Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/Rr47BfrTqyzOfhBDsOHeOHu7x1g.roa
File:                     Rr47BfrTqyzOfhBDsOHeOHu7x1g.roa (raw, json)
Hash identifier:          z439oHS1eyGLmziBQ7W7s0/ISFXA+M+yE8N0jMP2t5w=
Subject key identifier:   46:BE:3B:05:FA:D3:AB:2C:CE:7E:10:43:B0:E1:DE:38:7B:BB:C7:58
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       03A1
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/Rr47BfrTqyzOfhBDsOHeOHu7x1g.roa
Signing time:             Thu 01 May 2025 01:37:36 +0000
ROA not before:           Thu 01 May 2025 01:37:36 +0000
ROA not after:            Wed 15 Apr 2026 01:30:03 +0000
asID:                     10013
IP address blocks:        110.3.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 May 2025 06:43:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 929 (0x3a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: May  1 01:37:36 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=46BE3B05FAD3AB2CCE7E1043B0E1DE387BBBC758
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:06:db:14:31:38:a6:d2:a1:45:c5:22:dd:56:
                    fb:d1:14:16:0b:c9:a1:a1:02:ca:c1:cd:1d:d4:b5:
                    49:2e:9a:6e:c9:0a:a0:cc:f1:a5:dd:73:2b:d3:fe:
                    c7:96:e7:c2:44:b1:7f:d8:3d:35:04:7a:41:5b:d7:
                    76:b5:d2:de:b3:bc:99:27:6f:fc:31:e5:91:45:82:
                    8b:f3:b7:d2:85:50:99:b3:11:d8:07:c7:72:9d:6a:
                    57:f7:53:f2:b6:12:de:d5:ba:7a:1a:c7:1a:55:b0:
                    c7:84:2d:0a:ab:8f:fe:cb:a7:aa:ae:c6:51:c9:3e:
                    aa:2d:59:4d:bd:13:ea:bc:7c:25:e5:34:09:29:dd:
                    23:b8:b9:d5:69:4f:ef:05:0a:67:8b:5b:d0:8a:bf:
                    1e:aa:3f:d7:be:e7:ce:e2:a5:87:37:8d:a0:55:7e:
                    56:6a:22:72:df:13:dd:68:95:c6:66:4c:b1:80:4a:
                    1a:29:c2:ff:a3:69:05:3a:e8:60:15:ec:96:a3:49:
                    65:bf:e0:95:fc:36:5e:5e:85:8a:3e:38:67:44:9a:
                    f6:53:76:2a:36:54:07:e1:cc:ed:21:f9:90:96:f1:
                    d0:af:f0:67:ab:a3:55:1a:e2:e5:7c:50:d0:1c:b8:
                    19:98:ab:89:f3:8c:5a:19:17:47:01:f4:f4:83:c8:
                    b8:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:BE:3B:05:FA:D3:AB:2C:CE:7E:10:43:B0:E1:DE:38:7B:BB:C7:58
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/Rr47BfrTqyzOfhBDsOHeOHu7x1g.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.3.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         77:49:03:07:f3:3f:b1:59:c2:cc:07:bd:f3:4e:25:82:e6:4a:
         44:84:98:10:42:d3:b9:bb:6f:40:88:c9:85:c9:9a:b2:5c:c7:
         95:38:70:3d:74:45:15:7d:fa:c1:78:17:05:f9:e0:09:c6:f4:
         ad:ad:33:6f:1c:3a:1d:75:f2:44:40:b6:fe:97:1c:f1:97:1c:
         f5:8c:76:f1:c6:59:e9:a8:bd:39:2f:74:16:bd:ed:4c:18:9a:
         55:82:a7:c7:c1:83:19:a2:94:5d:cd:a9:f0:54:0a:9e:31:a8:
         b8:e9:3c:14:28:71:a0:a3:0c:8e:e3:e1:85:57:e2:7a:a0:a3:
         de:af:15:9d:2e:35:44:c1:94:26:dd:aa:31:68:36:5d:65:55:
         6d:dd:dd:8c:45:f7:c1:ad:30:21:21:58:85:50:da:c7:82:ef:
         fd:0a:05:ab:10:e5:2e:1d:37:12:d3:82:54:e4:a5:e8:fb:ae:
         0d:60:d9:78:6f:d5:cb:f3:59:c8:29:6e:64:76:08:55:28:b2:
         a9:db:92:3f:01:4c:18:2f:89:89:7d:47:2d:74:c6:95:bc:61:
         94:d8:3a:e9:f0:3c:28:a2:c7:74:0b:73:c1:06:db:65:19:13:
         4a:7a:17:23:63:80:df:30:7a:78:fe:4f:f2:cb:8f:94:12:56:
         83:b2:54:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 19 10:30:30 2025 by rpki-client