Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/317fHkYge4iX8eAxSs1d5NpXiD4.roa
File:                     317fHkYge4iX8eAxSs1d5NpXiD4.roa (raw, json)
Hash identifier:          6p+5tXURkOH6KEI/WeZMF9hgIG1DhckpLFwwJgMfATM=
Subject key identifier:   DF:5E:DF:1E:46:20:7B:88:97:F1:E0:31:4A:CD:5D:E4:DA:57:88:3E
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0EE3
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/317fHkYge4iX8eAxSs1d5NpXiD4.roa
Signing time:             Tue 10 Jun 2025 11:12:31 +0000
ROA not before:           Tue 10 Jun 2025 11:12:31 +0000
ROA not after:            Sat 23 May 2026 09:51:00 +0000
asID:                     9605
IP address blocks:        49.107.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 27 Jun 2025 16:04:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3811 (0xee3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun 10 11:12:31 2025 GMT
            Not After : May 23 09:51:00 2026 GMT
        Subject: CN=DF5EDF1E46207B8897F1E0314ACD5DE4DA57883E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:0b:84:16:c0:de:61:f1:5d:ca:a6:03:f1:98:
                    36:cb:59:63:ef:9e:b4:9f:6d:96:05:0b:b9:bc:58:
                    d1:bf:c4:3a:4f:a9:06:e4:1a:c4:00:a1:02:69:28:
                    f5:b5:b8:2f:cd:fa:a5:a3:6f:0e:e1:82:38:65:67:
                    c4:e5:23:76:bb:ed:82:c5:66:ec:c5:42:f7:c3:cb:
                    11:f4:10:35:96:c9:09:28:91:74:5b:a0:eb:f3:cd:
                    61:9b:e8:b8:03:27:09:f2:c6:63:c7:ed:b8:a6:f4:
                    99:3b:72:06:50:35:d2:04:e3:f8:e1:a3:b8:33:ca:
                    ba:e9:88:e4:0c:29:55:0b:19:74:f8:f7:af:69:db:
                    a6:19:91:1e:57:f2:54:82:c2:d9:6c:0b:b6:f7:bb:
                    18:93:7a:78:99:68:0a:fe:fa:a7:d1:0c:10:7f:55:
                    c2:6c:23:06:99:53:2e:ce:26:fa:fb:e7:06:5c:a2:
                    3e:42:6e:32:55:39:71:9f:5c:39:8b:d5:6c:9d:06:
                    b7:df:a2:a8:fa:2f:b6:60:1c:ec:0a:37:8e:74:93:
                    07:44:d1:73:b1:a6:5d:92:23:76:8a:67:ce:c5:7c:
                    79:1a:1a:09:1a:a4:2a:dc:3d:68:42:1e:a2:07:6c:
                    73:7f:dc:e9:d0:21:14:92:84:1f:2b:96:35:00:ee:
                    95:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:5E:DF:1E:46:20:7B:88:97:F1:E0:31:4A:CD:5D:E4:DA:57:88:3E
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/317fHkYge4iX8eAxSs1d5NpXiD4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.107.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         78:bc:33:86:31:a5:bb:47:e7:f2:3e:7c:22:49:9a:5f:23:8e:
         5f:02:63:a7:e8:f9:ad:e2:d5:24:54:7f:78:b6:ad:9b:c4:db:
         65:1c:a1:67:d7:c6:0d:e5:56:7d:2a:fb:f6:5a:3d:ae:78:14:
         c9:57:59:80:d9:ab:0e:37:92:27:5f:e0:a1:3b:fc:5c:60:c2:
         a4:8d:8a:06:f2:6b:df:30:7c:87:d4:f3:41:12:c8:49:b7:c8:
         c7:6c:11:1e:6f:60:07:1e:00:ec:08:d7:c9:06:b8:f8:fc:fc:
         24:c5:02:1d:e6:f3:fe:63:29:77:0c:d0:5c:74:6c:f3:b6:80:
         d4:9d:58:f9:cc:b9:22:22:53:12:64:e4:d0:6e:a7:df:4a:8e:
         aa:91:c1:3f:f0:a3:f1:76:60:96:0b:08:04:79:ec:87:f6:d1:
         65:e1:12:2d:2c:1d:92:0f:47:9b:a9:26:91:2d:be:b0:d9:1f:
         81:57:40:ee:ae:f0:2d:33:1d:e6:61:cc:61:c0:4b:21:e3:fe:
         ac:1f:4a:84:e0:74:5d:e5:2a:d7:6b:7c:07:63:12:86:5a:c4:
         f7:d1:45:3a:69:4c:3f:d9:f7:d2:b4:02:e2:72:d6:9f:ef:c7:
         54:01:5a:55:2b:f1:02:e7:ea:58:c4:62:5f:c0:42:e3:7d:fc:
         ae:72:d0:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 18:07:24 2025 by rpki-client