Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/sXmA8u6_QnCDP2so7HHUqxVXkYs.roa
File:                     sXmA8u6_QnCDP2so7HHUqxVXkYs.roa (raw, json)
Hash identifier:          rqeZ9VcdnZGoRinvXQ9Fw3qLlwx24U9M++qajSKPYYU=
Subject key identifier:   B1:79:80:F2:EE:BF:42:70:83:3F:6B:28:EC:71:D4:AB:15:57:91:8B
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       030D
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/sXmA8u6_QnCDP2so7HHUqxVXkYs.roa
Signing time:             Mon 21 Oct 2024 01:08:39 +0000
ROA not before:           Mon 21 Oct 2024 01:08:39 +0000
ROA not after:            Wed 15 Oct 2025 01:30:02 +0000
asID:                     10013
IP address blocks:        122.145.36.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 781 (0x30d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Oct 21 01:08:39 2024 GMT
            Not After : Oct 15 01:30:02 2025 GMT
        Subject: CN=B17980F2EEBF4270833F6B28EC71D4AB1557918B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b2:a4:c2:37:91:86:1a:4b:fa:05:4a:d9:12:
                    e8:26:51:c0:26:70:80:29:59:09:aa:2e:87:f6:3e:
                    bd:68:e3:82:7c:c3:80:1c:ed:38:6d:ef:35:bb:9c:
                    80:8b:b6:68:81:fe:63:49:4a:49:98:0f:27:ca:71:
                    ba:3c:7e:2a:68:3a:2a:4e:45:ee:8c:2f:11:e7:bd:
                    d3:ea:4c:dd:62:89:c9:65:3b:aa:77:59:38:b5:21:
                    d8:4b:08:a1:5b:d8:73:06:f2:1b:54:b8:5f:2b:d8:
                    4e:bd:cb:9b:0e:73:62:25:62:f9:d3:fd:32:50:70:
                    a4:b2:6b:61:06:47:d5:bc:c6:1d:5a:7a:70:5b:3c:
                    48:7b:fb:c5:ec:d3:9a:60:22:1c:b8:3a:6d:22:87:
                    c7:c2:fc:80:42:b0:65:8e:43:65:5a:99:c9:ab:b9:
                    08:86:9f:23:2a:77:4f:d3:dc:64:08:fd:16:9d:86:
                    25:75:62:5c:0d:b5:6f:3f:d4:46:62:74:82:02:aa:
                    20:b1:b4:43:73:ed:d7:0f:7e:89:3c:a9:ac:52:44:
                    bd:48:52:00:47:12:7f:c4:29:8e:e2:46:61:34:55:
                    30:5a:bf:b8:13:a1:e2:bf:00:f3:0a:61:c3:8a:1c:
                    03:44:be:f5:af:d1:27:cd:0b:0a:39:ac:09:d0:7c:
                    56:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:79:80:F2:EE:BF:42:70:83:3F:6B:28:EC:71:D4:AB:15:57:91:8B
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/sXmA8u6_QnCDP2so7HHUqxVXkYs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.145.36.0/23

    Signature Algorithm: sha256WithRSAEncryption
         11:b1:27:6e:31:ae:bf:ae:17:38:16:75:16:e7:f6:f5:d4:be:
         51:e3:ed:2d:90:f2:93:b7:0a:cf:f9:e6:dc:e5:65:0c:40:d8:
         cd:b9:8e:e1:c4:ed:e0:7c:15:3a:b3:4d:b1:29:f0:41:e0:13:
         a0:ca:32:07:97:a7:a4:18:89:3f:71:95:bf:7f:07:fa:4a:a5:
         dd:7d:c0:73:e1:c1:a3:89:9c:2d:b5:e0:5e:87:f5:9c:ab:e7:
         37:69:18:89:29:61:60:1a:80:31:13:ce:65:6e:1a:fa:f0:bd:
         73:f2:b2:f5:af:9f:66:81:63:ec:7f:fb:d7:33:3b:82:de:ac:
         7c:ee:fb:44:7a:42:9c:08:82:3e:16:bf:d9:c1:3f:9a:fc:82:
         5a:99:ff:fe:6b:dd:aa:bc:f4:90:0f:0d:16:4c:83:fd:c8:e9:
         e2:cc:a9:dc:48:09:02:99:15:15:41:86:3a:6e:c5:18:8d:e0:
         ab:0e:86:fb:c3:f6:52:52:f8:05:1a:04:12:1f:e4:0c:7f:0a:
         a1:c8:90:08:19:9d:c9:12:ea:a0:91:ad:7d:20:cc:ea:89:3e:
         25:7c:26:88:06:a7:4c:70:79:99:43:0c:bd:57:48:60:fa:db:
         1a:60:06:3c:be:27:34:f2:2a:79:32:de:9d:60:f9:48:0a:94:
         48:20:c8:22
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAw0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3
MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNDEwMjEw
MTA4MzlaFw0yNTEwMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEIxNzk4MEYyRUVCRjQy
NzA4MzNGNkIyOEVDNzFENEFCMTU1NzkxOEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCtsqTCN5GGGkv6BUrZEugmUcAmcIApWQmqLof2Pr1o44J8w4Ac
7Tht7zW7nICLtmiB/mNJSkmYDyfKcbo8fipoOipORe6MLxHnvdPqTN1iicllO6p3
WTi1IdhLCKFb2HMG8htUuF8r2E69y5sOc2IlYvnT/TJQcKSya2EGR9W8xh1aenBb
PEh7+8Xs05pgIhy4Om0ih8fC/IBCsGWOQ2VamcmruQiGnyMqd0/T3GQI/RadhiV1
YlwNtW8/1EZidIICqiCxtENz7dcPfok8qaxSRL1IUgBHEn/EKY7iRmE0VTBav7gT
oeK/APMKYcOKHANEvvWv0SfNCwo5rAnQfFalAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUsXmA8u6/QnCDP2so7HHUqxVXkYswHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp
qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR
Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzk0L3NYbUE4dTZfUW5DRFAyc283SEhVcXhWWGtZcy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAF6kSQwDQYJKoZIhvcNAQELBQADggEBABGxJ24xrr+uFzgWdRbn9vXUvlHj
7S2Q8pO3Cs/55tzlZQxA2M25juHE7eB8FTqzTbEp8EHgE6DKMgeXp6QYiT9xlb9/
B/pKpd19wHPhwaOJnC214F6H9Zyr5zdpGIkpYWAagDETzmVuGvrwvXPysvWvn2aB
Y+x/+9czO4LerHzu+0R6QpwIgj4Wv9nBP5r8glqZ//5r3aq89JAPDRZMg/3I6eLM
qdxICQKZFRVBhjpuxRiN4KsOhvvD9lJS+AUaBBIf5Ax/CqHIkAgZnckS6qCRrX0g
zOqJPiV8JogGp0xweZlDDL1XSGD62xpgBjy+JzTyKnky3p1g+UgKlEggyCI=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:20:32 2025 by rpki-client