Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/WKizomFXWe2wIviLDTGfc7b-o-w.roa
File:                     WKizomFXWe2wIviLDTGfc7b-o-w.roa (raw, json)
Hash identifier:          Ekkh/YJWQgt0uqNtUf6TTD1zgoDqGiHJMUza/14h3qk=
Subject key identifier:   58:A8:B3:A2:61:57:59:ED:B0:22:F8:8B:0D:31:9F:73:B6:FE:A3:EC
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       03F8
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/WKizomFXWe2wIviLDTGfc7b-o-w.roa
Signing time:             Thu 01 May 2025 01:45:19 +0000
ROA not before:           Thu 01 May 2025 01:45:19 +0000
ROA not after:            Wed 15 Apr 2026 01:30:03 +0000
asID:                     10013
IP address blocks:        111.235.0.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 May 2025 21:45:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1016 (0x3f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: May  1 01:45:19 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=58A8B3A2615759EDB022F88B0D319F73B6FEA3EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:f4:1f:0a:e6:2b:8e:63:5f:1c:7f:aa:57:b9:
                    cb:62:05:91:20:01:b7:31:e9:ec:55:0a:59:fb:39:
                    c2:2f:35:50:4c:54:a5:7c:57:f2:e2:43:d8:9c:cc:
                    14:81:06:1e:50:e2:52:d9:9c:a5:5b:34:ee:e0:fe:
                    a0:9a:7e:e5:f6:cc:de:a9:87:e4:10:3b:97:99:fc:
                    c8:b6:b3:a7:96:f1:df:56:af:65:5b:b2:45:2e:d8:
                    37:52:1a:07:92:3e:19:aa:ce:2e:1e:55:fc:7d:5c:
                    96:ca:f2:54:79:7e:18:a5:91:86:a3:61:bc:84:6b:
                    06:04:b2:aa:28:a3:82:b2:7e:cb:9e:c7:56:51:96:
                    d6:ca:88:c4:ff:39:17:3c:76:74:cf:56:54:68:06:
                    f5:6c:22:df:6f:97:e4:e4:e7:e1:08:87:fd:cf:b4:
                    e6:ab:1b:3d:2b:26:33:2a:05:d1:24:fe:c1:11:e1:
                    ae:75:0b:77:dc:c5:97:80:71:f1:af:89:b1:9d:78:
                    e9:41:6a:89:b7:76:8d:03:94:9c:1b:71:08:51:d7:
                    28:9a:98:31:ec:50:8d:3e:83:7b:5d:49:27:5b:06:
                    7e:a0:55:82:96:bd:ed:9f:03:70:b9:2f:d7:1a:9c:
                    41:17:e6:52:c5:1c:d0:fb:22:a8:f7:8e:52:97:a3:
                    92:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:A8:B3:A2:61:57:59:ED:B0:22:F8:8B:0D:31:9F:73:B6:FE:A3:EC
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/WKizomFXWe2wIviLDTGfc7b-o-w.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.235.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         15:50:00:6d:e5:aa:90:f9:c7:05:eb:00:2f:c4:95:72:e0:a8:
         24:52:aa:9f:b2:a3:ab:a2:ab:5e:61:dd:86:1c:78:eb:fc:83:
         c1:37:54:82:a5:06:47:61:94:d7:83:8e:a1:1a:8e:de:69:8b:
         3d:45:c8:1f:52:19:a8:47:ba:03:1d:fd:54:c2:6c:90:58:05:
         c7:87:43:bb:94:f9:c2:82:c1:d5:00:53:c4:ee:5c:1d:29:4d:
         dc:21:6f:aa:21:67:74:34:44:f8:b0:e2:1c:17:b9:dc:14:8a:
         16:f9:ac:5d:ea:0a:5d:2b:ff:1b:7e:89:34:58:01:3b:55:7d:
         06:56:5e:8c:05:75:83:82:3d:97:f0:c5:c1:23:34:99:f7:7b:
         9a:07:d2:35:cc:ff:13:f1:0e:e4:14:30:36:c8:8e:db:e8:f4:
         86:13:f7:60:44:d7:13:f7:e8:40:c5:3a:d0:96:77:7b:9b:97:
         c0:22:a4:6f:db:94:21:12:b5:d5:df:ff:49:80:76:97:b4:80:
         a1:b2:47:db:e0:ce:18:c2:9d:ba:66:a5:1a:7b:98:e5:eb:43:
         57:9d:46:1a:e8:3b:0b:8d:22:73:43:cc:db:08:49:95:3b:f3:
         aa:01:ef:69:8a:75:cf:53:8a:c8:54:a4:e4:a0:f9:f2:20:0a:
         85:29:df:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 23:38:31 2025 by rpki-client