Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/3yv02fH8El3OzMrh2feDt_FfhSk.roa
File:                     3yv02fH8El3OzMrh2feDt_FfhSk.roa (raw, json)
Hash identifier:          5gE3W8UuFlU9eSYzI/wD3mkPo3Za6rYUXh8QJbsA9GA=
Subject key identifier:   DF:2B:F4:D9:F1:FC:12:5D:CE:CC:CA:E1:D9:F7:83:B7:F1:5F:85:29
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0E9F
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/3yv02fH8El3OzMrh2feDt_FfhSk.roa
Signing time:             Tue 10 Jun 2025 11:00:36 +0000
ROA not before:           Tue 10 Jun 2025 11:00:36 +0000
ROA not after:            Sat 23 May 2026 09:51:00 +0000
asID:                     9605
IP address blocks:        183.73.48.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 28 Jun 2025 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3743 (0xe9f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun 10 11:00:36 2025 GMT
            Not After : May 23 09:51:00 2026 GMT
        Subject: CN=DF2BF4D9F1FC125DCECCCAE1D9F783B7F15F8529
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:3e:1e:07:37:b9:21:56:9f:53:40:c6:2d:84:
                    34:13:7c:34:91:f9:e9:31:b6:8a:79:9f:c0:41:78:
                    8b:d3:ec:c0:a0:1e:1a:6c:ac:48:ee:98:37:4e:7c:
                    4a:fc:31:e9:4a:a4:00:32:af:64:cb:bc:95:b9:c2:
                    8b:b6:b9:e3:e9:95:e1:af:fa:cd:23:b0:bf:50:17:
                    15:12:c3:12:45:5a:58:c0:3e:32:58:98:a5:db:bd:
                    c6:7b:bb:41:af:f4:5e:aa:d1:cc:3f:42:69:af:35:
                    e5:35:91:1a:18:65:6a:28:e2:2c:d7:72:9f:97:88:
                    3f:dc:06:e9:65:c0:63:58:1d:b2:c0:5c:62:c8:ee:
                    e2:25:a2:9d:70:da:58:43:6e:65:19:f5:fa:22:e3:
                    65:61:f4:e4:f6:7b:86:3d:13:a5:33:b6:f4:18:47:
                    15:83:5a:e6:27:82:71:bf:ca:c3:07:57:7d:70:f4:
                    e0:4f:3e:61:87:30:6e:1b:47:5d:6f:c6:4f:91:29:
                    e7:0a:98:16:a8:9c:e1:d1:e3:ae:a6:0a:9e:5b:8e:
                    8b:8c:b4:63:0e:80:b5:d3:ac:a0:eb:64:ae:8b:5d:
                    5a:15:c3:17:eb:4b:49:e3:9c:1b:e9:3e:66:12:a2:
                    47:80:36:6c:9a:e6:02:3c:54:cd:31:bb:fa:bd:ed:
                    2d:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:2B:F4:D9:F1:FC:12:5D:CE:CC:CA:E1:D9:F7:83:B7:F1:5F:85:29
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/3yv02fH8El3OzMrh2feDt_FfhSk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.73.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         05:bf:67:26:c9:4c:94:ed:3b:04:46:64:b1:80:43:07:36:81:
         34:8b:7d:2b:f5:28:a6:0a:68:cc:0e:e6:dd:c3:87:fa:a9:fd:
         4d:90:0d:46:ad:fb:bb:c2:8a:5d:89:fb:38:39:be:10:6b:40:
         f9:8a:4b:a5:73:e5:1e:1f:db:ff:57:96:8d:16:22:3e:48:47:
         13:4d:3c:47:ea:13:03:23:0b:ca:b0:c0:4d:5b:a7:5b:77:9f:
         36:82:3d:49:37:a4:5d:ee:bc:5c:0d:e6:26:a0:a1:cd:e8:1a:
         31:48:dc:c7:ee:94:09:09:53:87:25:26:20:1f:71:93:fe:86:
         bd:3c:ec:e6:af:de:d8:1a:85:9a:38:38:04:71:bf:a8:bf:62:
         94:b6:f4:19:c1:c6:e6:3a:4a:50:a6:3b:fd:e4:44:a1:ca:60:
         73:3f:7a:45:fa:3a:d2:6a:cb:5f:dd:9c:a3:e7:c4:d6:07:20:
         e5:0a:8d:85:42:eb:72:e2:ed:ff:85:75:5d:06:f0:f6:45:68:
         67:94:24:1c:d9:63:b7:4d:6a:d2:14:91:5a:dc:16:63:ed:06:
         7e:4d:fb:ce:ac:43:6d:b4:54:c2:f6:8a:f6:31:f8:10:22:7d:
         92:c7:1d:fd:84:eb:36:36:e3:cc:5b:4a:63:c4:c4:bc:e7:41:
         b7:59:70:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 08:46:36 2025 by rpki-client