Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/vEll6v8clOEmlbOUvtDaxPOZax8.roa
File:                     vEll6v8clOEmlbOUvtDaxPOZax8.roa (raw, json)
Hash identifier:          Rh42M/5y4JK+OdHFzByaoX6Y70JrNmcP55ZEDRuUqfU=
Subject key identifier:   BC:49:65:EA:FF:1C:94:E1:26:95:B3:94:BE:D0:DA:C4:F3:99:6B:1F
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       036A
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/vEll6v8clOEmlbOUvtDaxPOZax8.roa
Signing time:             Thu 01 May 2025 01:33:25 +0000
ROA not before:           Thu 01 May 2025 01:33:25 +0000
ROA not after:            Wed 15 Apr 2026 01:30:03 +0000
asID:                     10013
IP address blocks:        27.132.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 May 2025 21:45:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 874 (0x36a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: May  1 01:33:25 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=BC4965EAFF1C94E12695B394BED0DAC4F3996B1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:78:8e:01:82:d5:9a:8e:4f:f3:c6:a2:13:01:
                    b6:f8:3d:1e:93:1d:c7:6f:5a:84:40:a5:65:01:9f:
                    3f:c8:a4:93:9d:82:e3:61:d4:7f:13:76:c4:77:e4:
                    fd:18:b3:03:d9:94:c9:38:43:1e:9c:68:06:fa:c3:
                    dd:ba:dc:ae:76:5c:f8:ea:e7:73:13:75:43:0b:29:
                    3a:92:81:8b:6d:bf:15:b2:56:0d:b8:3a:25:fd:49:
                    11:7f:76:a9:a6:84:a5:54:7a:9e:f6:9a:fe:00:ce:
                    4b:2b:8c:6f:13:c8:e2:2a:02:74:0d:d9:2f:24:2f:
                    72:da:4e:9c:0e:7f:71:f2:18:44:fe:64:38:5d:c3:
                    f2:3f:63:19:47:69:a1:90:f2:09:7f:a2:89:f0:1e:
                    a2:1c:1f:5b:14:58:a8:d2:ee:4b:76:1f:d6:ba:84:
                    ae:8a:26:86:dc:50:18:0d:57:fe:0b:d6:74:10:f0:
                    80:8f:a8:d3:77:40:3b:b7:08:7b:0d:12:c2:38:b6:
                    17:22:42:d7:f7:f0:86:91:3e:84:df:d3:ae:a1:5f:
                    98:48:fc:77:b9:19:b4:27:39:78:78:23:13:7f:12:
                    7b:59:3c:f2:c6:52:23:1a:7f:59:15:bf:9a:fa:09:
                    d7:50:25:62:7e:fe:c8:f2:c8:d6:45:3a:f3:f6:da:
                    10:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:49:65:EA:FF:1C:94:E1:26:95:B3:94:BE:D0:DA:C4:F3:99:6B:1F
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/vEll6v8clOEmlbOUvtDaxPOZax8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.132.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         7d:86:a2:f1:f5:bf:46:22:9c:8d:41:df:62:d9:22:02:4d:c3:
         ac:7a:a3:d3:0a:d8:63:80:a8:e1:81:5c:60:49:99:d2:57:3a:
         ef:8e:61:3e:0f:06:7e:79:92:5a:f6:f8:35:8e:37:b8:cf:be:
         a1:15:8c:f6:b2:f4:14:a4:04:50:fb:62:e1:60:04:5a:84:2e:
         bc:f8:01:39:68:61:05:30:49:87:f8:8f:e8:83:50:60:a6:21:
         8f:ef:c5:a9:4b:27:a7:45:c8:3a:4f:17:a4:73:d6:8a:d7:4d:
         b9:5d:0b:23:8d:05:e4:cf:29:da:9d:ed:27:3e:27:90:44:91:
         0d:c0:5d:b7:b4:8a:db:af:d3:fb:c9:73:84:45:b7:a9:1e:9e:
         96:99:4f:6a:50:c3:b1:5b:0d:9e:af:0c:a9:34:d1:be:30:f8:
         d2:7b:d3:0f:92:4c:6a:75:57:41:4b:30:78:36:2e:cc:40:f0:
         e3:46:c4:38:bd:18:ca:ab:8f:d5:a3:e3:b3:29:a6:11:7e:cf:
         50:d3:e1:a0:d2:38:1d:8d:c2:07:4a:a0:3d:9f:0e:62:f8:aa:
         41:a9:f3:d0:83:be:b5:ae:9f:08:28:dd:38:fa:a5:29:ac:0c:
         82:9f:53:16:b9:80:23:a6:d6:0f:a1:f8:65:f5:04:61:6a:8f:
         30:a1:ce:33
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICA2owDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3
MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNTA1MDEw
MTMzMjVaFw0yNjA0MTUwMTMwMDNaMDMxMTAvBgNVBAMTKEJDNDk2NUVBRkYxQzk0
RTEyNjk1QjM5NEJFRDBEQUM0RjM5OTZCMUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDVeI4BgtWajk/zxqITAbb4PR6THcdvWoRApWUBnz/IpJOdguNh
1H8TdsR35P0YswPZlMk4Qx6caAb6w9263K52XPjq53MTdUMLKTqSgYttvxWyVg24
OiX9SRF/dqmmhKVUep72mv4AzksrjG8TyOIqAnQN2S8kL3LaTpwOf3HyGET+ZDhd
w/I/YxlHaaGQ8gl/oonwHqIcH1sUWKjS7kt2H9a6hK6KJobcUBgNV/4L1nQQ8ICP
qNN3QDu3CHsNEsI4thciQtf38IaRPoTf066hX5hI/He5GbQnOXh4IxN/EntZPPLG
UiMaf1kVv5r6CddQJWJ+/sjyyNZFOvP22hC/AgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUvEll6v8clOEmlbOUvtDaxPOZax8wHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp
qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR
Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzk0L3ZFbGw2djhjbE9FbWxiT1V2dERheFBPWmF4OC5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAUbhIAwDQYJKoZIhvcNAQELBQADggEBAH2GovH1v0YinI1B32LZIgJNw6x6
o9MK2GOAqOGBXGBJmdJXOu+OYT4PBn55klr2+DWON7jPvqEVjPay9BSkBFD7YuFg
BFqELrz4ATloYQUwSYf4j+iDUGCmIY/vxalLJ6dFyDpPF6Rz1orXTbldCyONBeTP
Kdqd7Sc+J5BEkQ3AXbe0ituv0/vJc4RFt6kenpaZT2pQw7FbDZ6vDKk00b4w+NJ7
0w+STGp1V0FLMHg2LsxA8ONGxDi9GMqrj9Wj47MpphF+z1DT4aDSOB2NwgdKoD2f
DmL4qkGp89CDvrWunwgo3Tj6pSmsDIKfUxa5gCOm1g+h+GX1BGFqjzChzjM=
-----END CERTIFICATE-----
Generated at Sun May 18 03:38:30 2025 by rpki-client