Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/ODvIZyZ48QW2he0Ee7791x7AN-E.roa
File:                     ODvIZyZ48QW2he0Ee7791x7AN-E.roa (raw, json)
Hash identifier:          9lsaL8++hbQxatEq9RubJX6xlmQXy+yGFVdMu1er6Cs=
Subject key identifier:   38:3B:C8:67:26:78:F1:05:B6:85:ED:04:7B:BE:FD:D7:1E:C0:37:E1
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       038F
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/ODvIZyZ48QW2he0Ee7791x7AN-E.roa
Signing time:             Thu 01 May 2025 01:37:30 +0000
ROA not before:           Thu 01 May 2025 01:37:30 +0000
ROA not after:            Wed 15 Apr 2026 01:30:03 +0000
asID:                     10013
IP address blocks:        27.134.22.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 May 2025 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 911 (0x38f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: May  1 01:37:30 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=383BC8672678F105B685ED047BBEFDD71EC037E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:8f:26:e7:7d:47:53:2b:dc:f3:a5:85:99:70:
                    70:28:07:96:6a:a3:74:17:ff:71:36:8e:dc:09:8f:
                    e8:e9:e6:b9:f0:fa:05:98:c1:17:d0:2d:93:38:b2:
                    ed:13:52:6a:2a:c2:13:44:a6:ec:a9:00:5e:eb:b1:
                    65:c5:74:70:02:d5:b2:16:f3:5d:eb:32:02:4c:cb:
                    31:ff:a0:f8:36:99:43:ec:61:1b:c0:16:96:2a:67:
                    ca:3a:5d:37:25:1d:b7:35:8f:f4:c4:56:15:86:2f:
                    90:98:5b:0b:6c:63:f3:af:0b:a6:fe:f8:c3:4c:28:
                    c1:ef:3b:e9:82:86:3c:d9:88:9f:09:b4:c6:c8:14:
                    9f:26:2a:7a:60:5f:76:ec:13:bb:f5:86:18:55:89:
                    db:5d:95:72:e3:81:d5:6a:60:02:4b:00:6c:ec:1a:
                    eb:93:03:fe:de:36:ad:af:a8:bc:2f:88:70:48:19:
                    a3:47:20:a7:79:19:63:75:7c:0e:f8:dc:a9:8e:78:
                    b6:94:1c:09:72:b6:7f:39:d0:ee:11:f9:8d:0e:2d:
                    62:47:0a:46:8c:8c:de:61:dd:c1:d9:a2:fb:08:77:
                    12:b0:f1:e9:00:df:8c:55:cb:16:0e:09:4d:47:29:
                    7b:57:80:a3:fb:38:fc:b5:5a:fa:01:3f:3c:2d:ce:
                    a7:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:3B:C8:67:26:78:F1:05:B6:85:ED:04:7B:BE:FD:D7:1E:C0:37:E1
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/ODvIZyZ48QW2he0Ee7791x7AN-E.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.134.22.0/23

    Signature Algorithm: sha256WithRSAEncryption
         01:03:7f:0f:00:a6:6a:87:97:a4:d3:e0:ab:29:cb:f5:24:94:
         8e:01:72:6d:cd:6a:3d:47:cd:12:93:48:a1:28:76:9a:67:3c:
         b0:34:95:b9:60:67:e9:26:84:4f:d9:69:a9:36:91:2b:78:3e:
         7e:79:3d:d2:18:83:ff:be:41:5d:6b:32:43:86:2e:12:9f:eb:
         e6:7d:49:fd:f7:94:4c:91:d6:e7:0e:0b:26:e5:3e:aa:0c:85:
         08:f1:6d:22:0e:77:b0:be:3a:d1:63:94:be:0e:9a:fb:f6:f2:
         7a:fc:0a:14:2b:a4:ef:70:34:87:4b:66:03:14:63:be:3a:b3:
         6e:4c:eb:8f:8e:4a:80:85:90:b5:4b:8b:ac:d3:20:f7:06:7d:
         1b:35:4d:76:44:6e:f0:d8:6d:12:0c:82:d9:9d:bc:5e:15:d4:
         c7:82:4d:70:61:5a:2c:a2:9d:e9:ab:2c:90:e2:ae:82:8a:d5:
         99:4f:fd:f8:15:32:82:be:28:cf:d7:03:03:22:5e:c7:c6:bc:
         e3:4c:50:0e:52:c4:e4:df:a0:c4:10:ed:b0:af:ee:f3:85:b1:
         3e:4e:d6:2e:91:1c:6d:97:85:b2:0b:c6:5e:96:51:23:eb:87:
         9c:79:ca:4c:8c:10:0f:1c:85:e5:65:3f:62:b9:22:73:1e:d1:
         d4:a3:94:2c
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICA48wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3
MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNTA1MDEw
MTM3MzBaFw0yNjA0MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDM4M0JDODY3MjY3OEYx
MDVCNjg1RUQwNDdCQkVGREQ3MUVDMDM3RTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCsjybnfUdTK9zzpYWZcHAoB5Zqo3QX/3E2jtwJj+jp5rnw+gWY
wRfQLZM4su0TUmoqwhNEpuypAF7rsWXFdHAC1bIW813rMgJMyzH/oPg2mUPsYRvA
FpYqZ8o6XTclHbc1j/TEVhWGL5CYWwtsY/OvC6b++MNMKMHvO+mChjzZiJ8JtMbI
FJ8mKnpgX3bsE7v1hhhVidtdlXLjgdVqYAJLAGzsGuuTA/7eNq2vqLwviHBIGaNH
IKd5GWN1fA743KmOeLaUHAlytn850O4R+Y0OLWJHCkaMjN5h3cHZovsIdxKw8ekA
34xVyxYOCU1HKXtXgKP7OPy1WvoBPzwtzqfPAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUODvIZyZ48QW2he0Ee7791x7AN+EwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp
qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR
Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzk0L09EdklaeVo0OFFXMmhlMEVlNzc5MXg3QU4tRS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAEbhhYwDQYJKoZIhvcNAQELBQADggEBAAEDfw8ApmqHl6TT4Kspy/UklI4B
cm3Naj1HzRKTSKEodppnPLA0lblgZ+kmhE/Zaak2kSt4Pn55PdIYg/++QV1rMkOG
LhKf6+Z9Sf33lEyR1ucOCyblPqoMhQjxbSIOd7C+OtFjlL4Omvv28nr8ChQrpO9w
NIdLZgMUY746s25M64+OSoCFkLVLi6zTIPcGfRs1TXZEbvDYbRIMgtmdvF4V1MeC
TXBhWiyinemrLJDiroKK1ZlP/fgVMoK+KM/XAwMiXsfGvONMUA5SxOTfoMQQ7bCv
7vOFsT5O1i6RHG2XhbILxl6WUSPrh5x5ykyMEA8cheVlP2K5InMe0dSjlCw=
-----END CERTIFICATE-----
Generated at Sun May 18 12:22:43 2025 by rpki-client