Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/ZQ_jHvvtXThB_8meSoz7zNVol4Y.roa
File:                     ZQ_jHvvtXThB_8meSoz7zNVol4Y.roa (raw, json)
Hash identifier:          f/UGkkbEOp2+P9afl6TmCAYFMPCCg3eMKVyXoAEFF2o=
Subject key identifier:   65:0F:E3:1E:FB:ED:5D:38:41:FF:C9:9E:4A:8C:FB:CC:D5:68:97:86
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       03C9
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/ZQ_jHvvtXThB_8meSoz7zNVol4Y.roa
Signing time:             Thu 01 May 2025 01:42:39 +0000
ROA not before:           Thu 01 May 2025 01:42:39 +0000
ROA not after:            Wed 15 Apr 2026 01:30:03 +0000
asID:                     10013
IP address blocks:        61.120.212.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 May 2025 18:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 969 (0x3c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: May  1 01:42:39 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=650FE31EFBED5D3841FFC99E4A8CFBCCD5689786
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:49:9f:ee:68:12:3e:4c:7f:ff:bd:51:04:3d:
                    f1:2d:12:98:ce:7b:5d:03:c6:95:5e:f4:e7:4e:a5:
                    4e:53:b6:c7:21:88:b5:80:bd:d0:68:0d:6b:15:4a:
                    4d:e6:16:92:9f:7d:7e:40:2f:a1:67:05:d6:5a:95:
                    32:2b:92:20:94:e2:d8:e3:6c:e6:2c:48:84:81:12:
                    f1:5e:04:9b:e9:ff:df:1b:65:7f:c1:12:51:c1:25:
                    b7:43:6a:6c:62:63:43:89:b0:13:b0:29:a5:56:58:
                    52:38:30:76:f2:00:66:d4:3e:44:a2:90:a2:7b:44:
                    9d:9c:c2:6a:34:7e:40:fd:4b:62:84:dc:20:ba:a5:
                    69:32:a0:a7:de:2a:67:c5:8a:0f:30:44:27:7d:db:
                    f5:50:3d:31:d4:1a:c9:10:02:7a:c0:91:fd:b7:ed:
                    9e:1f:5b:a2:6e:ea:81:20:c6:c0:be:c3:f2:1b:ee:
                    f4:68:25:58:15:d1:8f:bc:34:eb:f5:df:81:a8:97:
                    c6:f7:9c:61:e5:5a:e0:79:af:e7:57:9f:0b:e8:c8:
                    1a:88:8f:f4:16:a8:5f:52:68:04:d6:2c:54:18:1f:
                    03:da:13:e6:14:ff:26:00:5f:74:ba:80:38:a0:a6:
                    d1:94:68:eb:20:77:31:70:db:47:32:fb:91:8a:1b:
                    dd:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:0F:E3:1E:FB:ED:5D:38:41:FF:C9:9E:4A:8C:FB:CC:D5:68:97:86
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/ZQ_jHvvtXThB_8meSoz7zNVol4Y.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.120.212.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1a:1d:d6:72:17:d4:5f:18:80:45:94:9f:73:e7:a9:cb:b1:44:
         8b:b9:5f:a3:00:89:0f:50:e1:33:83:19:80:71:a5:d9:0a:c5:
         67:19:6c:05:a1:07:a7:4b:3c:fd:3f:2d:e4:f4:29:e9:8b:d8:
         26:a8:51:6e:73:e5:fa:ef:4a:56:c3:ba:b4:5a:55:a0:43:fd:
         7c:96:1c:04:bb:70:15:52:bb:cc:88:21:bb:5b:79:76:a4:4c:
         ad:ce:aa:d4:4f:52:a6:73:3f:56:df:72:05:c8:6d:3d:aa:a2:
         e1:16:83:7b:8b:d1:16:8f:8e:42:c5:30:b8:31:01:10:d5:0e:
         ab:cd:a8:48:45:a6:92:41:bf:fc:e5:2c:3a:e4:be:e7:62:a7:
         0a:13:ad:bf:b2:d6:c9:c1:12:d2:c4:4a:2a:6c:f5:e9:5d:c0:
         03:48:78:fc:18:3f:dd:b6:fa:10:b4:ba:f9:0d:42:01:0a:03:
         fa:bb:ce:65:f3:3b:ce:f2:3c:83:bd:64:f8:80:e0:e6:fc:4c:
         fe:42:d6:62:f6:c5:06:80:d8:7f:e6:c3:20:5c:45:67:64:62:
         ca:a8:61:4c:bc:9d:ba:ed:a0:6c:bb:cd:cc:f2:0d:65:d5:3b:
         6c:8c:9c:6c:ab:71:67:ed:8b:04:7b:e4:0d:14:38:8f:a0:e4:
         e1:eb:f3:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 21:29:24 2025 by rpki-client