Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/lwY7oniGpUnbfPBGxIkOzVg4GdE.roa
File:                     lwY7oniGpUnbfPBGxIkOzVg4GdE.roa (raw, json)
Hash identifier:          9H79KBhxQ83TR4xx1CavN9IMa2C6NREs4nOwZJE3ljE=
Subject key identifier:   97:06:3B:A2:78:86:A5:49:DB:7C:F0:46:C4:89:0E:CD:58:38:19:D1
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       039E
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/lwY7oniGpUnbfPBGxIkOzVg4GdE.roa
Signing time:             Thu 01 May 2025 01:37:35 +0000
ROA not before:           Thu 01 May 2025 01:37:35 +0000
ROA not after:            Wed 15 Apr 2026 01:30:03 +0000
asID:                     10013
IP address blocks:        175.103.128.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 May 2025 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 926 (0x39e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: May  1 01:37:35 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=97063BA27886A549DB7CF046C4890ECD583819D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:34:d2:ca:ee:13:29:0d:fc:be:61:a7:7f:e0:
                    e8:21:07:c7:4b:b4:5f:c4:c5:86:75:9a:a1:2d:b2:
                    cd:aa:95:78:19:79:89:bf:c9:51:41:b1:44:8a:d8:
                    38:cf:a2:ca:58:e3:33:87:e4:57:5f:93:71:e6:ad:
                    f2:07:47:bc:31:e0:44:9c:0e:34:3d:03:c3:90:ef:
                    e2:e6:5e:88:e5:07:59:bb:05:1a:cf:65:39:3a:62:
                    11:86:de:36:76:15:bb:f1:f9:f1:19:c0:71:dc:8b:
                    8f:53:07:4b:14:0f:d6:fc:06:58:db:f7:09:82:3d:
                    a8:1e:65:d2:ba:ca:f0:13:2c:5f:88:d1:a3:03:08:
                    f3:54:da:ca:fc:2b:5a:8f:29:aa:c9:70:31:bf:fa:
                    0f:d1:29:3d:f3:51:84:82:29:70:ac:0a:b6:85:48:
                    ea:a2:ae:6e:f2:2a:de:ab:30:e9:c9:86:88:f6:92:
                    e5:ee:08:a9:1a:4f:91:e7:86:f6:da:8b:e4:2b:3b:
                    ba:a0:13:ef:76:02:54:c1:92:1a:d8:95:62:fc:d0:
                    a4:35:50:6a:6c:e8:ea:4c:4c:d2:e6:6c:49:d1:c9:
                    a5:39:b6:81:49:99:88:29:16:b4:80:7d:80:26:44:
                    66:68:d4:f9:6c:18:7f:d3:7a:61:af:e5:2a:c4:3c:
                    cb:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:06:3B:A2:78:86:A5:49:DB:7C:F0:46:C4:89:0E:CD:58:38:19:D1
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/lwY7oniGpUnbfPBGxIkOzVg4GdE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.103.128.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9a:e0:4e:1a:23:24:b5:d1:1e:f9:ea:d5:1b:f3:db:fb:81:53:
         bd:88:5e:5e:47:59:cc:46:1f:c8:f2:5f:39:bc:39:9d:20:cf:
         d2:1b:f6:54:e6:05:ad:7a:b1:f0:6a:7c:eb:fd:e2:69:80:fc:
         1e:6b:a2:da:b4:06:f1:c7:96:2b:51:f7:06:f8:4d:5f:55:36:
         ab:94:13:7e:91:18:ef:0d:e0:82:f1:af:0c:8a:1f:88:4c:2f:
         2c:46:40:1e:19:00:6c:3b:8a:92:83:11:ca:a2:93:27:a2:bc:
         8c:38:9d:1a:8e:02:95:31:6b:ef:aa:30:c0:93:3c:03:18:ee:
         aa:d7:62:5e:1d:16:c6:42:77:ee:59:3d:cd:31:57:a3:d3:6c:
         ae:ae:b0:05:17:33:bd:c8:43:ad:9f:ea:50:41:4c:d9:07:70:
         da:21:8f:51:ac:d2:2d:47:8d:31:ae:81:0c:92:6d:e2:ad:f0:
         b3:30:63:aa:cd:d7:82:76:ad:bf:16:da:f5:c0:7f:50:61:e5:
         83:e4:87:de:36:98:d1:43:5f:76:b9:76:6a:df:fe:e7:1f:70:
         ab:7b:07:57:f0:4c:cc:4f:8f:e2:fa:f7:e1:1a:9e:d5:d9:b2:
         bc:00:b6:16:93:99:05:ea:e4:03:58:71:0a:5c:1c:07:5f:3d:
         e7:06:75:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 12:24:20 2025 by rpki-client