Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/-jJwv5sxZAhQdDLs-YmtfrAfeus.roa
File:                     -jJwv5sxZAhQdDLs-YmtfrAfeus.roa (raw, json)
Hash identifier:          rX4RllFns/SVAcud/gkb8rcn85PkwRdiCrHZNkYJBN8=
Subject key identifier:   FA:32:70:BF:9B:31:64:08:50:74:32:EC:F9:89:AD:7E:B0:1F:7A:EB
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0BA1
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-jJwv5sxZAhQdDLs-YmtfrAfeus.roa
Signing time:             Tue 01 Apr 2025 01:39:53 +0000
ROA not before:           Tue 01 Apr 2025 01:39:53 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     9605
IP address blocks:        183.75.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 16:57:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2977 (0xba1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr  1 01:39:53 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=FA3270BF9B316408507432ECF989AD7EB01F7AEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:4e:dc:10:47:e8:cc:ca:0a:5e:bc:b3:6e:47:
                    81:a0:02:16:b1:3a:d5:c3:3d:b6:8b:a9:cd:e7:96:
                    f1:b4:d5:a5:fc:bb:9a:d9:fa:a6:a1:25:56:17:86:
                    e0:ba:59:c4:3a:47:de:73:1f:6d:a3:af:ac:4b:e2:
                    a2:6e:08:af:8e:33:56:55:71:6a:37:05:5f:cf:7e:
                    51:13:64:fd:97:e8:69:98:5d:19:d2:ea:b1:82:95:
                    d5:c6:54:e0:a6:1e:82:c1:24:7f:8a:8d:a9:2b:28:
                    53:78:dc:38:78:2a:ce:28:c9:8c:17:3a:39:4b:86:
                    79:6f:94:3e:7a:48:dd:07:a7:2f:0d:96:6b:b4:12:
                    6f:d3:7e:35:b4:7d:12:40:8c:ba:14:f8:15:3c:3e:
                    39:36:f9:09:38:5b:c5:62:44:f0:3a:1a:84:65:a4:
                    03:4a:38:08:9b:ed:3e:87:b2:0c:fa:b6:b5:86:13:
                    e4:e3:c9:8d:96:2a:6c:8d:15:62:72:4b:05:cb:89:
                    8a:56:82:03:7b:65:2a:ef:28:fc:1a:83:21:3f:11:
                    ae:56:b2:49:79:3c:45:ca:1e:c5:8f:75:2d:14:23:
                    73:0e:f9:0e:a1:87:09:5a:84:e2:a1:da:50:91:9f:
                    a6:e4:7f:27:ab:e3:05:ea:c9:ba:d1:c7:aa:66:ae:
                    9b:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:32:70:BF:9B:31:64:08:50:74:32:EC:F9:89:AD:7E:B0:1F:7A:EB
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-jJwv5sxZAhQdDLs-YmtfrAfeus.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.75.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         ad:0e:86:57:1d:96:4d:0f:1e:25:61:b4:a0:28:bb:37:35:52:
         8b:b9:64:3b:df:20:f8:95:bb:64:70:81:f2:c9:45:4a:84:da:
         e7:4e:d4:6b:09:4f:85:fb:b6:ca:8b:67:d0:58:c5:d1:1b:a8:
         30:dc:02:f6:ec:28:bd:e0:70:17:e4:30:89:b2:80:81:3b:bc:
         95:0f:ef:2e:1c:d8:b0:0d:cf:d7:2c:2d:2c:f7:7e:90:e7:5c:
         87:7a:46:81:ab:90:c6:21:75:68:18:5a:d0:b9:ca:8b:fc:7d:
         07:81:85:8c:e0:52:57:ac:00:3a:67:33:66:ae:bd:c0:98:c1:
         68:48:cf:5d:6d:c5:c9:48:28:32:e7:da:a3:d0:56:e4:d5:c4:
         aa:13:61:70:dc:10:80:f5:74:7b:29:a9:3a:06:3f:06:31:50:
         5a:5c:52:4e:6b:4f:1c:51:00:44:3b:1d:f9:89:b3:86:9a:f4:
         94:6b:a7:be:c7:24:9c:1d:27:fd:bd:38:1a:be:b5:a5:23:66:
         e3:f4:c6:c5:0a:fe:c9:19:0b:58:60:da:75:91:bc:95:b3:2d:
         1c:ab:f9:75:04:9c:de:e5:d5:a7:eb:d3:af:2d:75:8f:e4:1a:
         6c:3d:35:b3:fc:c7:47:ef:ff:4d:74:d9:14:d0:65:30:df:17:
         f9:46:94:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:58:57 2025 by rpki-client