Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/3PPV-BMro7V33KDMcH4d4tp7utg.roa
File:                     3PPV-BMro7V33KDMcH4d4tp7utg.roa (raw, json)
Hash identifier:          X+40+BrOmulyxFlIUUa9Cqlku+2KgQFF7LsGvg9Srfs=
Subject key identifier:   DC:F3:D5:F8:13:2B:A3:B5:77:DC:A0:CC:70:7E:1D:E2:DA:7B:BA:D8
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0F45
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/3PPV-BMro7V33KDMcH4d4tp7utg.roa
Signing time:             Tue 10 Jun 2025 11:28:20 +0000
ROA not before:           Tue 10 Jun 2025 11:28:20 +0000
ROA not after:            Sat 23 May 2026 09:51:00 +0000
asID:                     9605
IP address blocks:        27.230.100.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 27 Jun 2025 21:26:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3909 (0xf45)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun 10 11:28:20 2025 GMT
            Not After : May 23 09:51:00 2026 GMT
        Subject: CN=DCF3D5F8132BA3B577DCA0CC707E1DE2DA7BBAD8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e9:70:df:47:6b:ca:1f:94:82:c0:eb:76:76:
                    0a:79:d1:89:e0:27:c6:07:c2:14:99:4e:17:ae:5c:
                    53:cd:f8:aa:a2:16:c2:38:65:b5:6f:0b:74:4b:76:
                    20:9a:4c:c6:47:82:d0:a0:ea:85:b8:3f:fa:c9:50:
                    c6:14:7c:ca:28:a5:72:7e:8b:26:21:dd:57:b4:c6:
                    20:db:d7:20:78:c9:c6:3f:b4:9a:e4:de:b8:78:a5:
                    ad:9e:85:86:c9:5e:be:1e:5d:c4:26:d7:f4:e5:17:
                    2f:78:30:94:64:69:f7:1a:a5:07:8d:03:68:9c:2c:
                    d6:46:01:82:37:00:be:dc:49:bf:18:11:bf:4b:d4:
                    59:be:6b:ab:c4:e1:4c:49:34:1a:c3:dd:f0:6f:9a:
                    bf:7e:0f:90:14:c5:d8:fb:d5:a1:ee:95:5d:2b:6f:
                    70:b3:9d:44:08:d1:8c:ff:2b:4d:23:2b:28:78:dd:
                    2a:30:dd:30:83:5f:37:0a:d3:84:b3:e8:1c:41:88:
                    74:e1:b0:7a:82:ae:85:c7:15:c5:d6:93:3d:6a:e7:
                    2b:3d:39:3a:6e:e7:91:5f:b4:ef:e0:e8:5c:d0:f2:
                    d0:be:11:4e:30:8a:ff:70:c6:15:44:a5:06:99:dd:
                    62:6e:48:71:55:c8:47:0d:c5:2e:92:f9:46:7e:85:
                    2d:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:F3:D5:F8:13:2B:A3:B5:77:DC:A0:CC:70:7E:1D:E2:DA:7B:BA:D8
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/3PPV-BMro7V33KDMcH4d4tp7utg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.230.100.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2a:ec:54:72:bf:43:5d:dd:55:65:f8:88:1b:3b:97:06:22:a2:
         65:74:0c:8d:f1:7c:49:0d:b7:1f:e0:81:d7:25:12:ff:69:3b:
         47:77:65:f6:99:2a:38:90:32:8c:de:d5:db:7f:df:7a:6f:62:
         f4:8c:67:58:f9:9a:f0:d5:34:ef:5f:eb:29:bd:81:fd:c3:a8:
         09:e3:a2:64:7c:64:f5:02:ef:62:7e:86:6a:73:70:93:f3:05:
         a4:f3:ee:a9:b2:31:47:34:8d:c2:bd:50:2d:d1:a1:d1:99:a1:
         3a:cf:9e:3a:14:06:4b:cb:f3:49:60:61:df:37:d9:56:db:4e:
         ae:19:21:a2:f5:15:92:2f:75:cc:05:db:7b:53:5a:47:b2:db:
         ce:38:0d:7f:d5:e3:0c:8c:59:d4:19:e1:f5:2c:66:f5:c2:ed:
         c3:68:ae:d1:cc:40:b0:7b:a7:e3:b4:9e:46:00:fa:75:62:f0:
         5d:bc:e7:f1:ec:58:13:98:ba:e2:a6:2e:42:23:df:a0:4c:b2:
         f4:51:b0:f9:b3:5b:da:3e:eb:53:fd:78:5b:0e:84:10:56:c0:
         4a:7e:4d:72:96:2d:5c:8b:96:71:57:c6:f6:f4:b5:e6:64:53:
         10:af:d4:23:e4:1b:12:1c:7a:37:d0:c8:04:19:9e:06:62:89:
         68:a3:80:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 02:09:30 2025 by rpki-client