Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/JzmdfaAq5ZNTsfLy0DWuM0aPfD8.roa
File:                     JzmdfaAq5ZNTsfLy0DWuM0aPfD8.roa (raw, json)
Hash identifier:          lJAXP6WgSTpxQz7EGuZE9m/t2/rvFrEbBl0Rfnr59ys=
Subject key identifier:   27:39:9D:7D:A0:2A:E5:93:53:B1:F2:F2:D0:35:AE:33:46:8F:7C:3F
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0D5F
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/JzmdfaAq5ZNTsfLy0DWuM0aPfD8.roa
Signing time:             Tue 01 Apr 2025 02:19:15 +0000
ROA not before:           Tue 01 Apr 2025 02:19:15 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     9605
IP address blocks:        49.106.104.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 15:43:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3423 (0xd5f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr  1 02:19:15 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=27399D7DA02AE59353B1F2F2D035AE33468F7C3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:41:68:35:e6:f7:0b:d5:5d:0e:c0:eb:d9:60:
                    c5:2d:dc:60:73:80:9a:2c:43:9f:1c:a5:77:9b:ce:
                    f0:c0:73:69:1c:fe:e7:a5:b9:f5:1c:ca:6c:fb:94:
                    6b:7d:6d:4d:47:f8:ba:9b:8d:9e:52:8c:c9:bd:66:
                    29:9b:3c:ef:30:b5:61:bf:8e:c2:59:34:af:0d:95:
                    c1:de:8a:73:d3:50:7b:08:81:83:ec:5b:5a:09:83:
                    a0:ca:2c:fd:ac:7d:3a:a2:a0:d5:c9:df:42:f4:1b:
                    bc:75:72:0a:7f:8b:6d:38:4c:bf:59:9f:3d:da:d0:
                    04:b2:0b:cf:87:29:44:5d:fb:5c:12:c4:2f:25:be:
                    1e:45:23:37:dd:1a:b1:de:52:ba:b1:8e:07:27:61:
                    58:39:49:ef:5e:1e:8d:dc:79:ae:ec:cf:ee:42:9e:
                    1f:8d:aa:6f:f5:dd:c7:2e:8a:68:20:fe:43:a4:ba:
                    3e:ee:bb:53:4c:45:6b:ed:bc:31:f4:d2:c5:41:e3:
                    67:b1:d3:3e:4c:c2:61:ff:69:6e:89:0d:f3:bd:e5:
                    8a:0a:34:d9:cb:91:64:85:bd:c3:13:9a:d9:59:b1:
                    95:7b:9d:95:63:3f:99:32:38:4c:bd:cb:9b:e0:a1:
                    d2:9a:58:eb:59:b5:74:48:4e:f7:13:b3:d3:e5:9b:
                    b6:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:39:9D:7D:A0:2A:E5:93:53:B1:F2:F2:D0:35:AE:33:46:8F:7C:3F
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/JzmdfaAq5ZNTsfLy0DWuM0aPfD8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.106.104.0/21

    Signature Algorithm: sha256WithRSAEncryption
         87:17:93:a1:4e:66:18:3e:94:9f:15:af:50:78:5b:0c:62:44:
         8d:b7:52:ab:ed:12:6a:cf:54:31:c8:2d:8c:49:94:2c:87:4c:
         10:44:41:42:d2:c0:18:a1:b4:4b:73:e6:e6:b1:ad:b1:79:c2:
         2e:3b:9a:e3:f0:7b:3f:84:b3:c7:62:9a:16:ac:21:76:6a:39:
         eb:ab:25:f4:7b:dd:08:8d:4b:62:21:a9:86:30:1a:39:e6:4c:
         be:25:3a:b0:3b:63:a9:3e:91:3a:fd:2e:f8:7a:3f:ec:12:30:
         a6:e8:d2:39:56:fb:39:82:11:88:c0:c2:86:dd:95:14:0a:87:
         a9:68:fc:c9:f7:2d:62:d4:b8:7a:bb:ae:d6:af:bf:94:8d:fc:
         04:8f:e8:cd:2a:98:d7:3a:aa:df:2f:96:a1:b9:4b:ab:57:ae:
         19:0c:b3:03:05:ee:5c:54:16:96:58:0c:d4:94:31:89:3f:e3:
         3d:ae:eb:8e:66:68:be:50:7d:c3:1c:93:84:89:e7:50:e6:1c:
         d5:30:5f:01:f9:5f:f6:d6:b1:82:36:0e:67:28:39:7c:92:2e:
         1b:4f:51:5a:15:7a:9e:66:e4:7c:c5:20:cd:e3:88:70:92:fe:
         91:bc:49:e5:92:16:3e:57:e0:a0:58:e6:3d:6f:4e:d8:67:81:
         ce:ab:a8:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:21:32 2025 by rpki-client