Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/fvNjXIUOmmj00K0pDF4Rt6LMGyo.roa
File:                     fvNjXIUOmmj00K0pDF4Rt6LMGyo.roa (raw, json)
Hash identifier:          MdeXVyluLTJ9ZhBqn/BDhAK57TG9y651WYfWtynQSaY=
Subject key identifier:   7E:F3:63:5C:85:0E:9A:68:F4:D0:AD:29:0C:5E:11:B7:A2:CC:1B:2A
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0377
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/fvNjXIUOmmj00K0pDF4Rt6LMGyo.roa
Signing time:             Thu 01 May 2025 01:33:31 +0000
ROA not before:           Thu 01 May 2025 01:33:31 +0000
ROA not after:            Wed 15 Apr 2026 01:30:03 +0000
asID:                     10013
IP address blocks:        119.150.104.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 May 2025 10:41:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 887 (0x377)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: May  1 01:33:31 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=7EF3635C850E9A68F4D0AD290C5E11B7A2CC1B2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:e6:fc:38:79:cc:be:bc:bc:49:68:71:54:e4:
                    22:8f:8c:7d:5e:a6:d6:f3:c7:09:23:6e:4d:37:61:
                    b1:9c:8a:76:62:39:60:05:c9:54:40:5d:17:8e:1e:
                    4c:dc:ac:a7:ac:98:5d:4e:23:7b:cc:c5:48:82:a1:
                    28:13:8d:79:9c:f7:16:d5:c0:21:a1:93:4e:53:e7:
                    df:6e:34:bd:d5:26:89:20:5a:30:b0:c9:16:de:ae:
                    29:ec:94:cb:73:15:5c:98:39:6d:af:4a:f8:b9:ce:
                    ee:03:d5:fe:bb:78:97:d1:01:82:3c:d9:76:35:35:
                    d6:12:fd:cc:1c:17:c0:73:7e:ee:23:50:b8:c3:a7:
                    b3:03:f2:9a:2e:6c:cf:c1:79:9a:0d:b4:2f:32:18:
                    2b:a9:56:52:1b:eb:a3:16:4f:e2:73:11:13:3c:1c:
                    8d:6f:30:7e:f1:db:62:b8:72:60:1c:ce:b7:74:9e:
                    5b:14:09:6d:60:25:5b:b3:6c:48:97:37:e7:b4:49:
                    2d:95:10:58:b3:f8:a1:06:2d:4a:fe:d6:5b:0a:46:
                    d0:36:5a:1e:7d:ec:ee:9e:48:cb:bd:11:fe:ee:3b:
                    e3:f5:a1:b5:e2:f0:c6:6f:33:81:9b:5c:7e:d3:1b:
                    ad:b9:2d:26:01:21:c0:7b:d5:36:49:37:3e:22:47:
                    26:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:F3:63:5C:85:0E:9A:68:F4:D0:AD:29:0C:5E:11:B7:A2:CC:1B:2A
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/fvNjXIUOmmj00K0pDF4Rt6LMGyo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.150.104.0/23

    Signature Algorithm: sha256WithRSAEncryption
         99:a7:94:60:e3:78:88:51:1f:ac:03:a7:2f:b4:f8:8c:98:b5:
         4c:9b:8a:d4:9c:85:47:cf:45:19:0c:c4:dc:1f:f1:a6:2a:56:
         07:50:91:e6:f0:94:3e:cb:bd:3c:50:79:04:b3:bf:8b:c4:4b:
         e9:cb:3c:e2:0e:0a:3d:d5:4b:6f:b3:0b:c8:a8:75:67:b1:ab:
         54:c7:a9:70:55:f6:8f:8f:5a:13:09:34:75:30:a0:40:3d:96:
         38:3f:23:57:df:53:df:d9:5a:c4:27:4c:dc:65:f3:56:6d:45:
         ec:16:8e:10:77:03:bc:48:de:d4:e4:7b:99:ab:e0:89:b8:27:
         6f:59:5c:3c:5f:e4:69:e3:4a:08:32:1c:4b:03:10:30:0f:d2:
         1a:b6:d2:48:53:03:72:53:4d:b1:3b:4a:76:24:d6:e4:00:b2:
         c6:43:87:d0:a6:b6:ec:19:a6:32:0d:a6:61:01:8e:c9:9b:5f:
         e8:75:3b:86:04:c7:aa:3c:cd:59:12:04:cf:a1:f6:e9:4d:b9:
         d6:4c:94:ca:53:45:5a:41:bb:e5:e1:07:2c:c5:d8:31:90:1b:
         4f:89:e9:5f:1e:ad:32:06:ff:4c:3d:75:f1:0a:01:6b:c2:60:
         77:08:34:dd:52:61:4a:08:d0:1d:4b:28:aa:31:3c:b6:f9:5c:
         cc:19:5e:a4
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICA3cwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3
MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNTA1MDEw
MTMzMzFaFw0yNjA0MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDdFRjM2MzVDODUwRTlB
NjhGNEQwQUQyOTBDNUUxMUI3QTJDQzFCMkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDQ5vw4ecy+vLxJaHFU5CKPjH1eptbzxwkjbk03YbGcinZiOWAF
yVRAXReOHkzcrKesmF1OI3vMxUiCoSgTjXmc9xbVwCGhk05T599uNL3VJokgWjCw
yRberinslMtzFVyYOW2vSvi5zu4D1f67eJfRAYI82XY1NdYS/cwcF8Bzfu4jULjD
p7MD8poubM/BeZoNtC8yGCupVlIb66MWT+JzERM8HI1vMH7x22K4cmAczrd0nlsU
CW1gJVuzbEiXN+e0SS2VEFiz+KEGLUr+1lsKRtA2Wh597O6eSMu9Ef7uO+P1obXi
8MZvM4GbXH7TG625LSYBIcB71TZJNz4iRyZvAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUfvNjXIUOmmj00K0pDF4Rt6LMGyowHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp
qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR
Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzk0L2Z2TmpYSVVPbW1qMDBLMHBERjRSdDZMTUd5by5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAF3lmgwDQYJKoZIhvcNAQELBQADggEBAJmnlGDjeIhRH6wDpy+0+IyYtUyb
itSchUfPRRkMxNwf8aYqVgdQkebwlD7LvTxQeQSzv4vES+nLPOIOCj3VS2+zC8io
dWexq1THqXBV9o+PWhMJNHUwoEA9ljg/I1ffU9/ZWsQnTNxl81ZtRewWjhB3A7xI
3tTke5mr4Im4J29ZXDxf5GnjSggyHEsDEDAP0hq20khTA3JTTbE7SnYk1uQAssZD
h9CmtuwZpjINpmEBjsmbX+h1O4YEx6o8zVkSBM+h9ulNudZMlMpTRVpBu+XhByzF
2DGQG0+J6V8erTIG/0w9dfEKAWvCYHcINN1SYUoI0B1LKKoxPLb5XMwZXqQ=
-----END CERTIFICATE-----
Generated at Sun May 18 12:27:12 2025 by rpki-client