Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/pjb5TU_yTI9I-d995GIlrN3-sNI.roa
File:                     pjb5TU_yTI9I-d995GIlrN3-sNI.roa (raw, json)
Hash identifier:          bIv1jhOayTPenGu5jDdwP0PnpGMTmRxNzk6VIkdOXZU=
Subject key identifier:   A6:36:F9:4D:4F:F2:4C:8F:48:F9:DF:7D:E4:62:25:AC:DD:FE:B0:D2
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0409
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/pjb5TU_yTI9I-d995GIlrN3-sNI.roa
Signing time:             Thu 01 May 2025 01:45:27 +0000
ROA not before:           Thu 01 May 2025 01:45:27 +0000
ROA not after:            Wed 15 Apr 2026 01:30:03 +0000
asID:                     10013
IP address blocks:        122.145.116.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 May 2025 18:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1033 (0x409)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: May  1 01:45:27 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=A636F94D4FF24C8F48F9DF7DE46225ACDDFEB0D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:82:4f:e4:7f:5b:d3:f8:d6:cd:d0:2e:9f:7e:
                    69:7f:73:82:17:57:fc:b9:d5:8c:d0:a6:7a:58:b7:
                    2f:53:23:20:9b:24:a4:38:ee:0f:d3:55:aa:21:23:
                    09:6e:07:02:92:c9:86:0c:72:8b:89:be:3c:93:02:
                    47:15:2f:df:c9:14:b7:b3:73:3b:98:0d:23:06:9e:
                    2f:ba:65:d4:f8:c8:2c:57:3a:da:3d:f3:b8:f0:b4:
                    a3:ff:49:47:fb:b7:5b:e6:e5:f2:f6:3a:df:36:2e:
                    3d:b7:d7:53:e7:33:5e:bf:b4:84:24:62:76:1e:be:
                    08:29:d7:d0:56:d1:c6:be:78:ca:2d:cf:9c:a6:0f:
                    94:5d:07:82:b0:ca:44:ee:fa:a4:f7:6e:66:5a:d5:
                    7a:0f:b0:3d:c2:1b:19:9c:02:9b:44:0f:35:e7:eb:
                    ac:1f:bd:e9:3a:5b:42:76:7a:b5:a5:e0:dc:70:03:
                    3f:90:fa:77:fd:59:65:e0:9d:7f:8e:2f:62:4c:26:
                    86:d5:97:75:2e:78:27:97:97:04:30:82:cc:dd:3a:
                    7f:46:08:b0:17:8e:8f:bf:1d:f1:cf:6b:5e:27:ae:
                    25:c3:66:8b:65:ab:47:96:df:77:3d:df:5b:f8:bb:
                    a2:7c:e8:32:3e:9a:fb:09:26:17:87:8a:76:1b:df:
                    13:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:36:F9:4D:4F:F2:4C:8F:48:F9:DF:7D:E4:62:25:AC:DD:FE:B0:D2
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/pjb5TU_yTI9I-d995GIlrN3-sNI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.145.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2c:0a:86:7d:94:2d:bf:cf:07:f5:8e:97:01:19:17:98:dc:7e:
         ff:2d:fa:ce:4f:8a:b6:3f:5d:a1:69:5a:fc:5f:9d:31:ce:08:
         06:99:e4:c9:2c:61:bf:63:f9:b6:e1:72:c4:93:b5:3e:bd:9b:
         48:86:ab:db:7c:96:49:07:ee:f3:2b:02:32:c0:9f:3f:f1:c4:
         4c:30:53:be:c3:c8:88:75:fb:a4:38:02:fa:e7:3e:d3:67:97:
         27:93:c3:9e:b6:04:70:af:68:9d:70:bd:3d:ad:20:c3:23:f8:
         61:5a:f8:0f:4c:26:d5:f6:02:47:2a:78:c7:ab:4a:f3:51:ff:
         d0:c9:9e:ba:f1:25:57:67:5f:75:92:26:c5:b3:16:3f:48:ec:
         d8:9e:1b:20:f2:89:c9:23:0b:62:c6:96:07:63:b2:d6:67:44:
         50:8a:92:c9:a9:55:16:32:93:2f:25:47:c6:32:ea:74:5e:85:
         fe:2f:93:0f:d9:52:c5:ca:1b:71:05:7d:8f:15:b9:13:91:1b:
         ce:5b:6c:00:48:2b:f0:56:5f:b0:28:d6:4b:1f:be:5e:a0:ac:
         af:15:89:37:99:a9:03:47:33:2d:55:c1:07:75:ba:6b:2c:3b:
         a8:10:44:79:3d:1f:75:41:0f:16:ae:37:3d:76:24:07:06:a4:
         23:13:27:95
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICBAkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3
MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNTA1MDEw
MTQ1MjdaFw0yNjA0MTUwMTMwMDNaMDMxMTAvBgNVBAMTKEE2MzZGOTRENEZGMjRD
OEY0OEY5REY3REU0NjIyNUFDRERGRUIwRDIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC+gk/kf1vT+NbN0C6ffml/c4IXV/y51YzQpnpYty9TIyCbJKQ4
7g/TVaohIwluBwKSyYYMcouJvjyTAkcVL9/JFLezczuYDSMGni+6ZdT4yCxXOto9
87jwtKP/SUf7t1vm5fL2Ot82Lj2311PnM16/tIQkYnYevggp19BW0ca+eMotz5ym
D5RdB4KwykTu+qT3bmZa1XoPsD3CGxmcAptEDzXn66wfvek6W0J2erWl4NxwAz+Q
+nf9WWXgnX+OL2JMJobVl3UueCeXlwQwgszdOn9GCLAXjo+/HfHPa14nriXDZotl
q0eW33c931v4u6J86DI+mvsJJheHinYb3xPFAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUpjb5TU/yTI9I+d995GIlrN3+sNIwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp
qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR
Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzk0L3BqYjVUVV95VEk5SS1kOTk1R0lsck4zLXNOSS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAJ6kXQwDQYJKoZIhvcNAQELBQADggEBACwKhn2ULb/PB/WOlwEZF5jcfv8t
+s5PirY/XaFpWvxfnTHOCAaZ5MksYb9j+bbhcsSTtT69m0iGq9t8lkkH7vMrAjLA
nz/xxEwwU77DyIh1+6Q4AvrnPtNnlyeTw562BHCvaJ1wvT2tIMMj+GFa+A9MJtX2
AkcqeMerSvNR/9DJnrrxJVdnX3WSJsWzFj9I7NieGyDyickjC2LGlgdjstZnRFCK
ksmpVRYyky8lR8Yy6nRehf4vkw/ZUsXKG3EFfY8VuRORG85bbABIK/BWX7Ao1ksf
vl6grK8ViTeZqQNHMy1VwQd1umssO6gQRHk9H3VBDxauNz12JAcGpCMTJ5U=
-----END CERTIFICATE-----
Generated at Sat May 17 20:48:25 2025 by rpki-client