Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/7bhN_GmuqZ_HAwCIW2cxgcvxuyM.roa
File:                     7bhN_GmuqZ_HAwCIW2cxgcvxuyM.roa (raw, json)
Hash identifier:          79t5+3qrxnpHw40/1taD7EcO5RHqbVNsREp1rwhMvlI=
Subject key identifier:   ED:B8:4D:FC:69:AE:A9:9F:C7:03:00:88:5B:67:31:81:CB:F1:BB:23
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0383
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/7bhN_GmuqZ_HAwCIW2cxgcvxuyM.roa
Signing time:             Thu 01 May 2025 01:37:25 +0000
ROA not before:           Thu 01 May 2025 01:37:25 +0000
ROA not after:            Wed 15 Apr 2026 01:30:03 +0000
asID:                     10013
IP address blocks:        36.52.126.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Jun 2025 18:13:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 899 (0x383)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: May  1 01:37:25 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=EDB84DFC69AEA99FC70300885B673181CBF1BB23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:1e:36:86:22:e1:1e:bd:63:04:24:d8:62:6a:
                    9e:28:5b:b6:52:26:56:d2:a9:9b:e0:aa:35:34:60:
                    2c:53:f2:5c:46:d7:90:f4:01:ef:5b:fb:aa:1c:81:
                    e5:53:c0:55:0e:ce:d9:f5:0f:fe:08:4d:79:f0:a9:
                    65:95:b5:80:cf:97:7f:ec:8c:32:1d:64:07:c5:3c:
                    9c:73:55:49:34:7f:18:bf:b3:29:1b:c8:d8:00:c7:
                    2a:d3:28:23:a0:42:62:3a:27:7a:1c:20:e6:81:21:
                    a4:a4:a5:a8:a2:81:ef:a3:db:62:df:18:93:58:23:
                    c2:ac:cd:ce:1c:a2:9f:ad:6e:eb:ca:9f:81:4c:b7:
                    6e:80:26:08:b2:70:11:17:86:6a:24:d8:cb:09:b8:
                    a9:c1:8e:77:d5:cd:5b:15:0f:62:b3:90:0b:61:aa:
                    75:e7:03:b4:98:95:d5:63:ef:80:8e:9c:da:6c:a0:
                    29:62:60:19:60:b4:68:4d:3e:ac:34:2c:fb:7f:35:
                    f3:6d:aa:b7:59:12:26:0e:15:2e:33:59:3c:7e:3a:
                    92:1a:52:43:bf:af:27:ab:6b:db:df:6a:12:39:85:
                    df:e6:70:45:ab:83:e5:37:ba:13:0b:11:ab:5a:73:
                    92:85:84:cb:c1:7e:3d:c9:38:9e:8d:7e:28:ce:fd:
                    a0:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:B8:4D:FC:69:AE:A9:9F:C7:03:00:88:5B:67:31:81:CB:F1:BB:23
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/7bhN_GmuqZ_HAwCIW2cxgcvxuyM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.52.126.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3d:05:cc:64:1e:18:e2:37:ab:9b:59:ce:86:e0:63:ee:41:41:
         04:50:48:23:45:fb:76:a3:a0:5f:a2:18:db:ba:0f:43:10:61:
         4b:ed:6c:f9:77:b0:b8:30:5a:36:47:23:54:e4:72:17:f3:1a:
         17:66:c9:d0:10:a2:cf:fd:f2:b7:68:e7:9e:89:d5:b5:7d:e1:
         c2:e7:ac:ed:50:cb:29:c3:c0:5f:31:f7:aa:b4:af:e2:24:dd:
         c2:96:e7:4d:64:4d:82:b6:67:90:b4:95:25:50:e1:c2:a1:b5:
         d6:66:36:a8:ae:6c:d7:8a:51:2a:d9:85:3b:86:1a:7f:98:da:
         de:24:66:e4:0a:6a:78:48:6a:29:81:46:03:a7:08:52:7e:da:
         9c:3b:0d:18:ae:c9:8e:b5:be:cf:18:6e:98:32:03:2a:e0:26:
         26:14:a4:b8:7a:b6:07:4f:63:db:74:86:97:b9:85:08:53:84:
         c5:41:12:b4:c4:59:aa:e3:c6:8f:f3:80:0c:9c:9b:74:84:f9:
         c3:bf:e6:cf:0d:e5:2e:17:ae:ca:a0:85:58:ac:c0:9a:6c:5e:
         13:df:80:d9:d2:00:0e:bf:fe:62:4f:09:54:70:bf:38:1c:54:
         ed:8a:3b:09:91:f7:4e:29:c8:3a:f9:a0:1d:e5:70:c3:34:25:
         73:84:aa:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 20:25:00 2025 by rpki-client