Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/HQDM6B585pqA7Ny-eY7myEegH2w.roa
File:                     HQDM6B585pqA7Ny-eY7myEegH2w.roa (raw, json)
Hash identifier:          NnFzq/dvzBlIc9Hrfg8kVaN24rPUk8jBB2L88UM1HEc=
Subject key identifier:   1D:00:CC:E8:1E:7C:E6:9A:80:EC:DC:BE:79:8E:E6:C8:47:A0:1F:6C
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0E99
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/HQDM6B585pqA7Ny-eY7myEegH2w.roa
Signing time:             Tue 10 Jun 2025 11:00:33 +0000
ROA not before:           Tue 10 Jun 2025 11:00:32 +0000
ROA not after:            Sat 23 May 2026 09:51:00 +0000
asID:                     9605
IP address blocks:        49.105.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 28 Jun 2025 21:03:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3737 (0xe99)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun 10 11:00:32 2025 GMT
            Not After : May 23 09:51:00 2026 GMT
        Subject: CN=1D00CCE81E7CE69A80ECDCBE798EE6C847A01F6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:65:0a:4d:28:16:5e:7f:24:88:c4:9e:cd:dd:
                    44:6d:c9:19:7c:61:63:01:3f:c2:28:ef:06:f7:fa:
                    2e:85:5d:64:3c:58:2b:7a:2d:80:6d:4b:17:2c:b4:
                    d4:26:a8:63:06:09:f9:b4:98:6a:85:3c:29:c3:75:
                    ec:f3:b2:43:34:d1:e7:47:fe:b8:82:cf:13:5a:91:
                    5e:f3:a1:b3:f6:57:23:85:21:e1:b7:40:8b:eb:eb:
                    30:42:ef:0d:ce:5e:20:98:54:bc:59:9f:c3:5e:3e:
                    76:18:36:44:57:55:9f:32:76:4d:3c:f1:d9:ec:67:
                    f0:b8:8e:f7:ec:0b:75:92:0a:f6:26:58:f1:f3:81:
                    81:e8:4f:e5:4a:47:cb:44:62:9e:38:d0:ea:c1:0f:
                    8c:ec:27:c0:99:f9:f2:39:65:a1:78:2c:19:af:91:
                    17:21:15:ab:36:3d:b5:f6:21:59:8b:bd:bb:98:55:
                    63:15:01:56:9d:42:0b:88:47:a7:65:b5:dc:11:fc:
                    a0:69:fd:1f:ed:80:b5:ef:18:23:e2:2a:91:59:9d:
                    cb:f5:bb:e3:a2:cf:29:96:d6:71:b0:cf:d3:ca:df:
                    a9:e9:6b:ef:7f:36:eb:62:3b:e7:09:12:7d:ac:b7:
                    7c:9c:35:94:aa:f1:2e:6a:30:cd:19:d6:25:f5:82:
                    ff:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:00:CC:E8:1E:7C:E6:9A:80:EC:DC:BE:79:8E:E6:C8:47:A0:1F:6C
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/HQDM6B585pqA7Ny-eY7myEegH2w.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.105.86.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:3e:3b:14:8b:52:36:0a:5b:01:9c:d7:df:05:33:77:d2:1e:
         86:99:88:15:7a:26:cb:17:5d:7e:08:c5:b5:25:75:8a:df:47:
         e6:84:92:e3:c5:da:8b:3f:a4:18:6c:e4:5b:12:b3:3f:27:d1:
         aa:ae:f8:87:6b:c1:73:1b:41:cb:63:0e:93:72:ec:be:50:72:
         70:e4:fc:2e:2e:b1:ad:0d:2f:69:1c:29:ae:c8:e0:b9:64:24:
         fb:a1:8b:3b:34:fc:af:89:ec:f4:7c:6c:85:04:0b:2f:10:11:
         83:9e:71:80:3b:1d:40:77:0b:c9:43:28:d3:87:be:30:0f:e0:
         48:6f:62:36:56:8a:8f:c1:72:bf:51:56:ed:94:25:07:eb:6f:
         ac:fc:5e:61:72:4b:66:b5:3f:24:21:11:fa:38:65:23:bb:03:
         d4:a4:e0:e5:e5:35:1c:9c:40:b1:6d:c3:87:10:98:86:89:58:
         dd:8d:21:a7:ee:cd:b3:2d:0c:23:63:b0:a6:00:38:33:bb:09:
         32:98:c2:2e:85:10:11:f8:26:d7:2b:ea:e3:93:44:fe:50:b4:
         36:ff:a0:0b:4c:44:d3:ff:49:1a:65:2d:b1:8f:33:be:1c:d7:
         b6:5d:c8:a2:a4:2b:ae:f0:de:7f:30:8e:df:7e:84:d1:dd:f4:
         8d:51:35:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 03:56:47 2025 by rpki-client