Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/yBQz1ljKTR79ypF72Dt7P0fC7Tw.roa
File:                     yBQz1ljKTR79ypF72Dt7P0fC7Tw.roa (raw, json)
Hash identifier:          pbbJO8g+EPc4uInrNeb/ZZSFXfoinZ4DEPHNMqkaZzU=
Subject key identifier:   C8:14:33:D6:58:CA:4D:1E:FD:CA:91:7B:D8:3B:7B:3F:47:C2:ED:3C
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       03DA
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/yBQz1ljKTR79ypF72Dt7P0fC7Tw.roa
Signing time:             Thu 01 May 2025 01:42:47 +0000
ROA not before:           Thu 01 May 2025 01:42:47 +0000
ROA not after:            Wed 15 Apr 2026 01:30:03 +0000
asID:                     10013
IP address blocks:        110.2.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 May 2025 21:45:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 986 (0x3da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: May  1 01:42:47 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=C81433D658CA4D1EFDCA917BD83B7B3F47C2ED3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:6a:a0:9d:dc:2a:cb:4d:e6:8a:08:c2:2f:cc:
                    25:85:11:86:06:2a:1c:e8:cd:22:25:90:b4:6a:57:
                    86:26:06:f0:bd:49:2a:59:5f:d6:0d:53:0d:86:cf:
                    e0:b8:b9:46:05:12:b6:f1:41:44:39:f6:3c:35:26:
                    f2:9f:64:3a:e5:b7:eb:3b:80:ee:92:01:df:1b:4c:
                    6a:1c:08:49:d8:65:16:a3:87:f2:0c:09:c4:9b:0b:
                    06:a5:cf:14:8e:97:a6:b5:eb:d9:84:8b:98:9b:6b:
                    7a:44:65:9b:b6:0a:e8:59:a7:72:39:20:be:8a:cb:
                    1c:b8:7a:34:93:24:68:07:b9:05:8f:88:e3:32:b7:
                    7d:7b:37:bc:8e:3b:61:94:99:9f:aa:49:8a:4c:0a:
                    38:1c:2d:5d:14:38:da:56:9f:4f:9a:27:dd:83:e2:
                    d5:ba:fe:56:58:c7:e5:39:5e:4a:06:96:b9:3c:4d:
                    84:c3:24:4a:e4:72:46:0d:65:4d:5b:ca:be:76:ea:
                    63:0f:7c:8c:4a:da:60:5b:40:10:f1:6e:61:f1:75:
                    9d:47:c9:19:59:7f:c4:8c:d7:3d:a3:00:6f:fc:b9:
                    40:c6:b6:bd:36:e2:38:f1:e0:62:05:07:42:f6:35:
                    65:43:ca:79:6a:5b:57:86:74:8f:5b:df:da:f4:8a:
                    60:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:14:33:D6:58:CA:4D:1E:FD:CA:91:7B:D8:3B:7B:3F:47:C2:ED:3C
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/yBQz1ljKTR79ypF72Dt7P0fC7Tw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.2.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         19:1f:d5:9f:f0:33:8a:59:4b:75:97:86:57:94:e5:7e:d6:4c:
         02:52:c8:f1:28:cc:36:ab:0f:c6:ff:bb:25:b8:1a:83:d6:92:
         f0:7c:fe:60:c6:db:ad:a3:3d:69:9a:56:a1:63:bf:8e:90:02:
         e2:81:d2:2f:72:1b:28:36:3d:57:21:f8:6f:29:dc:d1:f5:26:
         28:7a:9e:8e:b3:f8:6d:59:49:be:53:31:55:3c:2e:80:2c:0f:
         04:e8:6e:86:58:9f:12:9a:c7:d8:32:83:49:74:2b:6a:a7:99:
         32:45:22:3b:df:61:c2:7d:87:e2:ab:9f:96:f5:67:00:00:d1:
         f1:7e:7d:f2:15:a4:28:49:ed:bb:05:9f:51:cc:d0:4e:a4:e1:
         2b:74:23:23:c1:09:10:0a:4c:3b:96:86:b2:92:9e:8a:58:fc:
         48:d2:57:92:c0:ea:2c:fe:69:5a:e5:79:93:75:e7:89:95:11:
         cc:3b:6c:33:fa:5c:06:6f:98:3d:6a:db:46:3e:b5:04:1c:1b:
         ca:78:50:c1:85:95:f7:57:5b:91:c5:4d:ec:89:9c:3d:9c:e6:
         d6:3f:27:a9:19:15:6e:9a:bb:4d:c9:8b:5f:5c:08:b8:7c:99:
         bc:65:ec:4a:2f:41:f2:d4:8a:43:23:08:12:e9:b1:d9:ad:a4:
         c1:b8:2c:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 00:31:14 2025 by rpki-client