Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/GleWCisGydnSYqe6W6x5T5cTzV8.roa
File:                     GleWCisGydnSYqe6W6x5T5cTzV8.roa (raw, json)
Hash identifier:          xJXWA/bmoJUp3feiADlvg73FBkAuW7tlRRPI+4bGVu8=
Subject key identifier:   1A:57:96:0A:2B:06:C9:D9:D2:62:A7:BA:5B:AC:79:4F:97:13:CD:5F
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0EEB
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/GleWCisGydnSYqe6W6x5T5cTzV8.roa
Signing time:             Tue 10 Jun 2025 11:12:35 +0000
ROA not before:           Tue 10 Jun 2025 11:12:35 +0000
ROA not after:            Sat 23 May 2026 09:51:00 +0000
asID:                     9605
IP address blocks:        49.103.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 28 Jun 2025 21:03:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3819 (0xeeb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun 10 11:12:35 2025 GMT
            Not After : May 23 09:51:00 2026 GMT
        Subject: CN=1A57960A2B06C9D9D262A7BA5BAC794F9713CD5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:62:2c:47:4f:8e:48:ce:c7:e7:bc:42:39:5b:
                    2a:49:e6:ef:4d:bb:58:92:84:cd:b7:c3:5d:6f:21:
                    88:c4:05:7e:c2:2f:e9:9c:b6:b6:be:6a:92:fc:99:
                    1c:fb:a9:b4:ac:eb:90:0c:9a:54:1e:2a:d4:e1:c9:
                    fe:46:56:1c:0a:4f:94:61:13:58:c9:d0:3c:de:00:
                    a2:57:18:85:fb:0e:32:64:4e:51:8e:0f:87:75:d1:
                    23:48:95:10:72:4b:98:47:d7:1d:22:41:3b:23:a9:
                    19:c4:78:55:08:fe:03:81:cb:ed:56:4e:27:c7:d6:
                    df:6b:a0:0e:17:56:b5:cb:e7:23:bd:b9:59:29:0b:
                    18:63:a7:70:50:de:c9:9a:d3:85:92:a6:fc:8f:26:
                    16:c1:18:ac:ec:ab:a6:27:f6:68:d8:1a:bf:0e:79:
                    92:03:63:ef:bd:14:bf:9d:df:7b:32:4f:52:a1:5c:
                    9d:1d:dd:6e:1c:05:88:f8:20:b7:a4:57:f1:20:51:
                    47:63:d8:5d:70:e8:18:df:46:a2:87:7e:9b:1c:fd:
                    8d:66:df:86:6d:0e:07:b7:c3:50:23:2b:45:81:fd:
                    1b:0d:e0:05:64:35:7c:73:87:12:3f:0e:3c:8a:ab:
                    f5:d8:a3:bc:4a:1b:79:a4:4b:fa:fc:e1:d1:55:64:
                    12:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:57:96:0A:2B:06:C9:D9:D2:62:A7:BA:5B:AC:79:4F:97:13:CD:5F
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/GleWCisGydnSYqe6W6x5T5cTzV8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.103.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:3e:25:c4:63:42:5a:87:bd:41:37:ea:a3:88:06:6b:6d:99:
         89:fe:78:ba:57:17:a7:11:2c:1a:91:aa:ef:0a:41:ca:33:bf:
         32:58:2d:f5:76:f6:ea:c9:ed:16:4b:5d:7f:d5:19:0b:fd:03:
         0f:49:cf:07:3f:a1:5e:8d:97:ee:c0:30:97:66:30:a4:12:1b:
         98:d6:3b:32:2c:a2:77:a9:89:81:fb:35:82:85:03:72:0c:9b:
         b4:13:28:3b:8a:d5:0d:62:60:d8:f9:5d:31:16:02:70:26:db:
         02:89:75:51:e2:43:16:4f:e1:70:81:b6:c6:2f:6a:80:4f:6a:
         0d:31:36:13:4c:51:ed:4c:34:40:07:ee:c9:83:90:14:02:d0:
         d2:70:b7:2b:22:9b:92:53:73:4d:33:30:05:f5:ef:9e:2f:b3:
         bc:e5:0f:9b:b5:91:86:0d:99:bc:cd:ff:66:37:9c:4c:b9:20:
         f2:42:2a:4e:2d:bd:0d:31:31:d2:dc:28:29:ed:a6:b4:e2:2e:
         86:fb:7b:97:b4:3c:99:d7:9e:bb:29:b4:df:6d:87:b4:8f:42:
         d2:38:2e:68:68:7f:0c:f3:0e:f5:a4:6f:0a:84:46:57:2f:e9:
         b0:6e:1c:27:51:d5:11:61:81:df:f6:d3:ba:9a:96:01:e7:2c:
         69:32:4b:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 23:27:06 2025 by rpki-client