Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/thaK6lDJj86cIRpCmgcyx0QLE4Y.roa
File:                     thaK6lDJj86cIRpCmgcyx0QLE4Y.roa (raw, json)
Hash identifier:          HEbeYBi/Gdd2XYFwnyH1anXgGTHV5JP4Zi/e3b3Fy2A=
Subject key identifier:   B6:16:8A:EA:50:C9:8F:CE:9C:21:1A:42:9A:07:32:C7:44:0B:13:86
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       03DF
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/thaK6lDJj86cIRpCmgcyx0QLE4Y.roa
Signing time:             Thu 01 May 2025 01:42:49 +0000
ROA not before:           Thu 01 May 2025 01:42:49 +0000
ROA not after:            Wed 15 Apr 2026 01:30:03 +0000
asID:                     10013
IP address blocks:        110.74.126.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 May 2025 18:22:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 991 (0x3df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: May  1 01:42:49 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=B6168AEA50C98FCE9C211A429A0732C7440B1386
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:fe:d0:e3:94:94:a2:13:e7:ac:6a:7b:84:1d:
                    e9:d2:e3:ea:b9:d6:de:5b:11:ff:2a:22:1a:c4:04:
                    86:fb:cc:7f:62:a5:bf:67:84:fa:c6:69:eb:fe:2b:
                    38:7d:9f:cd:02:bd:64:0e:a7:04:39:af:a3:c0:c4:
                    32:a0:b6:f9:50:62:e2:7a:5e:35:47:96:44:dc:b2:
                    59:ee:4c:6e:d0:a7:32:b3:52:a7:f6:f7:b3:68:40:
                    64:23:98:63:1f:c3:da:1a:bb:b6:55:18:83:aa:c2:
                    91:f3:7b:6c:a8:9e:da:be:af:2a:76:13:bb:0e:46:
                    dd:2e:c6:fb:7b:24:10:4e:55:77:b1:b0:5a:c3:d6:
                    6f:95:6d:5f:95:78:e5:2a:03:63:59:69:d9:bb:bc:
                    46:54:6d:e1:c7:d1:57:07:77:8e:91:e2:18:87:5d:
                    0b:ea:2b:75:d0:d0:4a:53:c6:d4:69:4a:3c:6f:31:
                    a3:0a:42:33:30:dd:a7:11:29:1b:24:19:ae:73:da:
                    af:d7:32:0d:17:46:ff:1c:01:86:50:77:75:0e:89:
                    53:63:8a:60:08:3d:f7:e7:cb:2f:ed:45:92:bb:b3:
                    3a:44:6c:d0:a4:1d:96:80:f1:e9:f3:b9:37:e9:bf:
                    6d:19:9c:50:3d:4b:7c:99:74:17:fa:40:9f:33:fa:
                    28:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:16:8A:EA:50:C9:8F:CE:9C:21:1A:42:9A:07:32:C7:44:0B:13:86
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/thaK6lDJj86cIRpCmgcyx0QLE4Y.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.74.126.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0a:95:d3:18:27:53:2a:9f:99:c1:09:72:8c:c6:04:b0:8b:f6:
         b1:01:e5:fe:19:73:cf:a1:8c:43:34:d4:1a:f3:11:bd:cc:1b:
         74:be:8c:6c:8f:1f:f1:0b:a8:bb:79:7f:e9:e6:c9:6c:38:0e:
         1e:d2:d0:34:36:46:56:a7:fa:5a:d0:dd:80:2c:a5:19:37:03:
         47:f3:40:dc:40:d7:96:6b:b3:ff:8a:ca:ef:5d:eb:5f:0a:6d:
         19:91:59:7e:85:1a:06:d9:17:ea:df:1a:5c:91:25:27:6b:09:
         1d:f6:26:65:3b:66:30:93:6e:4d:1f:91:e2:6a:04:64:74:2b:
         1c:5d:ce:6f:7b:5c:57:a5:87:cd:75:21:3b:9d:d2:f3:b4:69:
         57:0b:20:5f:6b:2c:c6:d3:83:5f:05:57:6a:2a:9a:9b:75:12:
         a7:ab:e0:96:a5:f8:db:b8:2e:c7:96:61:08:5b:d1:4d:6b:09:
         64:54:b9:87:bf:1b:b2:04:98:f5:a7:ed:d8:07:5b:cd:9d:21:
         74:13:29:83:7c:bc:de:77:7d:2c:87:10:2d:3a:54:aa:e7:59:
         22:29:74:7a:f8:d4:45:69:96:50:a5:ff:c6:cd:fb:36:cb:e8:
         1c:85:0c:8b:22:9a:d6:32:5e:2b:ea:72:1f:f7:6d:bc:46:b5:
         7b:c5:5b:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 22:41:40 2025 by rpki-client