Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/1xTdm5kgCFuY7Om11XbcEkvuQTY.roa
File:                     1xTdm5kgCFuY7Om11XbcEkvuQTY.roa (raw, json)
Hash identifier:          sn6rBAQdlLLtKMFA0C2r8D9a26n0NBq6KaAk2KSXtXI=
Subject key identifier:   D7:14:DD:9B:99:20:08:5B:98:EC:E9:B5:D5:76:DC:12:4B:EE:41:36
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       030E
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/1xTdm5kgCFuY7Om11XbcEkvuQTY.roa
Signing time:             Mon 21 Oct 2024 01:08:39 +0000
ROA not before:           Mon 21 Oct 2024 01:08:39 +0000
ROA not after:            Wed 15 Oct 2025 01:30:02 +0000
asID:                     10013
IP address blocks:        122.145.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 19 Mar 2025 20:25:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 782 (0x30e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Oct 21 01:08:39 2024 GMT
            Not After : Oct 15 01:30:02 2025 GMT
        Subject: CN=D714DD9B9920085B98ECE9B5D576DC124BEE4136
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:52:de:17:ee:96:30:ec:3e:85:b9:90:c2:9e:
                    69:c7:7e:49:8b:cc:83:3a:88:fd:68:3d:19:bb:36:
                    d1:6d:ec:3d:6f:0c:1b:29:84:c3:e3:b8:86:1a:38:
                    38:3d:19:a8:1d:62:50:1d:05:71:22:e9:36:35:cb:
                    b8:1d:a4:af:95:28:7f:ab:65:49:93:cf:9c:14:23:
                    4e:2d:ce:55:f0:23:c5:94:1e:0b:72:63:d8:f8:7f:
                    dd:c1:9b:ad:74:ea:80:76:53:d0:e3:e3:d9:04:e6:
                    56:73:a0:83:5a:f6:1b:e0:71:01:91:66:c6:d7:89:
                    c2:df:c7:7a:ad:e4:1d:13:06:0b:ee:a8:e2:20:76:
                    8d:40:f6:1b:58:ca:33:9c:dd:38:f0:88:8e:ea:eb:
                    6d:b6:69:9d:7f:dc:2c:e8:14:e6:e8:7e:5f:9d:ab:
                    9c:58:7a:81:68:3a:39:2c:17:c0:f0:b9:7b:19:f8:
                    45:04:19:26:20:3e:82:a3:98:61:0f:30:93:c8:70:
                    b2:d6:2d:be:56:3b:04:e1:b3:27:64:da:49:35:38:
                    aa:ba:7d:3f:21:92:3f:89:21:d6:90:3c:20:fa:cc:
                    51:24:e0:32:7e:09:35:f1:64:fb:b0:0d:a1:63:8d:
                    28:12:7a:da:2c:da:a7:7c:a2:e4:76:fd:0c:32:f4:
                    de:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:14:DD:9B:99:20:08:5B:98:EC:E9:B5:D5:76:DC:12:4B:EE:41:36
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/1xTdm5kgCFuY7Om11XbcEkvuQTY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.145.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:1a:a6:fc:26:e3:72:0e:20:ea:43:ac:d0:42:cb:d0:8a:13:
         b6:7e:1a:8c:b2:69:51:a4:04:87:68:fa:03:36:65:11:b5:f2:
         66:ea:61:46:cd:37:88:cd:20:b6:38:a4:43:8f:94:a4:7c:1e:
         32:1f:2b:74:08:c1:86:93:bb:f9:de:d2:a1:bd:da:29:1f:7a:
         20:9a:c1:82:ce:94:73:0b:91:c4:2d:39:9c:fb:1d:00:a1:ce:
         18:8b:40:06:2a:24:9e:b2:bf:24:67:c1:b5:c1:99:02:be:8f:
         7a:12:b2:b5:ce:aa:6d:4f:7a:1f:f1:1a:0d:a6:cb:14:e9:7b:
         2e:7d:62:2c:89:32:38:4c:47:23:0b:74:9e:fd:f8:1f:07:e2:
         9a:54:17:c2:6d:e8:0b:22:20:d1:33:bf:fc:b6:ed:01:ba:f2:
         8b:ff:51:c6:08:77:f3:06:1c:fc:37:a3:7c:dd:50:82:c0:e5:
         2d:8d:cc:ff:4e:28:f0:25:bc:f6:2a:fb:76:02:6f:57:f3:f2:
         5f:45:74:40:c6:49:e7:d9:14:31:e7:cd:4f:cb:18:a6:fc:51:
         87:49:3d:05:6e:15:c1:6f:50:7c:7f:65:aa:f6:67:56:22:d9:
         75:fc:40:ad:82:29:b0:e6:c6:98:f3:46:84:06:71:70:53:43:
         0e:fa:d4:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 01:48:47 2025 by rpki-client