Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/N5Nq4-cGDMRCfh8D0N589pMrNXM.roa
File:                     N5Nq4-cGDMRCfh8D0N589pMrNXM.roa (raw, json)
Hash identifier:          dwNo7nOxp0GOz3nsOcrvTlb1CWw6M5qDt6z+m2r6hOE=
Subject key identifier:   37:93:6A:E3:E7:06:0C:C4:42:7E:1F:03:D0:DE:7C:F6:93:2B:35:73
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       040B
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/N5Nq4-cGDMRCfh8D0N589pMrNXM.roa
Signing time:             Thu 01 May 2025 01:45:27 +0000
ROA not before:           Thu 01 May 2025 01:45:27 +0000
ROA not after:            Wed 15 Apr 2026 01:30:03 +0000
asID:                     10013
IP address blocks:        122.145.128.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 May 2025 21:45:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1035 (0x40b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: May  1 01:45:27 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=37936AE3E7060CC4427E1F03D0DE7CF6932B3573
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:2f:83:49:11:d4:e3:5c:25:f0:8e:ad:48:62:
                    e3:3f:a7:3f:89:58:a7:66:e6:19:dc:91:07:88:49:
                    34:ca:76:68:75:8b:17:47:63:14:4b:aa:1c:49:5d:
                    96:62:b0:8e:82:be:2e:e3:b5:70:5f:78:b1:2a:86:
                    16:6c:65:98:95:9c:6d:31:a4:ab:a7:79:95:c5:b4:
                    8f:a2:91:c7:c6:ee:23:83:f1:11:71:d5:7a:72:c7:
                    ce:e0:20:17:6d:4e:59:a2:b7:55:7c:67:d3:91:eb:
                    7e:84:d6:61:17:65:58:f9:cc:fc:36:01:23:9a:99:
                    17:5c:ba:c5:d1:e8:56:ec:59:ff:31:55:f4:ac:82:
                    53:13:a1:e2:b6:59:d5:b9:4a:da:fc:ff:3f:18:32:
                    68:eb:ab:12:48:db:f8:c1:46:35:2f:4b:13:75:bc:
                    44:54:fb:c0:ce:76:43:0a:40:1e:e4:62:1b:f7:b0:
                    46:d4:c1:14:ce:d0:28:a3:20:d2:e4:7d:3f:8d:13:
                    9d:82:a6:2e:4b:b2:05:f0:e3:35:38:a9:c7:7d:35:
                    cd:7f:69:7e:1d:c4:de:b2:0c:db:d2:18:03:95:cf:
                    e3:1b:6d:bc:84:59:94:63:76:e9:1b:c5:fd:8b:d2:
                    46:1b:7a:bc:a2:42:8c:f6:29:8c:9f:46:be:a8:3b:
                    af:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:93:6A:E3:E7:06:0C:C4:42:7E:1F:03:D0:DE:7C:F6:93:2B:35:73
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/N5Nq4-cGDMRCfh8D0N589pMrNXM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.145.128.0/23

    Signature Algorithm: sha256WithRSAEncryption
         99:e6:7e:1a:88:c4:7b:92:ab:6a:bf:89:da:38:82:91:c1:28:
         cd:fa:08:65:17:a4:a6:e1:d2:a4:a4:40:1b:c0:3f:f4:ac:18:
         ea:79:b3:b4:4d:8c:8f:cd:46:2c:66:6e:fa:67:2f:ae:63:e5:
         9f:8d:3b:c5:ec:8b:50:af:42:dd:ab:69:04:7e:6d:35:e7:54:
         50:59:44:83:b9:f8:47:23:40:ea:cd:0a:b3:43:a2:25:ff:fd:
         03:73:38:5a:3e:d1:9d:70:61:46:97:f7:87:17:30:6a:54:4e:
         2b:98:0f:53:91:c4:30:ef:19:93:d0:1c:be:30:6c:c5:47:1f:
         f6:d5:b1:ac:83:c7:c0:91:6f:06:02:01:ab:2b:d3:dd:20:1a:
         cb:76:3c:c9:05:f8:17:d4:57:98:eb:29:12:4e:33:65:2d:c7:
         b2:90:ab:76:e9:58:8c:eb:8d:57:65:91:ad:88:ae:71:c1:b6:
         41:46:7b:8f:91:a7:5c:3f:3d:31:2e:85:2a:3e:2c:d3:47:25:
         6c:ff:70:97:19:9a:cc:97:f4:11:54:43:a2:60:41:79:91:3d:
         76:c5:1d:b5:11:27:30:ee:09:ff:b8:79:c3:4f:7c:fa:90:c1:
         7e:c5:55:3f:93:5e:06:57:15:9a:94:66:50:e4:ad:00:75:9c:
         3d:20:6e:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 04:48:44 2025 by rpki-client