Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/bnE4X7LlZLTgbxeanUx7nOWbF7c.roa
File:                     bnE4X7LlZLTgbxeanUx7nOWbF7c.roa (raw, json)
Hash identifier:          beSr1AsFInukDr82BuxD1/kafz5z61AN/+qXmDcAshw=
Subject key identifier:   6E:71:38:5F:B2:E5:64:B4:E0:6F:17:9A:9D:4C:7B:9C:E5:9B:17:B7
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       03AF
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/bnE4X7LlZLTgbxeanUx7nOWbF7c.roa
Signing time:             Thu 01 May 2025 01:40:27 +0000
ROA not before:           Thu 01 May 2025 01:40:27 +0000
ROA not after:            Wed 15 Apr 2026 01:30:03 +0000
asID:                     10013
IP address blocks:        27.134.184.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Jun 2025 22:24:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 943 (0x3af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: May  1 01:40:27 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=6E71385FB2E564B4E06F179A9D4C7B9CE59B17B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:c4:74:27:a4:ec:4d:c5:59:27:40:d2:75:7e:
                    a3:a5:51:20:26:3d:51:47:65:ad:d0:ee:74:58:3f:
                    4a:4b:5c:9d:df:fb:2c:e5:9b:18:88:3a:01:4b:ab:
                    26:23:2d:a2:67:6c:04:e8:45:a0:88:59:4c:aa:3d:
                    29:d4:4e:99:b9:b2:47:1a:e0:45:ae:a9:fc:f5:1b:
                    23:a8:12:f4:aa:b9:af:95:45:cb:fd:41:a5:5a:3d:
                    a1:db:de:91:a7:9e:5c:c7:24:14:91:aa:7f:e4:f2:
                    02:32:f5:80:1b:0a:d5:11:d6:11:d3:3c:7d:e4:04:
                    7c:9e:2a:3d:10:bc:ec:75:ea:33:67:ea:83:44:54:
                    64:3c:7e:63:3b:ff:fc:c1:68:99:e5:03:25:4b:48:
                    64:f5:4b:4f:47:8a:f1:15:b8:f2:e2:1b:ee:9f:c1:
                    13:0c:3a:e8:12:99:35:ad:f0:28:b5:b2:d7:94:83:
                    5d:00:3a:e9:5e:60:c5:87:90:13:69:72:94:08:80:
                    49:8f:81:90:98:a0:c8:68:a6:79:32:8b:f0:9d:24:
                    7a:b0:5b:d2:b9:19:3b:2c:1b:29:ee:76:75:94:cf:
                    a8:93:ae:01:73:84:87:56:c0:12:1f:01:51:68:64:
                    35:71:06:b4:de:42:19:08:e9:a5:d7:25:91:b1:31:
                    e7:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:71:38:5F:B2:E5:64:B4:E0:6F:17:9A:9D:4C:7B:9C:E5:9B:17:B7
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/bnE4X7LlZLTgbxeanUx7nOWbF7c.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.134.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3c:ca:f3:7c:b6:b0:c7:f9:26:69:ad:74:8b:25:62:12:12:55:
         53:c8:19:91:83:ac:0a:7a:11:7b:b5:e3:d6:34:f8:85:6e:48:
         78:90:ae:80:f5:ea:0a:d1:cd:18:6f:0d:d7:6b:89:a4:2e:90:
         66:31:21:74:d5:40:8d:84:38:25:d0:cf:39:17:bf:fa:52:3e:
         1b:1d:17:d9:d7:e8:6e:6c:f3:47:d8:00:f0:e4:99:61:2c:da:
         d1:e8:46:e7:2a:29:58:ef:fa:86:20:90:e7:a7:90:de:e9:ef:
         9b:15:4e:00:2e:c7:3e:4c:91:fc:3d:7d:75:84:4c:aa:b6:da:
         f4:7a:db:d7:e1:65:df:39:5b:01:72:13:ed:5c:7e:e8:10:cd:
         93:13:42:10:c4:0f:83:f1:7b:07:a9:4d:84:9c:d4:2c:32:c2:
         90:3f:ee:86:ec:45:6f:e9:55:98:c7:44:c2:d2:44:4e:67:92:
         a2:f4:b4:95:d1:34:af:99:35:e5:af:d0:8b:8a:4c:15:f4:e6:
         3e:d4:99:f9:12:60:76:1b:bd:d1:3d:f4:c2:38:0e:81:49:ba:
         39:98:d7:ba:94:69:30:03:a1:0d:e6:4a:6f:b4:a2:fe:c4:1c:
         5c:1d:ab:73:f2:8a:b9:df:de:9a:13:6a:f4:31:4e:03:b7:d1:
         55:ba:0d:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 01:20:04 2025 by rpki-client