Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/eoWwNvjJti9Cp853gpq5FiifWh8.roa
File:                     eoWwNvjJti9Cp853gpq5FiifWh8.roa (raw, json)
Hash identifier:          KBImhDk1SpxQCmRpzReYhp0gWNlnLEzq+10dkHOyPv4=
Subject key identifier:   7A:85:B0:36:F8:C9:B6:2F:42:A7:CE:77:82:9A:B9:16:28:9F:5A:1F
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0310
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/eoWwNvjJti9Cp853gpq5FiifWh8.roa
Signing time:             Mon 21 Oct 2024 01:08:40 +0000
ROA not before:           Mon 21 Oct 2024 01:08:40 +0000
ROA not after:            Wed 15 Oct 2025 01:30:02 +0000
asID:                     10013
IP address blocks:        124.255.192.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 784 (0x310)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Oct 21 01:08:40 2024 GMT
            Not After : Oct 15 01:30:02 2025 GMT
        Subject: CN=7A85B036F8C9B62F42A7CE77829AB916289F5A1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:2a:d2:a1:76:bc:9f:51:2f:e8:96:52:8d:3a:
                    6a:20:77:0c:06:c2:34:63:4b:02:1e:ba:22:07:ad:
                    b6:7c:ec:51:9a:7c:89:87:39:e2:44:ca:1c:29:bf:
                    1a:07:45:04:76:4f:b9:81:e7:61:88:90:c3:22:07:
                    7d:ea:ea:84:00:bf:87:de:c8:6b:62:b9:d5:25:a3:
                    c5:f5:91:1f:a0:30:dc:10:38:7f:8a:f0:58:54:c3:
                    bc:36:8d:fe:44:a7:71:70:05:9b:d1:d0:6a:b2:be:
                    ad:91:e2:27:7f:ff:78:4b:98:1f:1d:2a:2b:54:46:
                    96:58:a9:e5:87:aa:30:be:9e:42:90:5e:bf:88:be:
                    ca:85:ed:49:0d:1d:c9:f6:b0:e2:8f:db:12:53:f9:
                    0c:bf:63:b9:92:03:18:55:b8:2c:91:33:71:4e:f1:
                    82:56:70:54:5c:10:8c:a8:ae:7c:8c:c0:5c:ef:e0:
                    b4:93:18:32:50:75:da:b3:e8:df:e4:34:39:41:20:
                    77:16:f3:9d:86:86:05:98:b7:69:a2:35:a5:66:c1:
                    74:55:dc:20:35:98:ca:e0:89:50:ee:a9:4f:d7:48:
                    70:6d:34:46:c1:89:54:7a:9b:50:ab:d5:13:a3:c1:
                    50:d4:7e:0d:e5:43:7d:b2:dd:19:c3:00:a6:d4:84:
                    63:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:85:B0:36:F8:C9:B6:2F:42:A7:CE:77:82:9A:B9:16:28:9F:5A:1F
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/eoWwNvjJti9Cp853gpq5FiifWh8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.255.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         10:41:6e:52:3d:2d:ec:4b:50:fd:06:c3:73:49:f2:94:e5:86:
         13:8b:43:83:bf:e6:1b:a1:0a:b4:9a:25:da:d3:53:23:24:96:
         83:b8:96:7c:a6:41:ca:93:fa:d2:5d:f5:92:32:b9:b8:c5:24:
         79:13:1a:2a:61:3e:17:95:bf:4e:36:5f:d8:3c:57:ba:d1:63:
         94:7d:13:dd:40:09:b1:5a:0e:66:15:21:25:75:a2:c9:b9:42:
         ed:d0:d6:b3:99:cc:b1:3b:ce:07:96:d9:61:13:ca:f5:eb:05:
         26:1c:9c:e7:92:e8:44:fc:23:46:16:04:49:91:9a:57:95:27:
         c3:74:f8:b4:de:b6:97:e6:d5:c6:60:2b:4d:bd:ed:c7:1b:ea:
         0b:39:8e:ff:bc:83:3e:e8:eb:95:c7:a3:aa:82:8d:a8:03:f1:
         e0:4b:4e:c1:41:c4:aa:3f:2d:65:cf:7a:c2:0d:4a:97:c8:4c:
         16:b8:dd:46:c1:8b:3a:9d:15:dd:b4:5d:c7:27:8f:ca:7c:8a:
         0a:5a:d5:99:5b:ba:44:7f:84:43:3e:36:40:62:f8:07:eb:47:
         d7:8e:c4:52:8d:58:9a:c2:7b:f2:ce:93:d0:5a:22:2b:9b:c8:
         97:83:e6:a2:ca:79:bf:50:d7:51:ce:e7:81:e4:19:b9:f8:44:
         f0:15:7c:6f
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAxAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3
MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNDEwMjEw
MTA4NDBaFw0yNTEwMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDdBODVCMDM2RjhDOUI2
MkY0MkE3Q0U3NzgyOUFCOTE2Mjg5RjVBMUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDOKtKhdryfUS/ollKNOmogdwwGwjRjSwIeuiIHrbZ87FGafImH
OeJEyhwpvxoHRQR2T7mB52GIkMMiB33q6oQAv4feyGtiudUlo8X1kR+gMNwQOH+K
8FhUw7w2jf5Ep3FwBZvR0Gqyvq2R4id//3hLmB8dKitURpZYqeWHqjC+nkKQXr+I
vsqF7UkNHcn2sOKP2xJT+Qy/Y7mSAxhVuCyRM3FO8YJWcFRcEIyornyMwFzv4LST
GDJQddqz6N/kNDlBIHcW852GhgWYt2miNaVmwXRV3CA1mMrgiVDuqU/XSHBtNEbB
iVR6m1Cr1ROjwVDUfg3lQ32y3RnDAKbUhGPfAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUeoWwNvjJti9Cp853gpq5FiifWh8wHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp
qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR
Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzk0L2VvV3dOdmpKdGk5Q3A4NTNncHE1RmlpZldoOC5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAR8/8AwDQYJKoZIhvcNAQELBQADggEBABBBblI9LexLUP0Gw3NJ8pTlhhOL
Q4O/5huhCrSaJdrTUyMkloO4lnymQcqT+tJd9ZIyubjFJHkTGiphPheVv042X9g8
V7rRY5R9E91ACbFaDmYVISV1osm5Qu3Q1rOZzLE7zgeW2WETyvXrBSYcnOeS6ET8
I0YWBEmRmleVJ8N0+LTetpfm1cZgK0297ccb6gs5jv+8gz7o65XHo6qCjagD8eBL
TsFBxKo/LWXPesINSpfITBa43UbBizqdFd20Xccnj8p8igpa1ZlbukR/hEM+NkBi
+AfrR9eOxFKNWJrCe/LOk9BaIiubyJeD5qLKeb9Q11HO54HkGbn4RPAVfG8=
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:46:32 2025 by rpki-client