Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/PMX4fEi62ErdQUFpPRtqseZ4dW8.roa
File:                     PMX4fEi62ErdQUFpPRtqseZ4dW8.roa (raw, json)
Hash identifier:          2hbKz0C2fiea6vYxwPHiptROFwpeHaZkWwt6k8zJYpI=
Subject key identifier:   3C:C5:F8:7C:48:BA:D8:4A:DD:41:41:69:3D:1B:6A:B1:E6:78:75:6F
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0C30
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/PMX4fEi62ErdQUFpPRtqseZ4dW8.roa
Signing time:             Tue 01 Apr 2025 01:54:07 +0000
ROA not before:           Tue 01 Apr 2025 01:54:07 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     9605
IP address blocks:        183.75.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 15:43:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3120 (0xc30)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr  1 01:54:07 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=3CC5F87C48BAD84ADD4141693D1B6AB1E678756F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:4c:2b:d1:f7:d2:02:32:70:56:75:00:10:59:
                    74:6e:1c:fa:44:7b:2c:61:e5:a3:57:ed:ba:9d:6c:
                    37:a0:14:7a:09:a6:45:c0:0f:56:0c:76:b5:da:91:
                    df:a0:15:de:0b:2b:ba:e2:f7:f8:e3:a5:78:92:e0:
                    1d:c1:55:80:41:8a:c4:ae:6c:0c:76:6a:8a:2a:9c:
                    90:62:c6:6c:1f:10:88:4f:52:cd:fa:06:51:05:a1:
                    9e:ca:25:a6:29:ff:e8:f8:19:10:fd:1a:a2:3a:78:
                    ed:dc:3a:2d:99:87:07:c3:b0:b4:e5:f8:ca:cd:40:
                    f1:b9:80:40:43:3a:e1:e4:f1:18:bc:d0:90:5f:8f:
                    7b:48:a3:7e:ab:d8:ff:e7:6a:c4:e9:a7:9b:4b:38:
                    d5:e4:5e:2c:4f:31:fa:07:bd:57:1d:b1:7c:45:3c:
                    62:1d:01:d3:ad:50:41:af:33:cd:3f:2a:fa:eb:4c:
                    f5:25:90:ac:d3:40:c1:9f:45:7a:82:94:a0:29:fa:
                    74:24:48:54:6b:0a:a3:5b:da:3c:a5:55:08:3b:b7:
                    4d:10:a8:6a:f5:20:8c:6d:ce:cd:73:0f:3d:9f:6e:
                    7a:4e:d3:9d:89:69:fc:89:f2:f5:70:0e:98:28:7b:
                    71:81:c4:20:10:36:62:f8:6e:79:73:82:18:48:5f:
                    cc:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:C5:F8:7C:48:BA:D8:4A:DD:41:41:69:3D:1B:6A:B1:E6:78:75:6F
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/PMX4fEi62ErdQUFpPRtqseZ4dW8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.75.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:c5:48:74:95:0d:02:05:46:ef:04:67:10:7c:5b:05:75:a9:
         fa:a3:3c:bc:4e:95:50:74:98:bc:eb:72:63:cc:5f:66:e0:76:
         5c:88:45:39:14:af:cc:d7:48:82:66:32:cd:30:ff:6b:41:fa:
         37:ed:e6:47:3f:a1:b8:18:8b:ac:d9:cb:52:2b:9a:8c:40:95:
         af:bb:c5:0b:b4:41:03:4c:15:c2:be:a3:a2:c1:fd:15:af:ea:
         05:78:b1:ef:a5:1b:53:00:98:aa:f9:dd:54:c6:1e:f4:0f:92:
         54:fb:ec:67:f4:af:c3:5d:a4:7d:50:b3:af:19:56:11:ab:a9:
         ec:ee:59:6b:9c:4a:fd:19:18:24:ea:5f:d3:9d:32:bb:a0:44:
         4a:a2:4e:4c:6f:5d:ff:91:35:e7:16:d1:e9:64:16:95:dd:11:
         f4:49:9c:ae:07:94:27:df:6a:8d:fd:9d:c3:d0:5e:cf:8d:c8:
         6b:70:c5:9e:b8:27:1f:4b:82:ee:28:b8:4b:39:34:dc:e0:15:
         bf:14:f7:8b:bb:bb:55:09:aa:11:dc:7d:45:c7:0c:86:4c:0e:
         7e:ff:f2:c2:44:cd:fa:aa:89:e8:06:86:a4:54:40:80:da:92:
         4f:2e:a6:12:de:dd:0c:35:66:e8:89:fd:e2:b7:e8:bf:03:eb:
         47:63:5c:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:22:34 2025 by rpki-client