Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/MYRnUmJiXPBJekqN_0fAOhZCk8o.roa
File:                     MYRnUmJiXPBJekqN_0fAOhZCk8o.roa (raw, json)
Hash identifier:          KHcvog237t+z3mQ2YPt2PBUfU9UHNMYAPEGRNmk9nJU=
Subject key identifier:   31:84:67:52:62:62:5C:F0:49:7A:4A:8D:FF:47:C0:3A:16:42:93:CA
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       031B
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/MYRnUmJiXPBJekqN_0fAOhZCk8o.roa
Signing time:             Thu 24 Oct 2024 01:24:03 +0000
ROA not before:           Thu 24 Oct 2024 01:24:03 +0000
ROA not after:            Wed 15 Oct 2025 01:30:02 +0000
asID:                     10013
IP address blocks:        183.181.72.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 795 (0x31b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Oct 24 01:24:03 2024 GMT
            Not After : Oct 15 01:30:02 2025 GMT
        Subject: CN=3184675262625CF0497A4A8DFF47C03A164293CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:d9:47:c3:d5:86:b2:9d:f4:67:41:48:a3:e6:
                    40:86:28:14:c8:32:8a:bb:a3:3a:1d:66:a1:48:10:
                    a1:e4:d8:48:a0:62:22:83:33:5d:b6:36:2e:12:10:
                    06:aa:2d:8c:53:1e:19:60:c6:06:43:f9:ab:30:19:
                    89:bb:fc:ed:8f:3f:33:45:7a:08:32:20:19:c8:47:
                    1e:d7:18:e3:1c:34:e5:8b:a7:d2:ff:ff:05:28:7f:
                    53:af:5d:29:3b:dd:99:e5:59:d3:84:6f:4a:23:d9:
                    dd:63:e1:e3:b5:29:df:a9:f3:1f:59:6c:83:14:a5:
                    43:c7:13:3f:f3:13:7f:30:fa:fd:18:b8:47:10:71:
                    d1:47:6f:67:68:8c:e9:a3:6f:de:4c:db:c0:49:96:
                    42:bc:be:4f:d6:82:dc:f6:b8:e0:7c:c3:83:cf:93:
                    f8:3a:70:3c:5b:20:97:f0:c3:e1:5c:44:cd:be:6b:
                    a8:ae:bc:c1:66:8a:04:2f:4e:68:69:5b:c6:93:19:
                    97:4b:26:6a:41:d8:c9:61:40:7b:b0:8b:47:06:dd:
                    54:d8:8d:42:49:ac:51:a1:a0:ee:2b:e0:66:93:84:
                    34:e7:d8:85:5d:cc:a1:45:21:05:d5:a1:74:b3:a6:
                    c3:ae:ed:0f:b9:39:08:3c:c5:f3:65:c1:92:fa:a4:
                    77:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:84:67:52:62:62:5C:F0:49:7A:4A:8D:FF:47:C0:3A:16:42:93:CA
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/MYRnUmJiXPBJekqN_0fAOhZCk8o.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.181.72.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7e:64:25:71:f3:4a:af:ed:48:26:09:1a:38:18:9e:2e:1e:7b:
         e7:5c:f8:7d:15:9d:88:06:66:47:7a:51:78:64:69:37:14:80:
         9f:6e:ab:af:db:c3:37:b9:a8:1c:29:4f:a0:f8:17:b3:c3:19:
         d8:cd:fe:25:28:41:a1:71:36:76:63:1c:5f:44:89:8b:22:df:
         56:14:d9:66:fc:6d:fc:10:90:84:6a:85:0d:be:ac:c4:d7:d4:
         50:36:23:82:2f:79:28:a3:2d:d9:04:2e:a4:db:d9:e3:76:06:
         90:f1:ed:94:ce:bf:e7:d2:b4:d5:05:81:0b:ff:d2:77:6b:d5:
         41:1e:ac:87:46:6c:49:ae:8f:2a:50:76:e7:1f:29:ae:3e:3e:
         4a:b6:4d:8f:cd:d7:6a:ac:bc:07:9f:21:a8:0f:73:5b:7f:e0:
         ec:16:13:2f:24:54:20:55:dc:9d:ed:8f:da:d2:a8:6f:45:ff:
         f3:55:5f:eb:bf:c7:a6:f0:47:85:dc:54:4a:af:66:d0:71:e7:
         37:6d:67:5a:38:2d:33:c9:d9:c0:81:bc:b5:43:f7:fc:75:9f:
         ae:01:ae:0d:2c:06:54:64:bf:a0:17:62:64:bd:80:da:e1:24:
         54:5d:81:37:ce:03:14:dd:3a:b3:fd:c9:e7:7f:56:5a:95:a0:
         9c:52:dc:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:38:03 2025 by rpki-client