Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/UzcZB1szCnukw3ooXocJCyQXD10.roa
File:                     UzcZB1szCnukw3ooXocJCyQXD10.roa (raw, json)
Hash identifier:          inyBfbOj6dVR82OSNd0Oo3ZzMA4XXszlmbcLKKPcstg=
Subject key identifier:   53:37:19:07:5B:33:0A:7B:A4:C3:7A:28:5E:87:09:0B:24:17:0F:5D
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       03FF
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/UzcZB1szCnukw3ooXocJCyQXD10.roa
Signing time:             Thu 01 May 2025 01:45:23 +0000
ROA not before:           Thu 01 May 2025 01:45:23 +0000
ROA not after:            Wed 15 Apr 2026 01:30:03 +0000
asID:                     10013
IP address blocks:        122.145.192.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 May 2025 18:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1023 (0x3ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: May  1 01:45:23 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=533719075B330A7BA4C37A285E87090B24170F5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:a8:e7:93:e6:c3:d6:96:90:5f:eb:a4:15:65:
                    a9:ae:43:1d:f7:2f:4f:1d:09:eb:c6:ba:0e:da:25:
                    1f:c4:af:6b:d2:b5:99:12:04:8a:c3:70:4e:f0:d4:
                    18:ad:21:4c:86:be:48:25:af:8e:11:ca:b5:7c:15:
                    4c:f4:40:70:cc:ac:2c:9c:98:28:e2:bb:88:9d:1f:
                    b0:e8:01:16:90:82:79:b4:22:ab:9d:44:14:d9:a1:
                    09:a9:68:7f:76:b5:98:41:6f:1d:b1:a8:07:f6:ac:
                    07:84:5d:fc:fc:6c:99:65:03:3e:52:31:a2:c7:e8:
                    b7:06:6d:f3:b8:9d:cf:8f:16:5a:a8:e0:0f:a4:a4:
                    b2:1f:1c:4a:11:b4:b5:17:5b:cc:ad:c0:3d:5a:e5:
                    ab:bc:8c:0d:bc:3e:ff:d5:a4:c8:fe:cf:58:ef:c9:
                    92:5a:6a:fd:32:12:46:51:99:59:18:9b:e2:07:b4:
                    69:c8:38:48:da:54:30:0e:2e:2f:c9:50:c6:04:bc:
                    dd:d4:e6:54:17:d4:e3:41:23:ac:8f:43:a5:b1:a4:
                    a8:2c:53:17:d2:1b:85:2c:4c:28:40:25:8e:ae:79:
                    3d:2d:22:f8:30:e4:25:ff:aa:78:2d:d1:9e:84:af:
                    0d:db:e1:6b:20:d7:1d:76:5f:6b:7f:0e:03:eb:65:
                    47:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:37:19:07:5B:33:0A:7B:A4:C3:7A:28:5E:87:09:0B:24:17:0F:5D
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/UzcZB1szCnukw3ooXocJCyQXD10.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.145.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         46:20:c6:e4:dc:70:5a:c3:8d:d0:c2:f3:8d:f5:a1:aa:a3:f0:
         c1:a9:8a:e0:f5:2f:56:80:99:d4:67:7d:25:0f:41:45:2f:5a:
         62:2f:ff:a7:7c:1e:b3:77:58:e2:bf:b2:54:d3:5b:9d:00:1f:
         0b:ba:66:7f:69:a9:75:7a:2d:66:29:11:0d:07:fd:26:ed:7f:
         54:eb:28:64:01:09:bd:3e:cb:3f:92:f1:1f:24:c3:64:3a:4c:
         d5:9f:fa:a2:aa:4f:3b:59:cc:f0:80:1d:3d:9c:6d:0e:16:7d:
         e5:eb:16:ed:78:9a:37:43:0b:48:c8:bf:be:32:35:19:be:ef:
         82:1d:80:f5:bf:f7:c5:5e:ee:f7:0e:01:4b:7c:69:67:d7:d2:
         97:be:2a:3a:82:99:a3:9f:ab:04:53:10:35:9c:21:28:e0:60:
         09:bf:4c:e4:9f:26:4d:20:f6:ac:51:68:f1:65:56:bb:4f:89:
         27:d0:55:3a:a0:b5:88:10:e3:44:73:e8:ac:3e:91:6f:18:3b:
         e8:38:b8:14:d2:f8:b6:f0:5b:fe:ec:72:5b:1c:aa:11:42:b9:
         19:86:52:ea:3e:9e:9a:6a:c4:04:e1:93:77:9f:08:84:99:66:
         90:7f:68:da:e9:bb:31:c7:88:fc:d2:88:23:7d:fd:2b:eb:3b:
         66:b2:4a:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 21:35:31 2025 by rpki-client