Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/5jx7wFJscpRNEytCwZy9skQwb0s.roa
File:                     5jx7wFJscpRNEytCwZy9skQwb0s.roa (raw, json)
Hash identifier:          DfBW8OoCHpPHR8I0g6TJokEbWthEb4N5IH9L8EQGRsE=
Subject key identifier:   E6:3C:7B:C0:52:6C:72:94:4D:13:2B:42:C1:9C:BD:B2:44:30:6F:4B
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0CEF
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/5jx7wFJscpRNEytCwZy9skQwb0s.roa
Signing time:             Tue 01 Apr 2025 02:11:29 +0000
ROA not before:           Tue 01 Apr 2025 02:11:29 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     9605
IP address blocks:        110.163.12.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 15:43:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3311 (0xcef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr  1 02:11:29 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=E63C7BC0526C72944D132B42C19CBDB244306F4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:d4:5f:49:32:9c:4e:e9:bc:35:2e:b9:6b:f5:
                    da:c8:03:1f:1a:b2:c9:4e:5c:2c:45:f3:03:41:7e:
                    79:e5:6a:7c:24:c0:49:a0:c4:c0:3a:b0:df:11:a0:
                    14:e0:70:f0:32:24:23:c3:f6:a9:88:18:98:99:35:
                    01:6b:aa:2a:b4:84:fd:e4:11:ff:22:da:b9:a6:a7:
                    4e:7b:d1:07:32:85:90:b9:35:e8:0c:ed:ae:92:c1:
                    16:30:d0:cb:e1:05:b1:ba:76:1a:72:3e:a3:fb:f7:
                    77:86:8c:70:f6:ea:2d:ec:fd:b1:90:5f:39:d2:6f:
                    ee:be:c4:ab:d4:4c:1d:6f:f3:18:f2:32:69:c6:71:
                    e9:29:b2:1b:1e:70:69:76:82:89:38:ab:f1:d4:41:
                    c4:68:5a:68:90:28:37:e6:d3:40:73:02:00:64:71:
                    85:5a:4d:df:56:bc:ae:e2:55:94:0d:9c:f1:66:b2:
                    9d:38:91:d1:2d:de:69:94:45:56:bf:1e:75:38:67:
                    a2:5b:85:ea:8a:39:c8:fa:71:fe:2b:6b:3e:ff:74:
                    51:1e:36:bd:67:fd:76:01:01:55:21:ab:58:96:ed:
                    18:da:c6:5d:52:99:d9:48:60:43:cd:50:5a:8a:07:
                    6c:af:a5:8c:b0:8f:fe:2b:b3:15:4c:ac:a7:bc:d7:
                    11:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:3C:7B:C0:52:6C:72:94:4D:13:2B:42:C1:9C:BD:B2:44:30:6F:4B
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/5jx7wFJscpRNEytCwZy9skQwb0s.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.163.12.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4d:14:a7:f8:76:0f:26:36:7b:04:19:45:18:30:85:e2:8e:a7:
         ae:61:22:85:e0:2b:8f:fe:f6:c1:a5:fe:81:44:5e:ef:26:ed:
         5a:57:53:db:5b:c5:9e:7c:f7:60:f4:91:d3:5d:24:db:44:90:
         6d:35:22:46:ef:d4:80:20:d3:0b:06:1f:19:dc:59:5a:70:60:
         8c:17:42:68:ad:7e:2f:3b:0a:31:22:29:93:55:09:8b:1c:c8:
         25:d5:cb:e7:15:3e:f8:f7:10:5d:ba:58:da:d0:a3:72:e3:1f:
         74:89:7a:67:07:a2:1b:a6:eb:56:22:8c:ad:ea:3f:f3:3f:35:
         ee:4e:2f:ca:b5:e7:ab:ba:fa:2b:a2:64:46:b7:2d:08:4e:f3:
         72:09:35:c4:82:db:1b:bc:fa:f1:48:15:b7:7f:9c:51:17:d2:
         50:c9:21:69:31:89:e2:87:c0:62:70:e8:c2:0b:41:8e:f5:48:
         4f:be:f7:e8:0c:de:55:1b:ab:b3:8f:e3:cd:80:c5:24:8a:82:
         3d:3d:2d:03:55:a1:c7:a6:0e:15:52:04:07:ee:8e:30:8e:a0:
         bb:6b:6e:29:e1:d7:93:9e:98:14:9c:d7:98:87:b8:d9:5a:72:
         bd:bd:22:d1:87:a7:bf:91:ed:c4:3b:99:2b:55:01:2d:07:93:
         b4:cb:e7:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:23:24 2025 by rpki-client