Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/7h6oqTIG8lw1bnD_BODf2wmyw8s.roa
File:                     7h6oqTIG8lw1bnD_BODf2wmyw8s.roa (raw, json)
Hash identifier:          LfcZ8xcEtygmTVrpw2wwVAuVzPXiKwgAyjK89x1dGZ0=
Subject key identifier:   EE:1E:A8:A9:32:06:F2:5C:35:6E:70:FF:04:E0:DF:DB:09:B2:C3:CB
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0F0A
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/7h6oqTIG8lw1bnD_BODf2wmyw8s.roa
Signing time:             Tue 10 Jun 2025 11:16:53 +0000
ROA not before:           Tue 10 Jun 2025 11:16:52 +0000
ROA not after:            Sat 23 May 2026 09:51:00 +0000
asID:                     9605
IP address blocks:        49.105.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 28 Jun 2025 21:03:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3850 (0xf0a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun 10 11:16:52 2025 GMT
            Not After : May 23 09:51:00 2026 GMT
        Subject: CN=EE1EA8A93206F25C356E70FF04E0DFDB09B2C3CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:0d:01:4b:33:f5:24:68:a7:17:0a:26:83:74:
                    c9:76:41:ca:f6:38:3d:44:51:3b:0d:c8:98:f4:12:
                    3d:62:c2:be:ae:a1:bb:e9:fc:14:dd:76:02:27:8e:
                    2a:0c:71:ac:bc:cf:c7:a8:f4:bd:68:36:b2:8d:47:
                    d0:c4:c0:24:67:43:a9:7f:3d:a3:bd:b5:a1:64:4b:
                    28:61:9f:45:67:8c:80:a6:ab:59:a0:27:e1:44:18:
                    a1:b7:6a:b9:fe:18:bc:e9:5b:36:0e:65:57:ee:a3:
                    7e:ad:70:87:2a:68:f9:66:56:6c:49:12:ed:61:8c:
                    a3:f5:e1:70:fa:f8:37:b4:fc:5f:04:d9:b2:42:04:
                    1b:7a:46:92:53:5a:73:db:5a:a1:3b:d4:d6:72:91:
                    a5:27:9c:5e:a8:ce:f8:17:ef:8a:88:dd:4f:ec:8a:
                    16:0a:55:9a:73:8d:5a:61:1e:90:24:41:a7:17:b5:
                    2e:b9:32:87:34:86:c7:49:8c:05:01:6d:aa:b0:9b:
                    d1:a3:f5:ab:ed:81:9d:d9:64:b1:59:13:f2:5e:ed:
                    75:cc:bf:04:65:56:b5:56:22:04:1b:d8:2f:a8:6f:
                    20:dc:55:16:49:b0:26:84:a4:16:d8:3a:39:7c:07:
                    bb:1a:6d:4a:32:70:17:3a:08:f1:05:ee:c5:b4:8b:
                    a9:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:1E:A8:A9:32:06:F2:5C:35:6E:70:FF:04:E0:DF:DB:09:B2:C3:CB
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/7h6oqTIG8lw1bnD_BODf2wmyw8s.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.105.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:ff:51:5b:f3:ec:1b:d9:50:c0:3e:1c:3a:a1:b4:59:90:be:
         2e:25:45:9c:72:af:32:cc:d2:fa:d0:19:1e:ec:cf:57:81:a8:
         a0:cf:f6:40:c7:0d:f4:4f:e1:cc:e4:43:57:7d:b8:ce:76:ec:
         59:37:bf:87:8e:05:3d:1a:c3:65:a8:98:e9:0f:c3:f4:a6:8c:
         ab:f6:62:45:f8:d9:e8:05:e1:13:7d:0a:12:dd:73:7e:c3:8f:
         c9:cf:81:11:5a:de:f7:8f:78:14:27:84:2e:80:62:b8:60:2f:
         f3:83:b9:31:c1:0a:e0:30:34:10:91:fe:ef:4a:79:04:f5:e8:
         38:9b:55:c0:32:2a:c8:8a:1d:26:d4:01:21:b9:9c:d6:29:8f:
         7e:3d:26:7a:a7:ef:b9:52:41:7b:bd:b8:eb:f3:5a:4a:ea:bf:
         a1:42:f1:a2:19:3f:f4:de:f2:88:42:0d:db:c6:93:a5:7b:3f:
         78:5b:93:be:24:4a:59:9a:dd:4c:ad:59:17:5f:4c:c3:e5:d2:
         24:08:01:e1:6c:33:72:08:44:b6:60:39:a3:f0:f6:df:d2:c2:
         61:97:56:e8:b1:c5:d0:68:61:11:5e:c6:f0:4d:80:c4:50:d9:
         55:fd:85:0a:8e:e8:9c:f5:eb:01:0f:6f:ca:3f:37:31:dd:9c:
         06:3c:f8:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 03:58:04 2025 by rpki-client