:73:8F:3E:52:99:F0:B7:36:78:B7:EC:B6:A5:06
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/MTA8p5uwc48-UpnwtzZ4t-y2pQY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.181.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         2a:99:60:12:de:e1:21:43:fd:8d:0e:5f:70:f7:9b:4c:30:42:
         3d:ab:7d:27:f2:e8:e2:75:a4:d7:58:5a:5b:e0:02:65:bf:cc:
         80:7f:b4:cd:ba:64:b5:35:16:f5:37:b8:d8:c3:d2:5b:22:5a:
         5c:a4:0f:3f:b3:ee:bf:70:da:09:48:07:49:b6:59:ff:15:7c:
         d7:b6:fe:a6:30:75:ef:0a:30:a5:2b:b7:73:3d:2f:aa:3c:0a:
         82:0f:b9:4c:e7:e5:74:87:dc:1f:13:52:d5:3e:8a:71:56:83:
         9e:8f:c8:04:f0:ad:5a:d6:77:a0:9a:f7:a0:6b:b3:d4:85:15:
         f4:0c:3d:47:8e:10:eb:56:43:68:c2:8a:e0:9a:ff:74:28:a6:
         67:37:2b:6c:1f:e8:77:90:86:b7:59:56:ee:bc:69:e6:67:75:
         a0:05:ff:ef:54:97:aa:5f:d4:30:ee:ee:a7:d9:4b:c8:1c:e6:
         6a:f3:07:cc:3b:ce:27:f0:34:bb:d2:c8:ef:7b:77:82:95:33:
         b4:28:e3:26:8c:2f:7a:81:4a:f8:2c:d2:78:d5:94:ee:26:2b:
         cc:e6:8c:72:91:f4:2c:a4:e0:79:5e:b1:3a:2e:0b:26:0d:58:
         5c:99:ca:a5:a5:60:b9:be:8a:1a:de:af:ec:c9:58:e0:5f:71:
         dd:37:b3:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 01:58:41 2025 by rpki-client