Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/JPad5V2HX-C25677l0GQmfstWpA.roa
File:                     JPad5V2HX-C25677l0GQmfstWpA.roa (raw, json)
Hash identifier:          8XZSDbZE67v1gS6RkGEuYHW1UfmIzK6SWgDlr7Aiu5Q=
Subject key identifier:   24:F6:9D:E5:5D:87:5F:E0:B6:E7:AE:FB:97:41:90:99:FB:2D:5A:90
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0E90
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/JPad5V2HX-C25677l0GQmfstWpA.roa
Signing time:             Tue 10 Jun 2025 10:56:54 +0000
ROA not before:           Tue 10 Jun 2025 10:56:54 +0000
ROA not after:            Sat 23 May 2026 09:51:00 +0000
asID:                     9605
IP address blocks:        49.111.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 28 Jun 2025 21:03:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3728 (0xe90)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun 10 10:56:54 2025 GMT
            Not After : May 23 09:51:00 2026 GMT
        Subject: CN=24F69DE55D875FE0B6E7AEFB97419099FB2D5A90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:0c:8b:f1:98:bb:85:f0:d0:d9:a0:3f:a6:df:
                    82:11:0f:66:bc:a4:38:32:42:d3:8f:9b:d6:21:be:
                    7f:2e:7a:93:6c:68:2a:ae:5b:96:ea:22:1c:c3:f1:
                    7d:67:e0:d6:1b:d8:8c:86:c9:49:f9:19:4d:d6:8a:
                    4e:21:e3:76:83:61:a9:f1:8d:1c:28:85:b6:34:f8:
                    5b:b2:15:26:b5:95:93:a3:1d:64:64:f6:c6:89:c5:
                    94:3b:68:91:aa:92:12:dd:94:36:4f:c3:6d:e2:6b:
                    85:54:9b:6a:25:10:eb:3e:00:19:15:7d:b7:16:fa:
                    28:6d:1c:a9:00:78:ed:d4:d5:ae:7d:82:eb:1c:19:
                    82:59:b6:b3:3e:f8:d9:46:77:84:28:c5:51:a3:f2:
                    5d:83:ee:7f:b1:ba:e3:5b:49:1b:f6:90:0b:74:42:
                    da:0b:4e:fb:d7:64:35:57:2e:ad:4d:af:78:dd:5a:
                    07:27:f4:3a:cf:7e:b0:c4:38:ab:f4:0f:1f:ef:67:
                    5c:3d:f2:57:fe:6f:99:23:4d:85:7e:9a:8f:cb:ea:
                    61:18:2a:15:ee:c2:de:6d:34:63:30:93:af:14:ed:
                    ee:43:f9:f1:98:1a:3b:52:42:9c:f1:dc:66:99:ca:
                    48:5c:b5:2d:47:98:0e:1d:f8:b6:ee:dc:77:30:8c:
                    05:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:F6:9D:E5:5D:87:5F:E0:B6:E7:AE:FB:97:41:90:99:FB:2D:5A:90
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/JPad5V2HX-C25677l0GQmfstWpA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.111.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         c7:c0:aa:6a:20:00:9e:45:4b:8c:0d:b0:a2:3d:fc:fb:98:63:
         23:d1:4c:1b:ce:e2:c9:e1:46:46:48:12:2c:18:87:6d:08:53:
         0e:4c:91:2d:7d:32:0b:5d:87:94:f5:a3:c2:56:9d:59:fa:36:
         f9:2e:9f:1e:9d:9a:71:76:24:bc:92:32:f9:42:0c:e4:b6:0f:
         a4:61:10:ca:8e:b5:cb:ba:10:7e:fb:6d:11:ba:5d:52:42:5b:
         fa:79:89:99:2b:8d:93:58:ba:e0:21:ac:81:7a:21:c8:b3:50:
         6d:18:7d:5d:64:cc:af:75:ed:d1:a0:d0:db:de:69:65:fd:3a:
         22:b3:c2:29:8e:aa:52:a3:0c:09:7d:79:7e:bb:b3:e1:45:a8:
         96:e4:42:7f:83:9b:2a:4f:8e:ac:57:69:7c:07:c4:ba:1a:c6:
         86:2c:d9:84:ef:12:d2:3f:29:90:9f:dd:71:6c:f7:88:24:31:
         1b:4e:d2:c9:99:51:e5:6b:e3:56:a6:76:0b:a1:7b:ad:b8:dd:
         ac:df:dc:ea:16:63:7a:ab:41:6f:a6:ab:5c:48:5a:fb:b3:d6:
         ad:3b:f9:12:b3:b7:87:01:1b:6e:72:3a:fc:aa:44:27:03:e7:
         9d:ef:f6:74:2d:49:71:e3:22:a1:ef:71:bf:da:f4:51:7c:4f:
         18:de:06:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 03:56:36 2025 by rpki-client