Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/6MmzCIhmr9C3eYpcyxHe46J5Yw4.roa
File:                     6MmzCIhmr9C3eYpcyxHe46J5Yw4.roa (raw, json)
Hash identifier:          7TQfPm5J36+4pUMT8aXkQvY78MNjgOtkLpG0C9h4sU4=
Subject key identifier:   E8:C9:B3:08:88:66:AF:D0:B7:79:8A:5C:CB:11:DE:E3:A2:79:63:0E
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0CF8
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/6MmzCIhmr9C3eYpcyxHe46J5Yw4.roa
Signing time:             Tue 01 Apr 2025 02:11:33 +0000
ROA not before:           Tue 01 Apr 2025 02:11:33 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     9605
IP address blocks:        183.72.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 18:34:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3320 (0xcf8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr  1 02:11:33 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=E8C9B3088866AFD0B7798A5CCB11DEE3A279630E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:5b:e3:0c:a6:52:be:d4:c3:dc:bb:1b:3e:27:
                    35:cc:8e:c3:2c:e9:72:b7:c6:b2:62:23:fd:2c:13:
                    29:3a:32:a5:f8:f7:04:de:f3:18:8c:c4:a0:ac:e0:
                    06:55:80:b0:16:9f:2d:1b:39:3a:57:86:f8:be:77:
                    a9:ef:10:cd:38:50:05:8c:16:ff:b2:dc:4f:1b:9b:
                    d3:16:d4:63:65:d7:12:4e:ef:a5:8b:56:4c:aa:5c:
                    ae:e1:93:eb:5b:d2:a0:25:6f:f7:cd:5c:2e:e3:b5:
                    a2:4d:49:26:db:92:e7:35:d8:b7:25:a2:63:d4:7e:
                    45:62:71:3e:1b:b8:5d:c7:71:7a:a0:d8:64:68:7a:
                    08:dd:a2:e4:0f:cb:19:65:87:28:46:4a:38:72:a2:
                    b1:92:56:9c:15:c5:e3:22:e6:4e:2b:75:95:01:f0:
                    26:35:15:93:31:92:35:8e:71:9c:5d:9b:54:60:16:
                    63:8f:88:ea:23:a6:a5:ee:a1:d3:1f:8f:be:36:ab:
                    2a:1a:d1:b6:d5:9d:58:93:e5:12:7f:89:35:7b:77:
                    9c:d3:88:ed:7b:84:59:2e:36:2b:81:c2:99:e3:6d:
                    b7:16:01:a3:58:bf:be:8e:63:ff:51:0f:5b:ce:c8:
                    0f:3a:13:ee:13:9f:6c:30:53:35:b0:ea:bd:3d:60:
                    5c:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:C9:B3:08:88:66:AF:D0:B7:79:8A:5C:CB:11:DE:E3:A2:79:63:0E
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/6MmzCIhmr9C3eYpcyxHe46J5Yw4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.72.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         ca:54:d3:90:0e:b7:d3:88:96:c0:35:0b:f5:7f:98:39:61:ed:
         fc:13:4a:24:11:b7:cb:47:5e:f2:eb:e2:5a:e8:0c:f1:06:bc:
         1a:f8:4e:41:1b:96:45:16:ad:15:c9:53:43:1c:3b:31:dc:92:
         17:39:98:d3:e1:82:ec:2f:28:1e:20:1a:9c:95:38:3b:e4:76:
         fa:af:c4:92:24:d1:0f:b4:80:d8:67:ce:12:3e:b9:a9:cf:af:
         f9:82:73:0d:7e:f6:cf:83:15:2e:1d:a3:9a:29:70:e6:31:ca:
         5f:b9:31:17:c0:d4:e3:04:a0:83:d4:a7:21:62:3a:26:fa:17:
         7d:6e:bf:5d:62:6f:98:eb:62:cb:a2:61:2c:d9:0d:ec:54:ab:
         5c:16:7a:6e:e2:a3:a7:0a:8f:ed:db:9c:0d:73:97:0d:f7:3d:
         a8:2a:ce:4c:ca:4b:5e:27:2c:ff:d9:0d:30:a1:2b:31:b0:36:
         d9:fd:06:aa:fd:67:f2:75:a2:42:1b:60:15:5d:10:3c:87:00:
         85:83:f6:cd:23:4a:f0:9c:00:f0:4e:76:05:f2:2f:0f:be:6b:
         0a:2e:13:ea:98:7b:7c:f6:2d:8b:d6:45:bb:95:89:ac:7e:f4:
         27:23:9b:27:79:71:2b:63:42:c4:f7:83:7f:01:39:d1:09:02:
         8c:64:f7:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:11:25 2025 by rpki-client