Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/ll_i9FG02eWEiBL6zJhK-Zumiy4.roa
File:                     ll_i9FG02eWEiBL6zJhK-Zumiy4.roa (raw, json)
Hash identifier:          N4hi/9P2cM79DvgGaX5QKRglfC2bqE/68yKQSXvJrVE=
Subject key identifier:   96:5F:E2:F4:51:B4:D9:E5:84:88:12:FA:CC:98:4A:F9:9B:A6:8B:2E
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0423
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/ll_i9FG02eWEiBL6zJhK-Zumiy4.roa
Signing time:             Thu 01 May 2025 01:48:47 +0000
ROA not before:           Thu 01 May 2025 01:48:47 +0000
ROA not after:            Wed 15 Apr 2026 01:30:03 +0000
asID:                     10013
IP address blocks:        218.225.244.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 May 2025 18:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1059 (0x423)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: May  1 01:48:47 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=965FE2F451B4D9E5848812FACC984AF99BA68B2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:14:20:80:8d:35:fb:10:0a:7d:22:b5:49:4e:
                    e1:66:78:4b:0d:f4:75:b2:00:0f:e4:8e:69:03:b5:
                    22:dc:fe:99:d1:12:ab:ed:ff:c5:32:20:57:ef:4c:
                    1c:96:68:04:4b:b7:b2:ec:9c:d6:1a:62:f5:1d:4f:
                    01:64:1c:79:c9:cc:ec:65:e2:5f:ad:aa:ec:72:69:
                    d4:58:d6:4a:d0:4f:0e:3e:ee:52:96:08:85:b6:1d:
                    78:24:67:ae:dd:3c:05:07:66:d6:8c:e5:cf:04:f5:
                    90:ce:51:37:c6:5f:d8:81:0a:4e:9a:b4:69:63:bc:
                    1a:9c:2d:87:d0:3f:3c:bf:8a:b6:56:70:f9:1a:df:
                    93:78:59:8d:7f:d1:d2:73:c0:5d:5c:48:d2:ff:7d:
                    e1:52:da:07:4e:c9:c0:1a:14:6c:40:fb:ff:a0:72:
                    e6:10:33:89:17:31:47:0a:b1:fc:2a:5f:ac:db:ac:
                    77:06:5f:c4:dc:63:1f:3c:53:28:43:52:4e:6b:4e:
                    ca:2b:fb:10:3c:43:f8:02:12:e6:92:9f:4c:fa:42:
                    f7:29:ca:1a:5e:29:de:8d:be:06:0c:03:18:83:c0:
                    b2:44:a0:c5:5f:18:a0:3d:5d:bd:7b:64:f3:10:20:
                    54:c6:83:72:77:df:0f:87:16:28:54:98:23:9b:83:
                    80:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:5F:E2:F4:51:B4:D9:E5:84:88:12:FA:CC:98:4A:F9:9B:A6:8B:2E
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/ll_i9FG02eWEiBL6zJhK-Zumiy4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.225.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4b:d5:ac:9c:8e:52:5a:be:cc:a6:c9:8f:ca:a5:16:27:7f:91:
         78:94:23:ce:19:21:96:a2:61:05:a6:75:04:21:e1:5f:2d:7b:
         9f:99:60:58:93:d8:a8:c8:d8:a6:39:a8:d5:81:6e:dc:3e:79:
         b2:02:ce:c1:a0:7f:af:21:4e:1f:ec:1c:3c:40:d5:75:29:ed:
         4e:da:6e:dd:f4:5a:08:36:70:be:b7:e2:71:df:3b:60:b8:7f:
         86:5d:0f:ef:46:15:00:73:8d:cc:f4:4a:28:f2:1b:cf:8d:33:
         5c:6c:e7:fb:46:ac:65:6a:13:bd:29:d7:6e:32:38:3a:94:77:
         1e:a5:0a:19:0c:0b:56:70:92:cb:6e:1b:c9:53:f6:2d:dd:c2:
         b8:ba:42:8b:da:60:72:8b:95:b1:0f:5d:3d:5b:64:05:b9:9f:
         4d:d2:8d:68:d5:34:4f:eb:2b:fd:d6:d8:d2:5c:fe:b9:db:b8:
         2d:c9:62:02:5a:6c:0b:a5:55:7a:69:cb:58:07:a5:e1:69:52:
         7e:3d:14:ea:3e:82:06:12:1d:e2:84:04:c9:b5:15:a8:e5:1a:
         2d:f8:ab:c0:34:c6:2a:94:12:e6:5d:d8:7f:ee:80:fb:ec:5c:
         92:7e:05:2d:3a:a2:0f:7c:f2:51:e3:95:34:25:bd:b8:33:4e:
         ad:20:fc:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 21:52:57 2025 by rpki-client