Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/J6xiRUZ-B1phrRghtq1bGAhoaWM.roa
File:                     J6xiRUZ-B1phrRghtq1bGAhoaWM.roa (raw, json)
Hash identifier:          8HeoIAeH6HJlE2FHB0Bx+EgKvp4gam85wE4UcZak9YM=
Subject key identifier:   27:AC:62:45:46:7E:07:5A:61:AD:18:21:B6:AD:5B:18:08:68:69:63
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0F2B
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/J6xiRUZ-B1phrRghtq1bGAhoaWM.roa
Signing time:             Tue 10 Jun 2025 11:24:28 +0000
ROA not before:           Tue 10 Jun 2025 11:24:28 +0000
ROA not after:            Sat 23 May 2026 09:51:00 +0000
asID:                     9605
IP address blocks:        49.105.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 29 Jun 2025 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3883 (0xf2b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun 10 11:24:28 2025 GMT
            Not After : May 23 09:51:00 2026 GMT
        Subject: CN=27AC6245467E075A61AD1821B6AD5B1808686963
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:93:3c:93:43:8a:09:3b:09:18:32:49:75:4e:
                    a9:ad:4d:9b:80:d8:59:b9:26:c5:b5:e6:38:87:df:
                    4a:6a:29:37:46:81:17:d0:f0:2d:3b:7b:2a:c1:35:
                    4a:5a:bf:f9:3e:dc:99:8f:8b:7c:94:1e:b9:4a:f1:
                    04:dd:f8:1b:a0:e4:8d:e7:63:13:99:b5:c4:ca:26:
                    9d:6a:2a:00:61:00:0d:62:c0:0a:d7:b2:86:d5:c9:
                    0f:29:16:b9:1c:5e:90:3a:69:72:a8:b8:ce:fe:0b:
                    2a:24:8b:10:82:4c:ff:55:05:7f:d9:12:ae:cf:56:
                    30:c6:bd:63:fa:7a:03:98:41:55:b6:4b:bf:43:9f:
                    08:75:4d:7a:e8:65:7e:98:7c:db:59:7c:92:b2:05:
                    db:3f:11:e8:e8:93:eb:80:db:cf:66:ad:7c:d6:99:
                    8b:a5:ba:74:e3:31:c8:95:21:09:8c:8b:79:bd:c6:
                    38:2f:64:bc:98:14:53:dd:2f:c7:c6:79:76:87:30:
                    84:44:1d:11:6f:af:ef:d8:97:5e:a6:5c:98:37:74:
                    c7:d6:7b:8a:61:82:5a:10:cc:7e:05:a9:e9:e8:ac:
                    b1:4c:a8:0b:7a:de:1d:8e:1c:f7:15:ad:c9:3e:4e:
                    9e:6e:de:06:68:06:b7:f0:21:7b:da:48:72:7e:c9:
                    8c:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:AC:62:45:46:7E:07:5A:61:AD:18:21:B6:AD:5B:18:08:68:69:63
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/J6xiRUZ-B1phrRghtq1bGAhoaWM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.105.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b9:4b:48:10:5a:45:0e:8e:0a:e4:35:ab:26:52:c5:ac:ed:b3:
         9a:9f:98:4c:de:d8:b5:62:78:0a:30:73:3c:87:3b:58:4f:01:
         22:a2:e0:09:6e:ad:b2:4d:a8:24:0d:26:20:1b:c0:55:51:d3:
         53:67:b4:f4:a9:c9:c0:52:df:93:c1:09:85:ca:9e:e2:2f:17:
         4b:ac:9a:d0:df:8a:48:17:31:de:6a:0a:0e:d4:6c:b8:a0:e2:
         7c:c1:3c:d4:8c:7b:3f:ce:4a:98:cb:06:08:01:65:c3:b4:79:
         a6:3d:a5:dc:19:9f:ce:9a:0f:6a:a9:41:bd:a3:09:af:b3:a8:
         ab:98:a1:b2:60:2a:40:b0:e5:bf:4c:55:e7:d2:90:5f:51:4d:
         cf:80:06:9b:99:40:0f:4c:47:42:7d:93:1e:9f:63:a8:17:b8:
         22:21:2d:d0:a7:3b:aa:5c:cd:8b:cd:3e:88:aa:2a:2e:a2:db:
         05:7e:97:77:40:65:50:93:b8:20:ac:a0:8f:2f:17:c6:a4:cc:
         e0:57:58:8c:bc:53:a1:f9:6b:bc:46:d0:60:55:39:82:78:60:
         7e:a8:52:23:62:81:4e:93:04:14:8a:be:33:ba:fc:d9:5a:8f:
         1c:fb:27:6b:f2:65:38:6c:ad:14:0f:54:f6:75:a1:74:67:ec:
         52:c9:28:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 05:36:55 2025 by rpki-client