Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/NUGW5NHly6P8gC7EV2OFf-3uxdw.roa
File:                     NUGW5NHly6P8gC7EV2OFf-3uxdw.roa (raw, json)
Hash identifier:          Ahn61O7kRfpUWbKm5QExvsUXtTzW3OaQ3/AweG0KRe4=
Subject key identifier:   35:41:96:E4:D1:E5:CB:A3:FC:80:2E:C4:57:63:85:7F:ED:EE:C5:DC
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0417
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/NUGW5NHly6P8gC7EV2OFf-3uxdw.roa
Signing time:             Thu 01 May 2025 01:48:43 +0000
ROA not before:           Thu 01 May 2025 01:48:43 +0000
ROA not after:            Wed 15 Apr 2026 01:30:03 +0000
asID:                     10013
IP address blocks:        182.163.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 May 2025 21:45:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1047 (0x417)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: May  1 01:48:43 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=354196E4D1E5CBA3FC802EC45763857FEDEEC5DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:73:b8:7d:e4:f7:f5:0e:80:b7:de:f5:d1:de:
                    de:75:cf:8f:5e:49:cc:31:3c:86:00:d4:ed:be:fb:
                    b7:1d:0a:f5:3e:2a:48:a6:8b:14:ce:95:09:90:51:
                    3b:47:32:ac:a7:9a:f1:53:da:b1:4c:63:bc:79:12:
                    4b:01:a1:e4:9c:78:46:36:cd:06:a6:67:32:91:f0:
                    94:0a:f1:1d:bb:7a:01:81:a4:91:b0:ec:bb:0c:96:
                    f0:e4:6c:82:7b:96:c3:27:e9:82:46:30:7c:bd:25:
                    93:a0:56:97:b7:ff:12:52:eb:58:db:e8:9b:4f:8b:
                    a8:4b:58:d3:04:ac:28:ff:b6:c2:78:27:00:02:07:
                    15:d5:20:3e:16:52:5b:d0:c1:0f:c3:52:8b:3b:d5:
                    6c:bf:2d:8e:f9:3a:8a:fc:74:6f:8a:e4:dd:eb:b1:
                    c7:4d:e6:9c:a8:1d:f8:aa:d6:35:fc:bc:0b:67:a7:
                    1d:13:df:4d:1a:8c:23:31:13:4f:ce:2a:b0:29:5f:
                    ee:bf:b2:49:e9:a7:17:a7:30:ad:16:2f:81:05:07:
                    a7:4f:b0:91:cd:8c:57:e9:41:ed:9f:c3:9d:53:61:
                    50:21:1c:bb:2a:65:dc:7f:9b:b6:36:0b:d8:75:38:
                    e6:aa:ca:1b:bc:dd:00:25:df:2b:79:a6:84:a4:28:
                    0e:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:41:96:E4:D1:E5:CB:A3:FC:80:2E:C4:57:63:85:7F:ED:EE:C5:DC
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/NUGW5NHly6P8gC7EV2OFf-3uxdw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.163.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         32:3f:83:9e:7f:9a:b5:94:09:19:70:78:5b:8f:d0:92:ad:b2:
         89:1c:26:5b:2b:87:59:45:cd:07:34:02:d8:88:0b:1e:11:0d:
         d7:5e:f5:07:b7:6e:68:d8:64:a9:0d:35:fe:e7:55:b6:c2:c4:
         79:4a:4a:22:36:80:93:3c:a2:5b:92:57:ab:df:0d:04:68:58:
         e6:3b:3e:31:61:5c:3a:22:53:d1:ef:43:a1:39:2a:48:56:1c:
         33:fa:d1:bc:6d:7e:cb:3f:6a:cc:93:54:d8:12:87:4d:c8:14:
         d6:04:ed:c2:70:c0:28:e0:dd:0b:9b:fe:8c:75:bd:22:df:26:
         de:eb:1e:af:bf:f4:e9:37:b5:99:fd:97:45:6e:d3:f6:18:e7:
         92:28:e4:40:48:8d:c1:8b:9f:5e:ff:63:05:d1:42:38:8b:f4:
         86:d8:b9:db:21:71:60:8a:3f:df:c7:1b:ac:ea:5c:6b:31:82:
         ed:c9:93:9b:15:0a:14:12:8f:2d:fe:c4:3f:5a:b1:95:43:5b:
         6a:70:47:b5:5e:d5:ba:75:75:96:f4:50:73:44:7b:08:32:cc:
         a9:fa:54:a5:15:99:d5:40:33:b2:ec:2d:f0:24:89:3d:ce:a4:
         1e:eb:a6:f0:58:f2:da:59:76:a1:dd:6a:23:d3:b9:10:88:b5:
         25:95:bb:50
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICBBcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3
MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNTA1MDEw
MTQ4NDNaFw0yNjA0MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDM1NDE5NkU0RDFFNUNC
QTNGQzgwMkVDNDU3NjM4NTdGRURFRUM1REMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDKc7h95Pf1DoC33vXR3t51z49eScwxPIYA1O2++7cdCvU+Kkim
ixTOlQmQUTtHMqynmvFT2rFMY7x5EksBoeSceEY2zQamZzKR8JQK8R27egGBpJGw
7LsMlvDkbIJ7lsMn6YJGMHy9JZOgVpe3/xJS61jb6JtPi6hLWNMErCj/tsJ4JwAC
BxXVID4WUlvQwQ/DUos71Wy/LY75Oor8dG+K5N3rscdN5pyoHfiq1jX8vAtnpx0T
300ajCMxE0/OKrApX+6/sknppxenMK0WL4EFB6dPsJHNjFfpQe2fw51TYVAhHLsq
Zdx/m7Y2C9h1OOaqyhu83QAl3yt5poSkKA75AgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUNUGW5NHly6P8gC7EV2OFf+3uxdwwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp
qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR
Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzk0L05VR1c1TkhseTZQOGdDN0VWMk9GZi0zdXhkdy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAW2oyAwDQYJKoZIhvcNAQELBQADggEBADI/g55/mrWUCRlweFuP0JKtsokc
Jlsrh1lFzQc0AtiICx4RDdde9Qe3bmjYZKkNNf7nVbbCxHlKSiI2gJM8oluSV6vf
DQRoWOY7PjFhXDoiU9HvQ6E5KkhWHDP60bxtfss/asyTVNgSh03IFNYE7cJwwCjg
3Qub/ox1vSLfJt7rHq+/9Ok3tZn9l0Vu0/YY55Io5EBIjcGLn17/YwXRQjiL9IbY
udshcWCKP9/HG6zqXGsxgu3Jk5sVChQSjy3+xD9asZVDW2pwR7Ve1bp1dZb0UHNE
ewgyzKn6VKUVmdVAM7LsLfAkiT3OpB7rpvBY8tpZdqHdaiPTuRCItSWVu1A=
-----END CERTIFICATE-----
Generated at Sun May 18 04:49:53 2025 by rpki-client