Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/sLU9JHLeXVDL8ZUgbENrYkiI4R8.roa
File:                     sLU9JHLeXVDL8ZUgbENrYkiI4R8.roa (raw, json)
Hash identifier:          4o6nuxUgK/nIUE/a+22QxmMvECLn4Xe7D7ATF6dFA1I=
Subject key identifier:   B0:B5:3D:24:72:DE:5D:50:CB:F1:95:20:6C:43:6B:62:48:88:E1:1F
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       03B8
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/sLU9JHLeXVDL8ZUgbENrYkiI4R8.roa
Signing time:             Thu 01 May 2025 01:40:32 +0000
ROA not before:           Thu 01 May 2025 01:40:32 +0000
ROA not after:            Wed 15 Apr 2026 01:30:03 +0000
asID:                     10013
IP address blocks:        59.156.160.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 May 2025 15:52:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 952 (0x3b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: May  1 01:40:32 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=B0B53D2472DE5D50CBF195206C436B624888E11F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a3:0e:48:55:88:63:cf:12:2c:eb:1c:71:1a:
                    9f:94:9d:8a:39:83:fa:33:17:34:f2:73:a2:90:aa:
                    b7:16:ea:94:9e:4c:18:7c:79:d9:d9:78:65:cd:0c:
                    89:dc:1f:a6:f9:c3:00:bc:e8:57:d0:4e:16:4d:5d:
                    da:4a:28:2d:d4:36:8b:72:3e:2b:66:c7:13:bc:da:
                    40:db:a8:53:40:b8:fa:cb:8a:23:f1:03:ac:60:5f:
                    d4:83:a0:28:59:e4:cc:df:00:2c:ac:6c:4f:14:72:
                    fd:43:26:27:81:e6:b6:45:37:2d:30:6d:78:e3:00:
                    a5:61:33:5c:7d:5d:e8:0a:9c:14:87:e8:5b:0e:02:
                    af:da:9e:df:ce:24:d3:e9:e6:e7:90:f6:2a:00:e2:
                    f6:75:85:94:1d:f3:43:1a:8f:da:28:74:35:9c:0a:
                    8c:9a:4a:f1:30:99:9f:e4:89:73:71:67:50:6e:7c:
                    0a:32:60:2b:29:eb:f0:14:8e:6d:ca:bb:2f:36:c5:
                    fa:f0:32:09:ca:03:b0:81:b5:e0:6e:4e:e9:8b:c7:
                    85:f1:95:66:06:f8:d0:4a:58:1d:9c:96:e0:26:95:
                    0c:5c:d3:99:54:39:ae:a2:6f:48:48:21:a3:cd:ff:
                    00:b5:f5:cc:6f:78:35:d5:3e:dd:db:38:37:d6:83:
                    fd:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:B5:3D:24:72:DE:5D:50:CB:F1:95:20:6C:43:6B:62:48:88:E1:1F
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/sLU9JHLeXVDL8ZUgbENrYkiI4R8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.156.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         11:c8:6b:b4:36:0c:dd:33:9c:13:8b:f9:bc:2b:01:3a:50:10:
         c8:1c:c2:70:5f:0a:62:e7:5c:c8:21:4d:1f:c1:8d:22:7e:42:
         bf:05:bb:6c:d0:3d:30:00:4a:90:2f:68:17:46:4b:61:74:67:
         cc:8f:78:a5:cc:88:f3:13:5c:09:a8:9a:41:e8:cc:b2:be:f2:
         c4:61:a5:93:d3:0e:f5:45:cc:f8:a0:0d:f4:98:41:f3:65:f1:
         64:c0:8e:9e:c3:e8:b0:6e:08:4c:55:cf:a1:01:36:85:22:d1:
         96:9c:f1:a6:9a:8a:35:40:76:a0:06:8a:bc:ac:25:52:5f:bc:
         b3:3d:3f:cb:95:0b:1a:a8:b9:52:52:61:ff:ea:98:b6:cc:1b:
         d8:6a:1f:b2:da:1a:e2:29:4b:51:25:91:d3:20:51:93:fb:89:
         9c:ca:e8:05:0e:c5:6e:97:ab:c5:0f:78:5b:13:3c:5c:e4:73:
         08:80:18:9b:58:be:20:a3:73:34:e2:c5:7d:c9:a9:a5:f9:9e:
         1c:bd:32:34:64:cb:4c:35:56:45:cd:6a:32:d6:ef:af:19:44:
         a3:7a:32:df:a1:8e:f5:9a:f1:1b:42:3e:d9:77:b6:73:dc:cc:
         34:11:33:1f:2a:61:0c:3d:ab:0d:0d:09:e9:37:41:a0:52:d7:
         da:9d:a0:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 20:04:06 2025 by rpki-client