Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/uQy7AFmCInxHrOoHH1g8YbuAlHk.roa
File:                     uQy7AFmCInxHrOoHH1g8YbuAlHk.roa (raw, json)
Hash identifier:          fRnA/wjrOmELTjWsPHurEyZp+bGnUZSpxi/1fcMUW1s=
Subject key identifier:   B9:0C:BB:00:59:82:22:7C:47:AC:EA:07:1F:58:3C:61:BB:80:94:79
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       038B
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/uQy7AFmCInxHrOoHH1g8YbuAlHk.roa
Signing time:             Thu 01 May 2025 01:37:27 +0000
ROA not before:           Thu 01 May 2025 01:37:27 +0000
ROA not after:            Wed 15 Apr 2026 01:30:03 +0000
asID:                     10013
IP address blocks:        36.54.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 May 2025 21:45:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 907 (0x38b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: May  1 01:37:27 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=B90CBB005982227C47ACEA071F583C61BB809479
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:35:d1:31:c3:7a:dc:bc:56:db:98:ce:49:8f:
                    02:a9:8d:4c:0e:39:a7:df:09:92:af:ca:43:49:95:
                    70:4c:1a:f4:30:e6:d5:16:94:b2:10:63:4e:61:10:
                    5d:46:ab:5b:33:20:24:88:89:76:5a:d0:c1:c6:cc:
                    24:84:ef:a1:66:48:84:e5:c3:35:8d:e2:80:a9:7b:
                    b9:ed:ed:83:a8:5d:2f:a0:f4:5e:57:df:95:bb:3a:
                    db:31:cb:dc:1e:ee:8a:56:f2:26:1d:1d:1f:60:37:
                    7c:f4:1d:d1:c8:f0:98:1f:33:72:c6:1f:0e:5d:79:
                    ba:43:dd:4f:c4:95:dc:ee:94:63:ff:d0:00:f5:f0:
                    bc:80:73:82:3a:d7:7a:39:5e:db:6f:d3:6c:42:3d:
                    51:80:42:4c:80:92:d9:8f:93:3c:c4:c0:dd:d7:b0:
                    e2:d1:e5:c5:29:b0:30:d2:a6:ad:31:67:72:18:4c:
                    a6:f7:3b:c6:02:e5:44:ac:f3:86:50:16:58:d5:16:
                    7a:61:8d:cc:db:ca:c3:92:ee:05:66:15:f4:90:90:
                    bc:32:f2:4f:7a:73:85:9c:24:3d:26:5f:c9:6c:49:
                    b7:df:da:1c:92:d4:db:89:44:1b:e4:be:f2:01:b5:
                    8d:38:78:6d:6b:c6:5a:fb:5b:42:ba:50:06:ab:b7:
                    4f:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:0C:BB:00:59:82:22:7C:47:AC:EA:07:1F:58:3C:61:BB:80:94:79
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/uQy7AFmCInxHrOoHH1g8YbuAlHk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.54.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         2b:b3:91:54:f8:60:3e:27:3a:01:cb:da:ed:f8:36:d9:f5:f7:
         0f:6b:e1:1d:9c:72:04:07:61:03:69:42:47:16:cf:ab:54:6d:
         2d:04:2b:21:aa:5a:87:a5:e9:f4:d2:c4:4c:3c:01:b4:aa:7a:
         b0:6c:38:ee:d7:d3:83:33:02:c9:fc:6a:33:52:01:d4:b8:6e:
         9f:94:db:28:4f:fe:af:97:b2:9e:98:c6:88:ee:d0:51:79:9e:
         cc:4e:33:e9:98:c3:54:cc:b7:40:04:51:4a:d4:c0:ea:3d:82:
         ea:0d:26:02:bc:9b:9c:26:b8:46:7c:72:ba:b6:75:a3:c0:8c:
         21:c4:69:19:01:2b:7d:37:25:07:a4:41:2f:69:10:21:af:8b:
         ab:66:c9:b8:8b:12:53:5f:cf:95:9e:e6:fe:d1:3d:d2:f6:4c:
         c5:50:26:40:11:2b:14:cd:e6:87:9a:d8:d4:49:13:20:48:c0:
         93:a8:a8:f5:c5:64:c0:52:cf:85:6f:a4:99:53:e1:70:17:ef:
         05:a8:35:4a:0b:aa:af:c6:02:0b:54:03:de:79:e7:49:8f:4f:
         6e:ac:e6:a3:ad:7e:7b:30:c6:f5:f3:86:cf:98:7e:94:89:22:
         b7:af:ab:78:da:d4:6c:3a:6e:cc:36:12:88:67:b2:ba:e3:44:
         9f:c6:62:e7
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICA4swDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3
MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNTA1MDEw
MTM3MjdaFw0yNjA0MTUwMTMwMDNaMDMxMTAvBgNVBAMTKEI5MENCQjAwNTk4MjIy
N0M0N0FDRUEwNzFGNTgzQzYxQkI4MDk0NzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDUNdExw3rcvFbbmM5JjwKpjUwOOaffCZKvykNJlXBMGvQw5tUW
lLIQY05hEF1Gq1szICSIiXZa0MHGzCSE76FmSITlwzWN4oCpe7nt7YOoXS+g9F5X
35W7Otsxy9we7opW8iYdHR9gN3z0HdHI8JgfM3LGHw5debpD3U/EldzulGP/0AD1
8LyAc4I613o5Xttv02xCPVGAQkyAktmPkzzEwN3XsOLR5cUpsDDSpq0xZ3IYTKb3
O8YC5USs84ZQFljVFnphjczbysOS7gVmFfSQkLwy8k96c4WcJD0mX8lsSbff2hyS
1NuJRBvkvvIBtY04eG1rxlr7W0K6UAart0/nAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUuQy7AFmCInxHrOoHH1g8YbuAlHkwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp
qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR
Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzk0L3VReTdBRm1DSW54SHJPb0hIMWc4WWJ1QWxIay5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAUkNiAwDQYJKoZIhvcNAQELBQADggEBACuzkVT4YD4nOgHL2u34Ntn19w9r
4R2ccgQHYQNpQkcWz6tUbS0EKyGqWoel6fTSxEw8AbSqerBsOO7X04MzAsn8ajNS
AdS4bp+U2yhP/q+Xsp6Yxoju0FF5nsxOM+mYw1TMt0AEUUrUwOo9guoNJgK8m5wm
uEZ8crq2daPAjCHEaRkBK303JQekQS9pECGvi6tmybiLElNfz5We5v7RPdL2TMVQ
JkARKxTN5oea2NRJEyBIwJOoqPXFZMBSz4VvpJlT4XAX7wWoNUoLqq/GAgtUA955
50mPT26s5qOtfnswxvXzhs+YfpSJIrevq3ja1Gw6bsw2EohnsrrjRJ/GYuc=
-----END CERTIFICATE-----
Generated at Sat May 17 23:20:07 2025 by rpki-client