Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/q-SChCOr0Z1rT99YU-6E_P11XY4.roa
File:                     q-SChCOr0Z1rT99YU-6E_P11XY4.roa (raw, json)
Hash identifier:          dBk+1QjeL36H5xhiqYbvu/R7bXFAn3y1ffrBCm8TAZQ=
Subject key identifier:   AB:E4:82:84:23:AB:D1:9D:6B:4F:DF:58:53:EE:84:FC:FD:75:5D:8E
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       043D
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/q-SChCOr0Z1rT99YU-6E_P11XY4.roa
Signing time:             Tue 10 Jun 2025 10:45:12 +0000
ROA not before:           Tue 10 Jun 2025 10:45:12 +0000
ROA not after:            Sat 23 May 2026 09:51:00 +0000
asID:                     10013
IP address blocks:        180.131.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 29 Jun 2025 17:41:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1085 (0x43d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jun 10 10:45:12 2025 GMT
            Not After : May 23 09:51:00 2026 GMT
        Subject: CN=ABE4828423ABD19D6B4FDF5853EE84FCFD755D8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:98:10:c4:39:68:de:ff:d5:47:f0:e8:b0:19:
                    6e:9f:51:46:72:af:f1:75:1c:3d:1e:05:79:b1:89:
                    c4:c0:1b:17:10:2f:90:35:44:31:42:45:8b:2b:dd:
                    17:fd:a5:52:54:db:52:3c:66:7d:b4:6e:14:5f:ab:
                    95:d4:25:6f:b7:c0:a6:da:27:87:a8:24:94:6d:7c:
                    a8:a1:a2:38:2e:22:0c:cb:13:4f:5a:ee:49:71:d7:
                    e5:24:0f:5d:ab:a5:26:56:a8:84:b6:d6:ec:38:df:
                    74:dc:33:6b:1b:d5:8e:46:ee:51:d0:b4:b2:21:c1:
                    e0:58:49:c9:65:cb:7c:c6:f5:d8:66:c9:65:2d:00:
                    46:a5:0f:db:11:4b:95:3e:3a:63:3d:8c:6d:33:e2:
                    07:bd:9f:d6:ee:3a:33:8b:35:f4:1e:df:e9:a9:df:
                    7d:b0:bc:0a:25:93:2a:5c:e9:16:91:14:c9:6a:78:
                    39:b8:6f:02:cc:8c:d7:2e:49:82:3b:d7:ff:67:b8:
                    15:76:91:28:33:b5:88:aa:75:00:f9:13:73:50:b4:
                    0f:f4:cb:39:08:fc:da:63:1c:b4:0d:75:5c:c8:67:
                    6f:47:75:4e:c5:a8:19:6b:a0:40:25:1f:28:0d:84:
                    44:3a:25:91:0c:e4:38:0c:5a:54:61:26:e2:36:a3:
                    ce:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:E4:82:84:23:AB:D1:9D:6B:4F:DF:58:53:EE:84:FC:FD:75:5D:8E
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/q-SChCOr0Z1rT99YU-6E_P11XY4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.131.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:8e:ed:5e:95:c9:f8:41:6d:e2:c8:99:fb:89:ed:1e:31:33:
         58:44:cb:a2:9c:84:09:00:76:a9:4c:10:54:49:3c:f7:c7:1a:
         e8:1d:e6:8e:56:10:6b:d8:bc:76:49:62:9c:50:7d:a6:d6:2c:
         30:37:12:1b:37:25:8e:68:98:2a:67:11:4e:41:b7:69:95:c0:
         36:9d:b2:de:f1:c0:63:0b:6e:48:cb:77:22:cc:6a:21:43:0e:
         1c:bc:f5:a4:cf:4e:01:de:07:35:20:cb:6b:25:d2:47:81:b6:
         63:08:0f:e9:35:4e:ec:51:5a:fd:cd:94:fa:b3:ba:df:50:e6:
         db:36:aa:70:9d:a7:2d:78:6e:63:8a:ee:d2:51:fb:e7:6e:6c:
         f1:ec:90:f7:02:5c:8e:01:a3:22:94:de:ae:32:c4:6e:92:61:
         ec:c4:bf:d2:64:8e:38:24:bd:bf:ce:bc:92:a8:93:e2:73:93:
         69:8d:01:fa:b2:8a:86:50:e1:e9:3d:4d:72:58:4a:2c:12:2a:
         98:07:b1:31:e3:1b:c4:d8:99:0f:33:83:52:b0:ff:19:5e:65:
         58:5f:4b:20:a0:bb:7c:fb:f6:d1:c7:1d:e6:c8:78:7b:eb:08:
         5c:d9:97:be:68:d3:18:f0:48:6e:7f:3c:d1:30:aa:91:00:02:
         e0:10:7f:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 19:43:58 2025 by rpki-client