Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/yoAt0MS46n1jbdu1NPla9wvrWYU.roa
File:                     yoAt0MS46n1jbdu1NPla9wvrWYU.roa (raw, json)
Hash identifier:          6WWicPjuhyCVBsKR6U1eiJ0gYbTicmgEY0BUetDPLDk=
Subject key identifier:   CA:80:2D:D0:C4:B8:EA:7D:63:6D:DB:B5:34:F9:5A:F7:0B:EB:59:85
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       038E
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/yoAt0MS46n1jbdu1NPla9wvrWYU.roa
Signing time:             Thu 01 May 2025 01:37:29 +0000
ROA not before:           Thu 01 May 2025 01:37:29 +0000
ROA not after:            Wed 15 Apr 2026 01:30:03 +0000
asID:                     10013
IP address blocks:        110.3.184.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 May 2025 21:45:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 910 (0x38e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: May  1 01:37:29 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=CA802DD0C4B8EA7D636DDBB534F95AF70BEB5985
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:73:07:7f:23:41:ed:b2:15:fc:f8:c3:20:0a:
                    8a:5d:20:59:6f:e6:a9:30:d5:ef:6c:69:28:d9:9c:
                    f7:67:91:ca:9b:74:85:0a:3a:74:5a:a1:48:6c:47:
                    14:c6:b3:11:df:c9:35:f4:4d:3c:76:ee:ff:04:0e:
                    92:ac:70:d7:a4:53:97:bf:1b:89:b7:5f:6d:94:37:
                    41:e7:71:4c:f9:cd:e1:9f:ad:2e:76:c9:5e:40:7a:
                    cc:5b:78:70:c5:75:88:49:f6:e7:f1:f5:77:d0:8b:
                    92:d2:e5:12:64:17:2b:29:3a:f5:7e:43:76:f5:f0:
                    b6:3c:9d:2c:86:be:a6:0d:30:9c:0e:57:47:19:9f:
                    2c:41:b6:bf:d4:25:d4:6b:27:14:21:90:da:85:41:
                    7f:da:cf:4c:9d:d3:9e:ac:b5:3e:82:c8:39:8b:7a:
                    24:c9:ea:7d:94:69:45:3e:6f:1b:69:2a:8e:04:4d:
                    b2:5b:53:6b:4c:0a:0a:a4:61:d1:90:60:27:79:95:
                    6b:ed:16:4e:85:3a:20:7a:24:f4:9c:c6:b4:91:6c:
                    a1:20:8c:2c:3a:8e:c2:9d:4d:0f:23:06:ab:20:e1:
                    ee:88:85:cd:a7:cd:3d:b7:2c:75:18:4b:1b:b0:ac:
                    5a:1d:96:f3:78:55:e0:75:2a:39:35:6e:70:8d:3e:
                    dd:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:80:2D:D0:C4:B8:EA:7D:63:6D:DB:B5:34:F9:5A:F7:0B:EB:59:85
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/yoAt0MS46n1jbdu1NPla9wvrWYU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.3.184.0/21

    Signature Algorithm: sha256WithRSAEncryption
         58:38:d9:b5:a5:91:ba:6b:d2:a8:ae:b8:ec:91:b8:3c:6d:1a:
         1a:77:f6:d3:00:88:af:7a:1b:0c:7c:8d:e6:5f:08:c1:83:dc:
         19:1f:de:84:ed:7a:ef:e7:a5:3c:74:11:b4:41:65:3b:78:c6:
         b3:c7:d8:d5:f6:e7:79:4e:1e:af:ab:17:f7:5f:ab:96:4c:84:
         d3:70:7c:53:f6:fd:ba:29:38:68:e7:b4:fe:86:a5:54:8f:e0:
         9e:cf:47:fb:58:a0:69:9f:3a:d2:ad:61:7c:c0:23:ff:c3:94:
         20:b2:d2:86:ca:33:58:c4:00:17:38:37:bc:8c:c4:30:26:de:
         a3:1a:35:96:d9:9b:ce:67:7e:69:e4:ec:d2:ce:82:d2:1c:d9:
         39:69:f0:92:08:d5:ec:c5:d8:6e:61:d9:d5:37:55:7f:c5:1a:
         76:5b:9d:32:99:04:71:ed:29:42:c4:cc:4e:cb:ee:31:2a:62:
         7e:5a:50:14:1e:d5:b3:00:e5:be:e0:4c:66:41:a0:e3:fe:97:
         3a:d5:e5:c5:26:82:82:a3:50:c9:3b:ce:3c:b8:f9:e4:29:09:
         c3:41:76:da:a9:50:4c:1b:ab:9c:65:94:8c:97:48:07:b9:28:
         d1:91:35:2c:d5:d8:6d:9a:f1:ab:b0:05:a9:93:f8:aa:31:d1:
         fa:65:0b:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 23:36:22 2025 by rpki-client