Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/_jYxkrDI3zitOrgz3zusAtKawF4.roa
File:                     _jYxkrDI3zitOrgz3zusAtKawF4.roa (raw, json)
Hash identifier:          Q2ZBKa/RTUjyhJzBBLT4P+oafPct73j894rZeXQPtWo=
Subject key identifier:   FE:36:31:92:B0:C8:DF:38:AD:3A:B8:33:DF:3B:AC:02:D2:9A:C0:5E
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0307
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/_jYxkrDI3zitOrgz3zusAtKawF4.roa
Signing time:             Thu 17 Oct 2024 01:45:04 +0000
ROA not before:           Thu 17 Oct 2024 01:45:04 +0000
ROA not after:            Wed 15 Oct 2025 01:30:02 +0000
asID:                     10013
IP address blocks:        113.213.244.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 775 (0x307)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Oct 17 01:45:04 2024 GMT
            Not After : Oct 15 01:30:02 2025 GMT
        Subject: CN=FE363192B0C8DF38AD3AB833DF3BAC02D29AC05E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:16:f3:41:10:f0:2a:ea:17:56:b8:9c:82:dc:
                    09:8c:1d:43:e5:12:33:84:5f:6c:9c:53:41:82:b4:
                    61:14:ad:6e:53:3b:ce:f9:69:50:59:a8:4d:51:14:
                    5d:2c:4a:9a:bb:dd:aa:b6:7d:87:05:48:18:6f:9a:
                    33:04:21:9e:1d:3c:39:58:76:b7:f5:79:7c:f7:c7:
                    9a:3e:26:6c:cb:7f:0e:97:2f:72:98:ab:ea:5b:36:
                    f1:2f:8a:a8:50:57:46:15:de:c1:1a:b4:3d:a5:bd:
                    12:ff:af:fc:41:ec:6c:a0:d6:96:49:4f:1e:fe:67:
                    65:45:e0:7b:54:ef:7c:5c:2a:b7:fb:bf:1a:3e:85:
                    c4:2a:5d:c9:44:ed:ce:9c:54:d3:51:af:85:1e:0d:
                    e2:58:84:fb:ac:64:48:f0:66:ef:35:17:68:a1:04:
                    4c:02:85:6e:18:30:38:b9:fd:e1:2a:b9:49:c6:dc:
                    b8:e0:89:f5:13:5f:63:dc:6e:8b:5e:12:50:fe:84:
                    e3:c7:a0:8a:8e:ff:76:f2:11:94:0f:8d:53:10:35:
                    a2:16:03:74:8f:9c:d2:9e:97:fd:87:cf:62:a2:b2:
                    1e:58:e3:49:51:b4:75:22:38:da:ad:b2:52:52:1c:
                    05:c8:28:93:e3:5a:b9:ba:b2:cf:dd:11:ad:92:26:
                    ae:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:36:31:92:B0:C8:DF:38:AD:3A:B8:33:DF:3B:AC:02:D2:9A:C0:5E
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/_jYxkrDI3zitOrgz3zusAtKawF4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.213.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         33:3f:96:c9:b2:23:d8:57:61:77:0a:1d:05:d3:92:94:bd:ca:
         b8:28:ea:59:57:bc:8c:35:66:e6:3d:24:63:ed:fc:f9:c0:50:
         87:fc:5b:15:c7:34:8b:53:50:b6:66:46:89:83:c6:29:91:79:
         71:f1:06:ef:57:b0:0a:bf:e8:42:3d:0a:2f:58:85:bb:42:a0:
         33:7c:58:41:4a:6d:1e:23:16:34:20:eb:fc:81:39:c7:92:45:
         55:b2:35:01:6b:6b:54:7c:41:bb:98:07:82:e1:dc:6d:fd:dd:
         08:5e:3e:7e:a8:09:1c:f3:e9:aa:61:69:d1:56:2c:82:b8:b5:
         bb:02:e5:59:ae:c2:51:6c:26:e1:51:38:4a:4d:f6:0a:5f:c1:
         1d:b0:ba:ef:aa:b8:0f:71:73:05:62:39:d9:9a:2c:03:ad:c0:
         3a:cb:d1:fc:90:51:eb:ae:5d:09:8a:e7:3e:a1:a1:de:43:58:
         cc:ce:0b:45:09:09:62:d8:a1:1d:25:12:04:97:19:1c:16:c0:
         7b:33:9d:9b:ed:42:b9:0d:5d:9b:b9:a9:39:6c:94:df:d4:d3:
         79:48:3a:dd:4e:9c:74:8b:00:87:b5:ba:15:ad:40:fe:5c:4a:
         a7:ab:f2:9e:80:cd:0f:6d:a5:1b:fe:a2:3c:00:df:55:1b:3b:
         97:62:2f:42
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAwcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3
MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNDEwMTcw
MTQ1MDRaFw0yNTEwMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEZFMzYzMTkyQjBDOERG
MzhBRDNBQjgzM0RGM0JBQzAyRDI5QUMwNUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCjFvNBEPAq6hdWuJyC3AmMHUPlEjOEX2ycU0GCtGEUrW5TO875
aVBZqE1RFF0sSpq73aq2fYcFSBhvmjMEIZ4dPDlYdrf1eXz3x5o+JmzLfw6XL3KY
q+pbNvEviqhQV0YV3sEatD2lvRL/r/xB7Gyg1pZJTx7+Z2VF4HtU73xcKrf7vxo+
hcQqXclE7c6cVNNRr4UeDeJYhPusZEjwZu81F2ihBEwChW4YMDi5/eEquUnG3Ljg
ifUTX2PcboteElD+hOPHoIqO/3byEZQPjVMQNaIWA3SPnNKel/2Hz2Kish5Y40lR
tHUiONqtslJSHAXIKJPjWrm6ss/dEa2SJq4ZAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQU/jYxkrDI3zitOrgz3zusAtKawF4wHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp
qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR
Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzk0L19qWXhrckRJM3ppdE9yZ3ozenVzQXRLYXdGNC5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAJx1fQwDQYJKoZIhvcNAQELBQADggEBADM/lsmyI9hXYXcKHQXTkpS9yrgo
6llXvIw1ZuY9JGPt/PnAUIf8WxXHNItTULZmRomDximReXHxBu9XsAq/6EI9Ci9Y
hbtCoDN8WEFKbR4jFjQg6/yBOceSRVWyNQFra1R8QbuYB4Lh3G393QhePn6oCRzz
6aphadFWLIK4tbsC5VmuwlFsJuFROEpN9gpfwR2wuu+quA9xcwViOdmaLAOtwDrL
0fyQUeuuXQmK5z6hod5DWMzOC0UJCWLYoR0lEgSXGRwWwHsznZvtQrkNXZu5qTls
lN/U03lIOt1OnHSLAIe1uhWtQP5cSqer8p6AzQ9tpRv+ojwA31UbO5diL0I=
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:41:50 2025 by rpki-client