Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/6LR7qRuj_GrN90jwwvyv3XfQ7Is.roa
File:                     6LR7qRuj_GrN90jwwvyv3XfQ7Is.roa (raw, json)
Hash identifier:          Fz588Y9BNnv5LsB/SdDY6tiPVs/hpCsV48F0Ryv6xqY=
Subject key identifier:   E8:B4:7B:A9:1B:A3:FC:6A:CD:F7:48:F0:C2:FC:AF:DD:77:D0:EC:8B
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0FB3
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/6LR7qRuj_GrN90jwwvyv3XfQ7Is.roa
Signing time:             Tue 10 Jun 2025 11:44:11 +0000
ROA not before:           Tue 10 Jun 2025 11:44:11 +0000
ROA not after:            Sat 23 May 2026 09:51:00 +0000
asID:                     9605
IP address blocks:        110.163.24.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 28 Jun 2025 14:16:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4019 (0xfb3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun 10 11:44:11 2025 GMT
            Not After : May 23 09:51:00 2026 GMT
        Subject: CN=E8B47BA91BA3FC6ACDF748F0C2FCAFDD77D0EC8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:3a:9f:ed:74:fa:fd:e1:de:b1:b2:95:1b:9a:
                    e4:ff:34:77:77:b5:8e:88:d5:44:ed:00:32:c4:e1:
                    25:9d:66:23:9e:a3:48:67:e8:1c:61:92:b3:c1:19:
                    58:56:83:c7:86:57:da:9d:14:d4:97:00:c8:3d:b9:
                    64:52:31:94:f8:ec:ec:c7:d1:58:14:ff:72:fd:60:
                    7c:8c:e7:32:b2:f6:78:34:96:d5:20:54:9c:2c:50:
                    96:9e:a2:99:94:15:7a:ab:04:ef:e0:1e:b6:77:ef:
                    37:9d:d2:0d:6a:d9:bc:4e:c7:b4:c1:7c:6d:7e:32:
                    a0:4a:f0:be:81:f3:2e:a8:82:4b:54:a2:e0:99:5f:
                    32:6c:a5:e0:67:e2:32:8b:26:39:1d:85:15:5e:8d:
                    cf:01:d7:ff:fa:80:b9:8d:62:5a:98:25:52:75:f5:
                    ec:d3:4c:56:72:81:9e:36:a7:9a:37:a2:d3:4e:16:
                    5b:52:81:7c:37:b3:6a:66:a4:cd:4f:07:0d:ce:cc:
                    b5:53:02:23:62:d5:58:fc:68:2e:f1:87:37:43:9d:
                    41:9c:3c:ae:3e:32:3b:a4:ef:e8:10:5e:23:1d:64:
                    10:30:d0:27:e5:e6:c2:fc:44:4a:70:de:cf:c3:15:
                    f5:10:78:76:80:fe:88:7b:68:d9:b1:a0:58:50:6c:
                    38:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:B4:7B:A9:1B:A3:FC:6A:CD:F7:48:F0:C2:FC:AF:DD:77:D0:EC:8B
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/6LR7qRuj_GrN90jwwvyv3XfQ7Is.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.163.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         20:cf:98:0f:14:b1:74:76:07:a4:63:88:f7:3d:ba:ee:b9:ba:
         4b:3b:de:7f:23:27:df:1b:45:a5:6b:3f:26:ae:e0:2f:63:d8:
         d5:db:d4:f5:6d:d1:06:2f:02:f9:d6:21:38:b7:7a:c4:0e:75:
         a7:24:e3:59:b9:df:16:9d:c5:88:a4:59:e7:8a:e4:38:e7:c7:
         b8:a6:e2:a0:3b:0a:1e:9a:09:da:a5:8f:45:9a:98:0d:52:ab:
         38:85:da:6a:78:e4:fa:4a:df:be:c1:01:4e:0d:7f:bc:66:97:
         28:e5:e4:d1:fd:d3:03:5a:43:c3:bf:7b:46:fb:46:44:3d:cf:
         14:ea:7a:7e:79:33:03:ba:ae:30:dd:75:22:55:65:6d:38:fe:
         0d:16:b1:44:f7:1e:d4:88:2b:cc:dc:1c:64:61:53:41:9b:55:
         3f:5a:02:4e:cb:c6:c5:d0:8f:60:5e:60:10:a2:68:9b:8f:9d:
         77:f2:e9:5c:71:60:8a:23:97:0a:12:5e:0e:4a:af:03:27:9d:
         b5:50:ec:cc:21:77:cd:1d:40:1a:7d:74:6d:3c:68:1c:23:c9:
         94:45:03:55:67:dd:c2:14:73:cb:69:f4:ca:ed:94:c6:2f:32:
         6a:44:a0:0f:3d:28:cc:db:3f:9f:c5:c7:62:a2:14:7b:9e:0a:
         24:00:e7:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 16:53:22 2025 by rpki-client