Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/rp0FjWmZwmjxOUZ3r-iAJEBLerA.roa
File:                     rp0FjWmZwmjxOUZ3r-iAJEBLerA.roa (raw, json)
Hash identifier:          m8e5TFl/spLsZGZqMy6ND48zQS/NXxdOVcP4G4K3/BM=
Subject key identifier:   AE:9D:05:8D:69:99:C2:68:F1:39:46:77:AF:E8:80:24:40:4B:7A:B0
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       03AC
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/rp0FjWmZwmjxOUZ3r-iAJEBLerA.roa
Signing time:             Thu 01 May 2025 01:40:26 +0000
ROA not before:           Thu 01 May 2025 01:40:26 +0000
ROA not after:            Wed 15 Apr 2026 01:30:03 +0000
asID:                     10013
IP address blocks:        61.87.0.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 May 2025 21:45:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 940 (0x3ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: May  1 01:40:26 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=AE9D058D6999C268F1394677AFE88024404B7AB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:e9:13:4e:4e:da:80:3b:6a:5f:10:ad:1a:5c:
                    ab:11:b5:cd:22:16:3c:fc:b8:64:56:af:2d:c2:f3:
                    8c:78:1c:66:dd:a8:3c:21:7e:39:b8:e1:e3:d3:7d:
                    0c:6b:d9:53:d0:7a:b7:77:6e:30:cf:51:43:cc:6e:
                    3f:26:98:0e:fd:06:3d:8c:29:83:3f:04:9b:53:95:
                    2d:04:b8:6c:04:38:87:64:97:6f:45:16:87:67:cc:
                    e7:09:bc:d5:f8:02:f2:4c:00:0c:73:d4:3f:ea:69:
                    d9:b9:ed:cd:3b:32:96:76:16:b5:e3:af:82:a5:a1:
                    ea:e7:38:ea:16:a1:e9:ed:87:7b:b7:a9:48:c9:51:
                    2e:b9:61:30:4a:76:cc:ff:b7:37:0f:9e:4a:e1:fa:
                    d7:2d:e6:13:a7:12:d2:c4:e7:97:d9:01:b2:0b:34:
                    2c:e0:7e:26:52:df:32:b1:21:b3:9d:f5:1f:dc:7e:
                    86:fa:0f:f1:94:c3:2a:01:dc:88:d7:1e:f8:47:7d:
                    ec:2b:ee:a6:e3:99:b3:b4:0b:fa:4a:49:2c:70:0e:
                    34:1b:06:85:d6:53:e2:a9:01:89:b5:77:48:6a:75:
                    22:a8:16:b4:08:69:6d:36:a8:ae:52:1b:7e:a1:a7:
                    62:79:c2:ab:e9:3b:d4:12:29:fc:b7:5f:64:a4:45:
                    99:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:9D:05:8D:69:99:C2:68:F1:39:46:77:AF:E8:80:24:40:4B:7A:B0
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/rp0FjWmZwmjxOUZ3r-iAJEBLerA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.87.0.0/21

    Signature Algorithm: sha256WithRSAEncryption
         25:07:ec:af:c2:d1:d7:e2:d4:0f:c6:84:d7:81:73:1a:2e:26:
         3e:4c:56:d7:0c:1c:7c:ce:8a:47:37:c6:65:f4:36:8b:94:07:
         d6:e2:96:63:dd:ad:83:9e:4e:a1:18:0c:48:7b:49:55:a2:fa:
         57:93:21:09:33:f0:14:bf:16:3e:cc:16:04:6c:c4:6d:05:f4:
         32:14:85:cb:ee:df:84:95:38:83:bb:04:7e:d8:4c:e2:8a:71:
         b0:74:ce:c9:ea:56:f7:06:f6:8d:a1:51:62:0b:b1:bb:21:59:
         73:52:7e:96:8f:bd:9d:42:c6:ee:1a:ed:93:14:a3:9c:2d:21:
         4b:a2:3c:20:c9:c2:c5:81:2a:30:90:a7:6b:66:5e:a0:f6:ea:
         d9:22:40:d2:98:b0:42:c1:80:c3:87:26:7f:ac:61:6f:57:5c:
         b5:47:a4:00:86:61:68:ec:c4:db:4b:0d:db:63:7a:9d:36:24:
         d3:63:08:db:b3:8d:c8:81:76:36:4c:d1:ee:f1:99:4d:d5:7a:
         83:79:b7:5f:0c:6b:3b:4d:bc:b7:64:6a:24:cb:1f:2f:df:32:
         8b:5c:3f:77:2f:71:d2:a5:18:1b:12:1f:89:97:cc:76:4d:91:
         73:fa:2d:9b:9d:73:7e:24:0f:33:6c:63:80:8d:c5:d9:07:d9:
         ba:9f:12:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 04:07:00 2025 by rpki-client