Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/J9wmd6-qKf3MRLXVKaXpbrbudzs.roa
File:                     J9wmd6-qKf3MRLXVKaXpbrbudzs.roa (raw, json)
Hash identifier:          +UgBIllFuINCdgLUbEJVkNyFrgga8j/OwBPEK2/y2lw=
Subject key identifier:   27:DC:26:77:AF:AA:29:FD:CC:44:B5:D5:29:A5:E9:6E:B6:EE:77:3B
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0F29
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/J9wmd6-qKf3MRLXVKaXpbrbudzs.roa
Signing time:             Tue 10 Jun 2025 11:24:27 +0000
ROA not before:           Tue 10 Jun 2025 11:24:27 +0000
ROA not after:            Sat 23 May 2026 09:51:00 +0000
asID:                     9605
IP address blocks:        220.210.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 28 Jun 2025 21:03:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3881 (0xf29)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun 10 11:24:27 2025 GMT
            Not After : May 23 09:51:00 2026 GMT
        Subject: CN=27DC2677AFAA29FDCC44B5D529A5E96EB6EE773B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ec:36:29:8d:51:66:40:a4:ca:8a:9a:f3:b7:
                    c9:eb:e0:5b:9b:db:70:95:17:f9:02:42:40:81:79:
                    d0:09:18:b7:fa:ae:5a:5c:db:54:91:93:4d:84:b6:
                    d8:05:34:43:6a:69:f4:6d:5d:65:11:03:69:b1:a9:
                    20:7c:9a:83:f8:19:61:88:b5:95:3f:49:3b:81:f1:
                    46:ba:4a:bd:b5:65:f9:64:00:7c:d0:c7:22:ee:b4:
                    93:4f:95:a1:3a:88:d4:73:9b:f8:0b:94:40:2e:c7:
                    1c:2a:6c:2f:2d:f4:2f:db:12:85:e8:82:cd:7f:2d:
                    47:05:0e:11:79:34:48:4a:2c:de:f4:e8:1d:3e:c5:
                    e3:5f:f3:64:67:18:0b:7e:96:22:dd:0f:5a:88:1d:
                    92:09:f6:4a:2f:47:bd:f2:16:5c:58:48:e4:4d:3e:
                    03:cf:b9:53:b3:1d:69:19:b3:95:c4:bf:8b:89:44:
                    a6:33:f7:b3:96:95:b6:b7:b7:0f:4d:aa:6c:fb:86:
                    b9:cd:f0:02:31:d3:14:3d:eb:27:ee:00:16:43:3d:
                    f2:33:b3:ff:cf:65:8e:9c:73:be:75:b9:ac:17:a8:
                    2d:b4:45:cc:a1:b0:d6:ad:59:a0:2d:d5:4a:85:9a:
                    b6:96:31:91:07:a5:5e:96:e5:f8:40:c2:15:9e:2c:
                    22:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:DC:26:77:AF:AA:29:FD:CC:44:B5:D5:29:A5:E9:6E:B6:EE:77:3B
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/J9wmd6-qKf3MRLXVKaXpbrbudzs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.210.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:74:a9:c0:a6:56:da:ae:c7:bf:ab:75:1b:1d:e1:fa:9f:34:
         40:5e:56:97:ea:39:59:91:d4:86:28:e1:df:f8:c2:2a:46:65:
         99:fb:05:ab:b9:fa:a1:04:0e:64:6d:2a:eb:34:a2:30:bb:95:
         b1:ab:57:7c:1e:6f:5e:96:75:19:25:55:53:df:ad:70:e2:86:
         e8:8e:1d:f0:a9:6c:6e:4d:95:65:e6:9c:da:aa:d7:31:55:8b:
         e9:80:0f:da:64:07:fe:12:cd:13:7a:92:7d:60:06:77:c0:74:
         b4:1c:ad:0a:b6:43:b7:a7:e4:1c:39:67:72:ce:09:b3:8c:42:
         42:a9:e2:7d:b1:03:67:47:2c:55:c3:10:72:7b:d3:c0:40:91:
         cd:58:30:7c:36:4e:4a:6b:12:d7:2b:d1:7b:3d:a2:b8:de:92:
         b6:69:b9:28:1a:45:f0:35:26:0a:76:fa:7c:fd:df:09:ec:e6:
         b6:0e:57:f2:87:a3:26:70:e0:42:d4:1f:7b:63:bc:51:45:7b:
         14:6b:51:0c:17:18:dc:37:ee:46:19:6d:dd:9e:61:4c:46:68:
         69:91:42:3c:94:7b:35:67:81:ae:81:a1:50:d5:07:2f:37:b7:
         e3:2b:2c:82:da:b1:a0:6b:6f:c0:08:c8:a0:d3:4c:b6:92:fd:
         b8:51:5b:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 23:28:07 2025 by rpki-client