Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/rdNuDyj434Q8R4W2f_LBZshxaC4.roa
File:                     rdNuDyj434Q8R4W2f_LBZshxaC4.roa (raw, json)
Hash identifier:          jy887bm64llkj6F5O6/1dx5/pmnIaAfvTwopaicRR4g=
Subject key identifier:   AD:D3:6E:0F:28:F8:DF:84:3C:47:85:B6:7F:F2:C1:66:C8:71:68:2E
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0364
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/rdNuDyj434Q8R4W2f_LBZshxaC4.roa
Signing time:             Thu 01 May 2025 01:33:22 +0000
ROA not before:           Thu 01 May 2025 01:33:22 +0000
ROA not after:            Wed 15 Apr 2026 01:30:03 +0000
asID:                     10013
IP address blocks:        27.120.180.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 May 2025 18:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 868 (0x364)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: May  1 01:33:22 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=ADD36E0F28F8DF843C4785B67FF2C166C871682E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:57:f7:15:73:de:21:31:f1:d9:9a:b6:ed:3f:
                    19:b1:7c:47:b7:16:4e:50:64:35:9e:23:af:70:4c:
                    3a:df:60:f8:f1:2b:6c:27:07:ba:98:ab:3d:77:b3:
                    30:91:a5:89:86:4f:c8:d3:14:93:f9:6f:98:17:b3:
                    3c:1b:4c:40:8b:5f:1c:ad:e2:4e:75:74:58:58:66:
                    e2:5f:14:7a:52:42:f5:a8:48:39:4d:76:5c:89:be:
                    c7:07:08:9e:49:b7:cf:e2:81:ae:ef:16:98:d9:c9:
                    a0:12:cb:64:c2:37:66:ba:e1:bd:f7:37:5c:87:0e:
                    4e:3b:be:77:bf:e9:43:26:09:92:01:c1:fe:76:72:
                    5e:b3:b1:6e:0b:db:65:33:b9:71:9d:25:9c:71:56:
                    d0:34:f0:65:66:64:39:c8:50:17:e8:47:ac:a9:07:
                    f0:b7:75:29:2f:a0:bb:44:f9:20:5a:b6:fd:ef:6d:
                    9d:3d:43:f8:87:ad:37:f8:41:05:61:21:f1:62:f0:
                    0a:ec:91:ce:b6:2b:47:90:2e:35:d5:86:6c:c8:ef:
                    72:14:02:60:b9:67:a6:16:ed:5c:4f:d8:56:db:51:
                    13:3f:d8:e0:04:87:e3:76:76:f7:65:9c:47:e7:b8:
                    48:c1:46:b5:fa:36:ba:6b:e2:08:3a:83:63:c0:1f:
                    6f:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:D3:6E:0F:28:F8:DF:84:3C:47:85:B6:7F:F2:C1:66:C8:71:68:2E
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/rdNuDyj434Q8R4W2f_LBZshxaC4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.120.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         48:a8:7b:6c:04:85:eb:36:2c:02:8f:ba:74:0d:13:70:db:65:
         73:3c:f3:d6:20:24:d0:96:a5:89:66:ce:36:a1:02:32:56:36:
         1d:29:80:54:e3:1c:d3:46:b3:2e:8b:6c:ce:61:fd:32:4d:26:
         12:64:df:dd:b1:c4:8b:29:32:dd:33:e1:4b:54:a3:21:68:2f:
         02:7c:ad:32:b4:2b:67:b5:35:23:bf:ca:94:83:4c:5f:03:26:
         29:03:7c:b2:1d:97:ba:e2:df:23:51:76:0e:62:82:0b:71:17:
         90:5f:5a:98:e1:90:4f:ee:97:3b:b8:9a:ac:82:c6:ab:e5:a6:
         0b:30:fb:ba:10:35:b7:7d:f8:c0:dd:45:f8:67:7e:ec:e8:bf:
         00:09:6c:c5:48:bb:e2:15:a4:2e:e9:9a:5d:1e:44:b3:c6:72:
         08:26:2a:d1:00:90:28:5c:ec:5e:df:bd:3a:b2:98:bc:bf:29:
         f2:21:e1:44:3f:40:74:bf:3d:15:de:8d:7d:38:fb:51:c9:c1:
         e0:50:75:03:7a:b4:30:31:49:1e:04:14:03:22:e4:44:f6:5e:
         0b:a1:47:d8:14:23:64:4c:a1:93:20:87:83:83:31:49:b8:a2:
         80:8f:26:50:6b:97:7e:7a:bc:04:a9:40:f6:02:02:cb:fc:f4:
         0d:04:a5:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 20:47:19 2025 by rpki-client