Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/eYRZJsD2jNkE5vAcWeGGVaKGJWI.roa
File:                     eYRZJsD2jNkE5vAcWeGGVaKGJWI.roa (raw, json)
Hash identifier:          U6eU/XVDH1F6rxPM+xcly+SclPn/BQoGak8u2blzHsg=
Subject key identifier:   79:84:59:26:C0:F6:8C:D9:04:E6:F0:1C:59:E1:86:55:A2:86:25:62
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0420
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/eYRZJsD2jNkE5vAcWeGGVaKGJWI.roa
Signing time:             Thu 01 May 2025 01:48:46 +0000
ROA not before:           Thu 01 May 2025 01:48:46 +0000
ROA not after:            Wed 15 Apr 2026 01:30:03 +0000
asID:                     10013
IP address blocks:        182.236.16.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 May 2025 21:45:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1056 (0x420)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: May  1 01:48:46 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=79845926C0F68CD904E6F01C59E18655A2862562
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:9b:5c:86:9f:a5:14:19:2f:31:ea:05:5e:48:
                    91:8d:f1:e9:25:d5:db:74:a9:e7:8e:a6:b6:68:85:
                    fe:4f:8f:41:50:24:4b:8d:93:e5:2c:16:e9:9d:24:
                    45:b2:cd:2f:58:c7:d0:3f:6b:d3:72:ed:8a:9f:5a:
                    bf:98:c8:09:03:ab:9e:ce:09:2b:4b:f8:ef:37:3a:
                    3e:3c:fb:8e:bc:97:44:90:d2:35:7d:75:cc:72:ad:
                    02:55:9f:c6:54:af:83:a5:c5:1f:e8:2b:43:ae:48:
                    bb:ce:3f:e4:1d:50:bd:ae:3e:3c:5a:7d:9a:1b:1f:
                    43:e5:79:d9:1c:94:60:33:2f:60:5b:10:9d:e8:bd:
                    fc:59:01:83:e7:69:0b:bb:cb:eb:22:98:06:56:75:
                    89:92:e2:f1:99:c9:1d:2f:a9:34:47:c5:08:fa:e0:
                    d9:15:9c:e6:4f:b3:90:1a:66:ea:ff:16:98:3a:cd:
                    08:2f:1f:52:8f:b5:bc:68:89:50:20:bf:71:d5:06:
                    46:0f:c6:c6:a5:42:1c:2e:37:4e:ea:4c:97:33:c6:
                    87:b6:90:5d:b2:2b:d2:28:b7:48:a7:97:c0:08:5b:
                    29:4d:6c:13:02:68:f9:5f:b1:08:9f:49:f0:98:3a:
                    b5:65:fb:ae:e8:4d:08:7d:05:9a:f2:a7:bb:d0:bd:
                    40:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:84:59:26:C0:F6:8C:D9:04:E6:F0:1C:59:E1:86:55:A2:86:25:62
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/eYRZJsD2jNkE5vAcWeGGVaKGJWI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.236.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         32:b4:bc:fb:dd:45:4f:5c:2e:3f:73:ca:3d:08:e1:de:eb:00:
         2c:9d:11:39:d9:9a:d5:96:4f:d0:76:b8:2a:39:fa:0e:56:37:
         74:b5:f3:d0:67:9d:f7:2c:2e:7d:66:d6:43:f0:1e:80:ba:4f:
         0e:c2:48:b5:2e:78:c9:cf:0e:15:97:c2:e9:82:cc:a8:20:4a:
         04:a1:6a:50:c9:7f:f9:59:a3:82:4a:9c:59:df:87:72:42:93:
         de:44:12:72:ec:6e:f9:2e:3c:6f:1d:6d:05:4a:ab:b2:9f:f9:
         fd:8b:93:f2:ad:92:34:b1:40:4f:df:94:73:c8:5c:fc:e9:70:
         8c:fd:93:4e:60:7e:2b:30:e8:22:7c:d6:e7:15:f5:9d:59:3f:
         9d:8c:b6:1a:77:e6:5c:3c:58:30:1a:82:23:52:50:67:96:34:
         94:30:78:7d:7e:8b:5e:24:55:8d:74:e9:8d:3b:9e:2b:7b:53:
         61:df:15:3b:60:86:bf:7b:d6:60:44:20:20:8d:e9:af:f7:26:
         37:e1:dc:22:72:a7:94:72:0a:f6:ab:f5:8a:ae:6c:96:0d:ba:
         9f:28:33:43:84:29:6b:34:dd:51:c8:11:cc:22:57:3a:df:11:
         93:59:b7:90:34:01:95:f2:85:34:a2:31:b2:60:67:2e:69:24:
         50:18:dc:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 02:05:21 2025 by rpki-client