Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/PtV4FvAd6MKWQjroqbRNqwQM7a0.roa
File:                     PtV4FvAd6MKWQjroqbRNqwQM7a0.roa (raw, json)
Hash identifier:          4Jp4c/vEvfPQH7ig40D9HPIKBRa5KNV2BIDgMDXxcrc=
Subject key identifier:   3E:D5:78:16:F0:1D:E8:C2:96:42:3A:E8:A9:B4:4D:AB:04:0C:ED:AD
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       03DE
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/PtV4FvAd6MKWQjroqbRNqwQM7a0.roa
Signing time:             Thu 01 May 2025 01:42:49 +0000
ROA not before:           Thu 01 May 2025 01:42:49 +0000
ROA not after:            Wed 15 Apr 2026 01:30:03 +0000
asID:                     10013
IP address blocks:        110.3.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 May 2025 18:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 990 (0x3de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: May  1 01:42:49 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=3ED57816F01DE8C296423AE8A9B44DAB040CEDAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:24:1f:64:7c:36:73:5f:b1:af:ca:d5:5f:e5:
                    c5:bb:c6:ce:cc:3d:9a:1e:72:1e:70:93:e6:b6:d5:
                    ec:ee:fd:72:de:f1:7d:2a:80:13:da:a8:94:e2:3c:
                    dc:51:be:38:a7:9d:66:2d:e3:59:9e:61:6f:54:48:
                    c4:7d:85:40:3a:eb:57:32:2d:10:b7:12:b8:64:7f:
                    f7:fa:d6:4b:57:15:49:45:9c:6d:62:d5:b6:d8:b5:
                    fa:ec:a7:ad:cd:96:a6:ef:60:80:44:34:a4:f9:8c:
                    0e:ce:c2:9d:75:79:70:9f:1c:81:72:34:59:8b:85:
                    1e:77:fc:54:0b:b1:05:0f:27:e9:6a:73:22:a2:6e:
                    b4:f2:35:00:ed:3c:5d:9d:63:1f:95:5f:98:66:06:
                    29:8c:dd:8b:c8:fb:77:66:13:fb:ee:03:43:b8:96:
                    47:77:a9:51:a1:e7:95:99:7a:c3:10:10:b7:03:b3:
                    03:33:4e:be:0f:37:7b:d2:78:32:d8:8e:24:ca:a4:
                    30:e3:89:4c:11:fe:83:e2:d0:63:91:13:2a:47:28:
                    05:27:46:7c:e2:c9:2d:97:1d:17:2f:23:dd:e3:d4:
                    3a:d6:6c:2b:1b:da:82:27:71:89:0c:25:4d:74:ff:
                    23:50:f6:0d:71:8e:6a:11:dc:78:d1:7a:d5:d5:b1:
                    2d:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:D5:78:16:F0:1D:E8:C2:96:42:3A:E8:A9:B4:4D:AB:04:0C:ED:AD
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/PtV4FvAd6MKWQjroqbRNqwQM7a0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.3.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         30:c3:1d:42:f1:85:66:db:74:de:2a:cf:3c:b2:01:29:0c:5c:
         15:20:8b:38:45:60:03:16:49:9f:ad:c1:ad:ae:11:be:69:ac:
         92:75:f7:4c:0b:53:c1:ac:d9:94:22:43:77:b0:82:32:5e:97:
         b3:a6:d4:55:1d:68:5f:4c:08:26:1d:3d:f6:6a:66:74:a4:10:
         55:a2:70:bc:86:3e:10:bf:69:8d:18:76:dd:f9:2b:62:ed:d8:
         92:bb:0d:90:71:64:d2:55:a6:1b:e8:51:9b:04:80:02:86:86:
         12:ed:07:f5:b5:86:c8:74:61:86:ef:ca:4d:3d:d8:ff:59:7e:
         b1:47:eb:65:84:38:70:9b:f0:d2:a1:e8:e5:32:ae:c6:b1:7c:
         0f:1f:a4:24:bb:5d:23:dd:a2:fd:b2:2d:23:6a:ea:eb:87:32:
         9c:93:c5:33:fa:9b:2e:08:78:2c:9e:05:6f:50:b9:6d:db:73:
         e2:e5:91:35:81:0a:4f:6f:61:b7:ed:1c:ab:8f:75:f2:fd:49:
         25:a9:58:d8:43:62:49:db:bf:6f:20:3a:b1:1e:c8:e7:d1:a2:
         60:32:8b:0a:c3:b7:f1:60:68:18:15:73:22:7c:3a:09:8e:87:
         2f:78:3a:7f:d3:bd:7d:d2:a8:92:6f:c6:88:eb:29:c6:4c:6b:
         6b:6e:8c:14
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICA94wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3
MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNTA1MDEw
MTQyNDlaFw0yNjA0MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDNFRDU3ODE2RjAxREU4
QzI5NjQyM0FFOEE5QjQ0REFCMDQwQ0VEQUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCqJB9kfDZzX7GvytVf5cW7xs7MPZoech5wk+a21ezu/XLe8X0q
gBPaqJTiPNxRvjinnWYt41meYW9USMR9hUA661cyLRC3Erhkf/f61ktXFUlFnG1i
1bbYtfrsp63NlqbvYIBENKT5jA7Owp11eXCfHIFyNFmLhR53/FQLsQUPJ+lqcyKi
brTyNQDtPF2dYx+VX5hmBimM3YvI+3dmE/vuA0O4lkd3qVGh55WZesMQELcDswMz
Tr4PN3vSeDLYjiTKpDDjiUwR/oPi0GOREypHKAUnRnziyS2XHRcvI93j1DrWbCsb
2oIncYkMJU10/yNQ9g1xjmoR3HjRetXVsS3VAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUPtV4FvAd6MKWQjroqbRNqwQM7a0wHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp
qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR
Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzk0L1B0VjRGdkFkNk1LV1Fqcm9xYlJOcXdRTTdhMC5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBARuA6AwDQYJKoZIhvcNAQELBQADggEBADDDHULxhWbbdN4qzzyyASkMXBUg
izhFYAMWSZ+twa2uEb5prJJ190wLU8Gs2ZQiQ3ewgjJel7Om1FUdaF9MCCYdPfZq
ZnSkEFWicLyGPhC/aY0Ydt35K2Lt2JK7DZBxZNJVphvoUZsEgAKGhhLtB/W1hsh0
YYbvyk092P9ZfrFH62WEOHCb8NKh6OUyrsaxfA8fpCS7XSPdov2yLSNq6uuHMpyT
xTP6my4IeCyeBW9QuW3bc+LlkTWBCk9vYbftHKuPdfL9SSWpWNhDYknbv28gOrEe
yOfRomAyiwrDt/FgaBgVcyJ8OgmOhy94On/TvX3SqJJvxojrKcZMa2tujBQ=
-----END CERTIFICATE-----
Generated at Sat May 17 19:37:42 2025 by rpki-client