Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/7UuO1HdSmtmF9mV5O0EwsYNMYKA.roa
File:                     7UuO1HdSmtmF9mV5O0EwsYNMYKA.roa (raw, json)
Hash identifier:          SRx2QLLws/AZRh2GG0bYgvq/uiFWGgOIyyH41tCERPE=
Subject key identifier:   ED:4B:8E:D4:77:52:9A:D9:85:F6:65:79:3B:41:30:B1:83:4C:60:A0
Certificate issuer:       /CN=F89E0F15C1E20E191AAF17288F6E30FF01869A6E
Certificate serial:       6E
Authority key identifier: F8:9E:0F:15:C1:E2:0E:19:1A:AF:17:28:8F:6E:30:FF:01:86:9A:6E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/7UuO1HdSmtmF9mV5O0EwsYNMYKA.roa
Signing time:             Thu 01 May 2025 01:29:55 +0000
ROA not before:           Thu 01 May 2025 01:29:55 +0000
ROA not after:            Wed 15 Apr 2026 01:30:03 +0000
asID:                     9605
IP address blocks:        160.249.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 May 2025 18:23:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110 (0x6e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F89E0F15C1E20E191AAF17288F6E30FF01869A6E
        Validity
            Not Before: May  1 01:29:55 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=ED4B8ED477529AD985F665793B4130B1834C60A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:48:84:2a:fd:95:42:1c:47:14:89:ee:95:a2:
                    f4:d3:bb:4e:67:92:dc:42:de:db:c9:cc:fa:2d:1d:
                    ea:24:f3:1b:8d:8b:9d:09:6d:e3:0b:35:85:0d:f2:
                    85:8a:a7:ee:b1:cf:ea:93:f0:45:cf:73:8b:5c:32:
                    97:ba:bb:b2:ae:ff:8a:5c:66:59:02:25:23:33:9b:
                    10:6f:2f:da:2c:da:d4:9a:d8:75:29:a1:8d:4e:46:
                    ef:02:d0:7b:c2:c1:f8:fa:f8:f6:54:cc:2d:07:f1:
                    be:c8:a9:a6:99:d0:70:66:ca:f6:cc:1a:f6:b8:38:
                    16:a5:a9:44:ed:81:49:83:11:96:96:2a:0a:92:90:
                    2a:f0:b8:12:ab:c4:a4:7d:4a:00:53:95:dd:d3:c3:
                    c6:b4:7a:b2:99:a5:5a:83:4f:a2:22:dc:c1:7f:0b:
                    22:fe:df:23:0b:77:84:11:a4:15:e3:67:ef:50:49:
                    76:90:de:be:27:dc:82:38:de:49:7d:ac:b4:20:1e:
                    34:cc:57:a0:79:db:5b:09:06:88:56:89:28:10:ef:
                    69:cc:ee:e9:1c:8a:66:3d:86:e3:93:d9:ac:3a:74:
                    49:15:41:2f:6a:6d:82:72:ab:89:c8:a3:8d:ce:6a:
                    21:c0:31:a4:9d:c9:47:70:87:7d:59:f9:c7:dd:78:
                    b8:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:4B:8E:D4:77:52:9A:D9:85:F6:65:79:3B:41:30:B1:83:4C:60:A0
            X509v3 Authority Key Identifier:
                keyid:F8:9E:0F:15:C1:E2:0E:19:1A:AF:17:28:8F:6E:30:FF:01:86:9A:6E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/7UuO1HdSmtmF9mV5O0EwsYNMYKA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.249.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         ab:f2:eb:9b:fb:43:23:fd:85:70:83:72:d6:15:c2:7e:67:9e:
         c8:42:6c:26:db:06:8a:d5:30:d0:84:75:2d:2b:7f:15:13:f8:
         2f:d9:eb:ae:33:ec:68:b3:72:29:8e:13:e8:21:8a:9c:fc:c6:
         00:58:5b:7d:9c:e8:37:b8:b4:1a:48:b1:bd:11:5c:bb:cc:53:
         5c:94:b1:39:a4:83:f8:15:8c:38:7c:d5:82:2c:e9:29:e0:64:
         0f:37:b1:d8:2d:79:32:64:29:4a:90:05:02:bf:02:fc:07:31:
         16:f4:42:67:e3:06:a6:a9:5a:45:f0:2e:97:98:f3:03:c2:35:
         30:08:36:7c:48:ff:a8:2c:67:60:fb:93:fa:6a:7a:32:c3:85:
         ce:55:29:c6:00:bf:76:55:ff:32:7f:32:f1:f3:c7:c4:0b:86:
         98:13:ca:81:3a:e0:6b:33:9f:2a:f3:9e:90:a0:5d:b5:ed:87:
         e7:95:25:69:e6:3f:09:77:5c:c6:92:a5:8d:cb:dc:c5:8a:c8:
         26:9b:db:d0:2c:2b:4d:27:b4:2d:88:b7:f7:84:31:4b:06:35:
         39:fc:92:e4:38:81:48:4f:af:ed:43:77:c9:a5:87:df:41:a6:
         44:30:5c:f1:86:c5:14:eb:30:a8:40:1e:1c:7c:25:9c:44:1a:
         32:e6:24:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 22:46:53 2025 by rpki-client