Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/Wqx-N6gJXNeu916_S51Pqxcx9R4.roa
File:                     Wqx-N6gJXNeu916_S51Pqxcx9R4.roa (raw, json)
Hash identifier:          hm4ge0q33Xo6tOYQTI+7agXjjXqusOxF6aU1jZrnDGk=
Subject key identifier:   5A:AC:7E:37:A8:09:5C:D7:AE:F7:5E:BF:4B:9D:4F:AB:17:31:F5:1E
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       03B3
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/Wqx-N6gJXNeu916_S51Pqxcx9R4.roa
Signing time:             Thu 01 May 2025 01:40:30 +0000
ROA not before:           Thu 01 May 2025 01:40:30 +0000
ROA not after:            Wed 15 Apr 2026 01:30:03 +0000
asID:                     10013
IP address blocks:        27.135.32.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 May 2025 21:45:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 947 (0x3b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: May  1 01:40:30 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=5AAC7E37A8095CD7AEF75EBF4B9D4FAB1731F51E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:b1:88:f6:a1:7f:ee:34:ed:46:9f:d9:37:b7:
                    bd:42:57:28:99:95:86:43:b6:cd:d4:51:b2:bc:05:
                    c2:03:0b:6c:7b:f3:e3:2d:29:08:a4:dd:f9:86:da:
                    9a:a3:70:16:3f:1d:4b:d3:0c:c6:f5:05:1e:93:d8:
                    09:a1:d6:9c:9a:9e:11:47:59:82:a0:81:71:23:93:
                    e6:76:34:a8:38:14:bb:c6:20:1c:75:31:c6:0f:63:
                    95:25:9e:ed:e0:88:20:0d:95:d2:87:18:a9:1c:af:
                    9a:a6:83:2d:ff:d5:60:67:1f:30:0a:10:43:f2:03:
                    3e:71:a3:bd:01:95:0c:17:84:82:8d:e1:a9:45:41:
                    d1:0c:6a:c0:a1:74:15:51:0c:f9:08:8a:c6:bc:a3:
                    7d:1e:4a:3c:c7:5e:68:78:00:94:15:fa:de:08:07:
                    d5:e8:c9:a3:af:f0:c2:aa:ac:7e:7b:d0:9f:e2:ba:
                    56:01:d0:86:d3:08:a8:ea:44:6e:35:5c:e4:fa:ad:
                    b9:db:d5:72:53:39:b7:d8:c1:ff:a9:76:1d:6f:47:
                    0c:b0:43:1e:d4:84:8d:20:b3:78:5c:e8:cd:29:b8:
                    ac:41:99:f0:f6:24:1c:f9:9b:b3:59:8f:97:9f:b4:
                    c9:fc:de:1c:7f:f7:6e:d6:7c:90:5f:63:90:53:9d:
                    8b:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:AC:7E:37:A8:09:5C:D7:AE:F7:5E:BF:4B:9D:4F:AB:17:31:F5:1E
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/Wqx-N6gJXNeu916_S51Pqxcx9R4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.135.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         68:64:7a:39:e9:e1:33:c1:35:34:43:4a:83:98:3d:f6:c6:79:
         ed:ff:29:94:4a:6f:72:dc:05:f0:18:f3:2f:ee:5b:85:fa:0c:
         d8:a5:c4:2e:02:e8:c5:e4:75:88:4d:8f:1b:bf:85:36:a7:30:
         82:44:57:35:44:4e:20:e7:26:0b:aa:1b:ed:0d:87:ac:6f:59:
         82:bd:55:0f:c5:26:cf:b5:6a:da:93:d9:5d:4b:db:2b:4d:99:
         1f:0e:0c:13:65:4a:a4:92:ee:f3:02:33:52:dc:2d:02:43:80:
         93:87:9e:ea:6e:82:ce:cc:db:fa:cc:eb:8f:89:07:c7:4b:75:
         32:21:d7:d5:55:99:31:23:99:08:11:69:79:3c:a8:52:bd:84:
         2d:de:8c:34:3c:84:17:3f:18:35:f8:84:5b:3a:d5:ad:c0:19:
         4f:b7:21:b8:5e:91:5c:b7:83:8f:2f:c9:f5:7f:2a:ac:9f:d8:
         1f:ac:50:41:73:25:69:c1:bf:b6:90:8b:55:5a:66:fb:7a:1a:
         16:2b:0d:34:59:d9:dc:67:2e:62:b5:98:93:f9:be:96:31:19:
         5c:cf:91:9e:8c:0a:7f:54:23:f3:02:83:c4:60:16:b5:6d:8a:
         73:10:eb:27:2f:9d:3b:77:7e:bf:aa:60:3c:08:ac:e5:c2:1c:
         6c:57:71:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 23:22:32 2025 by rpki-client