Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/XZNncYFjQhU4VuIHy-Zx6AREM78.roa
File:                     XZNncYFjQhU4VuIHy-Zx6AREM78.roa (raw, json)
Hash identifier:          3Qyq0Q5XnNJ1H1ZrIvEMougS3Ae7GLWZflkCdiu3MN4=
Subject key identifier:   5D:93:67:71:81:63:42:15:38:56:E2:07:CB:E6:71:E8:04:44:33:BF
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0428
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/XZNncYFjQhU4VuIHy-Zx6AREM78.roa
Signing time:             Thu 01 May 2025 01:48:50 +0000
ROA not before:           Thu 01 May 2025 01:48:50 +0000
ROA not after:            Wed 15 Apr 2026 01:30:03 +0000
asID:                     10013
IP address blocks:        180.131.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 May 2025 18:22:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1064 (0x428)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: May  1 01:48:50 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=5D936771816342153856E207CBE671E8044433BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:bb:fb:f0:11:6a:dd:0b:20:f3:f8:5b:47:2a:
                    71:b2:14:c7:d6:a5:9c:c5:0e:0f:95:16:e2:c1:69:
                    7e:1c:19:41:4d:84:ee:ed:8d:4c:7b:e6:27:44:2f:
                    97:78:67:ec:15:d1:29:22:50:a5:23:90:ea:05:80:
                    f6:9f:62:c0:ce:f2:4b:25:da:27:1a:cf:fd:21:fa:
                    c5:a3:4f:fa:06:70:6d:e8:78:07:06:d3:0e:e8:8d:
                    bd:95:7e:1b:49:2e:a1:bc:6d:fb:eb:2e:8e:5d:32:
                    ec:34:b2:5d:44:10:9e:da:e6:87:47:ad:cf:cb:cd:
                    49:1e:e8:69:1e:2c:50:7c:fc:bc:5e:db:74:e7:61:
                    53:d0:ca:c9:08:9b:13:44:b2:18:02:0f:5a:83:15:
                    86:67:7b:f9:1a:5c:99:2c:6a:cc:50:3c:84:16:1d:
                    c0:08:79:ec:45:f6:1b:f7:26:36:ef:11:b0:67:46:
                    2c:6b:18:dc:84:9a:3a:01:60:85:56:ef:02:9f:d2:
                    a0:02:1d:71:e0:56:96:a5:d2:51:54:1a:8a:2b:ce:
                    58:04:7a:f9:f2:ed:cb:21:e2:8a:af:ee:68:c4:fe:
                    e0:91:00:54:aa:98:1e:5a:4d:cb:07:31:f8:36:ca:
                    e7:e2:d7:b2:bf:0b:3c:24:c5:6e:46:32:85:c7:a5:
                    06:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:93:67:71:81:63:42:15:38:56:E2:07:CB:E6:71:E8:04:44:33:BF
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/XZNncYFjQhU4VuIHy-Zx6AREM78.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.131.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:bf:94:cc:44:d5:06:c8:b0:7f:0f:6c:0b:96:d9:f3:33:05:
         a2:e2:35:45:1a:96:00:d6:02:94:a8:07:e6:d9:cd:17:de:03:
         1c:81:31:ce:42:a2:c9:b6:28:cf:a9:69:60:2b:fb:14:62:ba:
         db:08:ea:39:ba:3b:96:db:d7:36:52:3e:f9:3c:60:8e:57:ca:
         cb:4b:9a:8a:c4:e7:fd:14:63:df:c0:05:05:1c:94:3c:57:3f:
         ff:3a:bf:6a:a3:37:a2:41:8a:a5:e7:fd:21:db:1a:ce:a2:3a:
         ff:ea:ef:72:8b:bc:99:af:b5:ef:9c:3a:22:1c:6f:be:39:94:
         e4:17:54:56:70:b3:09:51:bd:44:b2:03:df:b1:8b:f8:d9:e5:
         dd:de:19:93:6d:da:0c:e2:33:ad:d7:f2:2d:c6:68:aa:68:38:
         0e:11:99:19:1b:86:7c:86:89:0e:51:b1:47:4d:4a:0b:7c:aa:
         22:75:4d:09:f3:e5:02:13:11:36:0c:69:fb:ac:1d:37:7b:c9:
         46:04:fc:48:8a:92:1b:c4:c8:46:63:91:c8:db:ba:0b:1d:4f:
         ad:c5:00:7f:75:7e:ae:b1:7c:da:0c:01:5f:a9:89:99:55:a4:
         6b:0f:f8:a2:81:5c:11:4d:67:b7:08:70:63:43:ba:f5:51:7a:
         b5:9d:2a:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 22:36:12 2025 by rpki-client