Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/JW-F2aquKMwi3m5KyXLxND4gFio.roa
File:                     JW-F2aquKMwi3m5KyXLxND4gFio.roa (raw, json)
Hash identifier:          lsla6L4ED5wCX7wzJxcCMgoYf7Dd20KCuAbgazPSKms=
Subject key identifier:   25:6F:85:D9:AA:AE:28:CC:22:DE:6E:4A:C9:72:F1:34:3E:20:16:2A
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0F54
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/JW-F2aquKMwi3m5KyXLxND4gFio.roa
Signing time:             Tue 10 Jun 2025 11:28:29 +0000
ROA not before:           Tue 10 Jun 2025 11:28:29 +0000
ROA not after:            Sat 23 May 2026 09:51:00 +0000
asID:                     9605
IP address blocks:        49.106.187.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 28 Jun 2025 21:03:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3924 (0xf54)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun 10 11:28:29 2025 GMT
            Not After : May 23 09:51:00 2026 GMT
        Subject: CN=256F85D9AAAE28CC22DE6E4AC972F1343E20162A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:0e:58:75:02:74:69:a3:d4:93:3f:ad:c3:3a:
                    5d:88:e6:0b:73:57:29:30:01:60:58:bc:b4:fb:45:
                    d8:5a:5c:23:a5:1e:1a:61:e1:ee:6e:53:d3:92:9d:
                    8c:30:e3:1a:1b:5b:eb:8e:40:17:9e:a9:01:15:99:
                    ca:fb:51:78:a9:04:1e:14:ad:a4:f9:d1:04:9a:21:
                    6d:fb:5b:0f:a0:f2:3d:a9:4a:6c:76:87:b0:bb:bb:
                    a3:47:bb:a4:24:c6:9a:99:b9:93:de:93:5d:0b:9b:
                    63:43:7e:1a:37:f7:e3:cd:2a:43:cb:6b:cf:0b:ff:
                    34:e7:81:44:01:94:6f:75:ab:c3:35:b7:aa:4c:77:
                    52:33:08:bc:72:c9:06:45:ff:d8:d3:be:9b:5b:c1:
                    22:18:c9:ec:94:7d:10:b6:fe:23:a3:e4:b3:19:4b:
                    1e:2e:f8:f8:54:73:a5:94:1b:fb:e5:7b:42:6e:3e:
                    af:b6:11:c5:84:a3:18:25:02:9c:e5:13:32:6f:fe:
                    50:85:f7:b7:7f:b4:a1:d1:da:bb:6b:ee:da:24:0c:
                    11:c6:cb:34:01:02:d1:ad:9d:ff:24:fc:f4:18:15:
                    fb:cb:af:11:3e:3c:92:c3:f6:25:76:46:ac:9d:56:
                    f9:30:bf:45:aa:bc:28:4d:a1:08:ec:12:20:35:b8:
                    70:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:6F:85:D9:AA:AE:28:CC:22:DE:6E:4A:C9:72:F1:34:3E:20:16:2A
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/JW-F2aquKMwi3m5KyXLxND4gFio.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.106.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:28:25:4b:3f:3b:c8:38:4f:43:34:79:10:be:3f:23:26:e4:
         18:3f:4f:de:b6:cc:df:c2:b7:d7:17:9f:c8:b8:a1:48:3b:74:
         3a:69:8f:a6:df:a5:58:00:66:17:f7:6f:04:ef:0d:3d:d9:11:
         04:a5:c8:01:3d:50:64:7c:98:29:9f:19:4a:a6:2f:95:e1:c4:
         73:43:22:8f:24:80:a5:42:57:ac:d4:f5:7a:3a:4f:20:5c:c1:
         30:c4:34:cf:ac:53:28:40:eb:83:f7:80:7f:2d:12:c5:0e:28:
         20:87:79:6e:59:fa:c2:e8:0f:70:0d:7f:35:0b:4d:5b:7a:85:
         5d:6c:22:28:32:b2:88:95:20:ce:19:69:3f:02:dd:60:ea:8e:
         b6:9e:e2:13:11:e5:50:a0:16:b8:c2:08:70:8f:53:65:14:48:
         3f:db:09:ce:3c:37:dc:d1:ef:b2:4a:fd:b3:ba:44:7d:3f:df:
         34:a1:35:0f:df:db:80:2a:d9:57:7c:1e:b4:83:ce:34:48:d5:
         30:c5:e7:3c:30:c5:d0:42:4f:71:d4:00:b9:c4:7c:4e:33:83:
         23:55:62:86:0d:27:ec:44:4b:a0:61:4e:7c:43:61:f5:d1:b7:
         6c:22:d0:f8:86:c1:80:5e:84:16:a2:15:3c:ea:60:d9:97:82:
         4b:a5:d4:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 01:12:20 2025 by rpki-client