Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Om0m279Pb1B7jgkMn4Rv3s8P7QQ.roa
File:                     Om0m279Pb1B7jgkMn4Rv3s8P7QQ.roa (raw, json)
Hash identifier:          O+HdqUW7m5QAeio2YGhrC8UOuZ6pNioxPZnnKc6L/Gc=
Subject key identifier:   3A:6D:26:DB:BF:4F:6F:50:7B:8E:09:0C:9F:84:6F:DE:CF:0F:ED:04
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0B96
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Om0m279Pb1B7jgkMn4Rv3s8P7QQ.roa
Signing time:             Tue 01 Apr 2025 01:39:47 +0000
ROA not before:           Tue 01 Apr 2025 01:39:47 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     9605
IP address blocks:        211.14.80.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 15:43:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2966 (0xb96)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr  1 01:39:47 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=3A6D26DBBF4F6F507B8E090C9F846FDECF0FED04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:9c:2c:a0:e6:07:1b:e3:27:4a:5e:18:44:81:
                    04:9a:7d:d4:39:e1:99:95:6f:85:db:a8:70:79:3a:
                    3e:22:fe:e5:b6:3a:32:e1:a7:d9:34:e4:28:78:4f:
                    bd:7e:9b:85:65:95:68:02:25:bc:97:7b:f9:99:12:
                    ad:c6:13:11:73:34:4c:e5:2d:2e:ac:8b:f3:92:86:
                    e5:09:51:54:0e:f0:ba:c0:e9:47:17:34:d8:36:45:
                    15:d5:38:45:38:5a:04:06:46:47:88:12:8e:ac:f0:
                    b0:46:87:07:95:47:65:c0:e0:7c:a1:a2:8e:10:d8:
                    93:01:06:fa:3f:a6:28:4e:04:31:2f:62:c5:2a:56:
                    c5:4a:f6:da:03:69:c9:d6:49:e7:68:78:ff:81:6f:
                    e9:dd:ff:60:25:a6:c9:3f:78:e5:32:94:27:cc:9c:
                    e3:a5:02:11:d3:6a:6d:f9:ca:ff:bc:c2:b8:ab:9a:
                    7d:f1:ec:1d:27:e7:67:66:9b:36:94:62:bd:b0:59:
                    3b:57:5d:17:34:7f:b0:74:ec:c2:49:e3:c2:e5:9f:
                    5b:85:81:89:17:32:82:92:56:3a:10:b8:0c:fd:a3:
                    44:54:27:26:19:0c:0b:6e:c0:bb:81:98:13:54:ea:
                    61:a8:d0:7c:ee:70:0d:fc:7b:f1:4c:34:18:dc:50:
                    ef:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:6D:26:DB:BF:4F:6F:50:7B:8E:09:0C:9F:84:6F:DE:CF:0F:ED:04
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Om0m279Pb1B7jgkMn4Rv3s8P7QQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.14.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b1:5e:5c:da:36:e7:1f:04:95:9f:5d:de:2b:ce:cb:ba:02:0a:
         fc:91:7b:f2:9f:19:84:e9:78:7c:67:56:1e:7d:f2:37:7e:44:
         90:48:b1:b8:8d:6b:41:cc:79:67:a3:31:29:7f:63:5e:55:6a:
         1c:5c:c1:32:4e:4f:7c:66:27:93:48:1e:d9:f9:e4:04:27:9a:
         84:8b:b1:d1:21:7b:08:03:61:d9:ec:e5:a1:84:d2:65:cc:5f:
         e4:80:b1:e7:5c:d7:33:a5:5f:3b:63:28:82:2b:1a:b0:12:e4:
         dc:52:99:31:ad:4a:22:59:7f:eb:65:86:a8:bc:4e:a9:14:73:
         0a:6f:ce:32:c6:65:e4:bb:1b:e1:a7:69:43:51:f7:9d:b4:df:
         89:e1:79:60:08:95:83:56:79:18:85:67:98:47:26:2e:d9:c3:
         80:ab:53:39:85:21:7d:1e:e0:ac:69:0a:81:e5:7a:e6:b1:13:
         72:fa:4b:85:68:60:51:c3:73:8d:ed:d0:2b:da:67:5e:25:fa:
         02:3e:9a:83:6b:4c:d1:17:59:ab:70:a1:ec:36:bb:db:71:24:
         56:30:d3:a6:fa:6e:80:3e:6f:41:c6:5d:73:1d:62:d8:bc:d4:
         fa:86:0f:63:9a:8e:b5:34:6f:a5:bf:ff:ed:9c:98:7a:bd:c1:
         45:c0:99:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:19:22 2025 by rpki-client