Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/ZhVsHUMmxGVkdMYR8AkrJnxP2Bg.roa
File:                     ZhVsHUMmxGVkdMYR8AkrJnxP2Bg.roa (raw, json)
Hash identifier:          QUJWKSbyi5FrdgSgnxWuTN9NTJW/RwJn5xiqU+whlnE=
Subject key identifier:   66:15:6C:1D:43:26:C4:65:64:74:C6:11:F0:09:2B:26:7C:4F:D8:18
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0415
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/ZhVsHUMmxGVkdMYR8AkrJnxP2Bg.roa
Signing time:             Thu 01 May 2025 01:48:42 +0000
ROA not before:           Thu 01 May 2025 01:48:42 +0000
ROA not after:            Wed 15 Apr 2026 01:30:03 +0000
asID:                     10013
IP address blocks:        180.131.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 May 2025 18:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1045 (0x415)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: May  1 01:48:42 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=66156C1D4326C4656474C611F0092B267C4FD818
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:bf:df:28:07:e8:80:8b:7c:1a:19:6c:06:f1:
                    8c:96:17:03:77:9e:67:47:04:85:74:e5:d9:e9:e7:
                    ef:d5:13:bd:b7:04:17:34:2f:ee:72:c2:89:9c:ed:
                    7d:d5:8b:88:69:b9:49:12:57:e8:4c:9a:74:d2:86:
                    ae:64:59:b1:15:c6:ee:98:31:d6:3d:24:b8:5a:1f:
                    d8:3f:84:9e:77:3b:1a:43:7a:da:72:43:a1:70:c3:
                    05:f6:84:32:0c:c0:a3:33:0d:25:ee:71:57:ce:7e:
                    48:e5:da:82:ea:d7:52:c9:e7:8a:83:3f:df:6a:4d:
                    3d:f4:15:c2:a0:10:6e:b4:5a:9b:b5:ea:f4:b7:89:
                    07:9f:bb:33:bf:2c:e3:a5:b0:d4:70:95:73:29:4f:
                    0b:3e:44:f5:79:23:78:1e:4e:4e:54:62:f5:28:82:
                    46:87:00:7e:71:96:43:fd:93:46:fb:82:eb:7f:91:
                    ca:ad:01:38:69:e0:d0:7d:2a:22:1b:bc:73:df:a8:
                    34:45:98:0b:b1:ee:2a:c0:26:6c:58:60:1d:4c:76:
                    37:25:2e:14:09:7e:8d:b8:d0:cc:e2:8f:00:19:f2:
                    ac:38:66:98:15:91:be:d3:f5:c1:68:99:bd:ba:6c:
                    6d:9f:36:ab:9a:e5:3e:40:91:e8:c9:45:4b:70:9e:
                    da:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:15:6C:1D:43:26:C4:65:64:74:C6:11:F0:09:2B:26:7C:4F:D8:18
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/ZhVsHUMmxGVkdMYR8AkrJnxP2Bg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.131.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:17:14:ed:8f:b2:5f:db:c3:72:df:10:f0:72:34:e0:49:cb:
         e1:c0:1e:81:95:8e:3a:01:2e:08:ae:ff:9f:8d:ac:a0:90:54:
         c4:f8:d9:d5:88:04:31:ae:91:65:02:00:83:b2:49:bb:e0:5e:
         bb:7b:fa:61:58:59:5e:f3:33:cd:f4:43:96:a6:52:11:6a:ee:
         a5:26:00:31:eb:71:6f:f6:ed:f5:25:e1:33:71:38:f5:8e:5f:
         e8:ca:5f:e4:63:94:2e:98:0d:6a:7c:f6:c9:b9:ee:0c:e4:c4:
         06:00:76:49:9f:bf:d9:7d:cd:35:e4:b9:2e:0f:a5:3f:8c:83:
         b3:fb:3e:1b:26:29:57:62:df:e3:87:86:0f:57:37:7a:03:3a:
         8b:54:75:3b:52:f7:af:27:47:28:6c:fc:15:d8:66:75:12:2b:
         e2:14:2d:7f:79:ab:e8:e8:0b:f7:57:25:bf:63:9f:d8:e7:7f:
         91:b0:7b:73:5a:c2:3b:a3:46:5b:1c:03:35:40:14:a2:7d:25:
         7d:36:71:27:5a:46:65:79:30:b4:75:e3:45:57:1f:3e:ef:b3:
         68:43:f4:fd:a5:ec:36:44:c2:fd:44:b1:9c:99:3d:8e:49:21:
         c7:2a:c3:ac:01:28:bf:de:56:2b:6a:04:09:29:bb:a7:7a:72:
         6d:13:54:d5
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICBBUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3
MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNTA1MDEw
MTQ4NDJaFw0yNjA0MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDY2MTU2QzFENDMyNkM0
NjU2NDc0QzYxMUYwMDkyQjI2N0M0RkQ4MTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDDv98oB+iAi3waGWwG8YyWFwN3nmdHBIV05dnp5+/VE723BBc0
L+5ywomc7X3Vi4hpuUkSV+hMmnTShq5kWbEVxu6YMdY9JLhaH9g/hJ53OxpDetpy
Q6FwwwX2hDIMwKMzDSXucVfOfkjl2oLq11LJ54qDP99qTT30FcKgEG60Wpu16vS3
iQefuzO/LOOlsNRwlXMpTws+RPV5I3geTk5UYvUogkaHAH5xlkP9k0b7gut/kcqt
AThp4NB9KiIbvHPfqDRFmAux7irAJmxYYB1MdjclLhQJfo240MzijwAZ8qw4ZpgV
kb7T9cFomb26bG2fNqua5T5AkejJRUtwntpLAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUZhVsHUMmxGVkdMYR8AkrJnxP2BgwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp
qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR
Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzk0L1poVnNIVU1teEdWa2RNWVI4QWtySm54UDJCZy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAC0g3EwDQYJKoZIhvcNAQELBQADggEBABsXFO2Psl/bw3LfEPByNOBJy+HA
HoGVjjoBLgiu/5+NrKCQVMT42dWIBDGukWUCAIOySbvgXrt7+mFYWV7zM830Q5am
UhFq7qUmADHrcW/27fUl4TNxOPWOX+jKX+RjlC6YDWp89sm57gzkxAYAdkmfv9l9
zTXkuS4PpT+Mg7P7PhsmKVdi3+OHhg9XN3oDOotUdTtS968nRyhs/BXYZnUSK+IU
LX95q+joC/dXJb9jn9jnf5Gwe3NawjujRlscAzVAFKJ9JX02cSdaRmV5MLR140VX
Hz7vs2hD9P2l7DZEwv1EsZyZPY5JIccqw6wBKL/eVitqBAkpu6d6cm0TVNU=
-----END CERTIFICATE-----
Generated at Sat May 17 19:41:17 2025 by rpki-client