Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/PeD4yQ4CodXZqiNeEG4j3ez7Gqw.roa
File:                     PeD4yQ4CodXZqiNeEG4j3ez7Gqw.roa (raw, json)
Hash identifier:          U9vorvQJZb6X6wDBGwSmbU5j//M9Xg3kHj/xDpuNJGw=
Subject key identifier:   3D:E0:F8:C9:0E:02:A1:D5:D9:AA:23:5E:10:6E:23:DD:EC:FB:1A:AC
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0DA4
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/PeD4yQ4CodXZqiNeEG4j3ez7Gqw.roa
Signing time:             Tue 01 Apr 2025 02:24:38 +0000
ROA not before:           Tue 01 Apr 2025 02:24:38 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     9605
IP address blocks:        49.106.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 16:57:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3492 (0xda4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr  1 02:24:38 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=3DE0F8C90E02A1D5D9AA235E106E23DDECFB1AAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:0b:89:2b:2f:37:25:18:2a:30:41:ee:65:14:
                    f3:09:05:20:de:67:6a:f6:97:12:a6:ac:80:22:54:
                    b7:7d:c0:61:b6:65:09:2b:25:46:cf:f7:9a:3b:2b:
                    82:95:4b:97:dc:72:37:3f:fa:0e:a0:fd:db:cc:a6:
                    e9:b3:b1:a9:c0:fb:1c:ba:19:5e:49:3e:49:b1:d1:
                    f8:55:d0:d3:5e:31:f9:9f:da:d2:6b:f1:bf:b7:ee:
                    e7:4e:a1:26:09:88:3b:67:44:86:2e:ed:17:2c:ab:
                    f8:61:cf:fc:af:ad:97:93:cc:a6:16:f1:4b:fa:34:
                    f0:e0:28:a9:99:28:44:ab:0c:5c:d0:dc:23:21:3e:
                    f9:ff:c9:fe:7e:71:85:ed:8f:17:ca:44:e2:e7:49:
                    7c:23:da:47:bf:73:db:23:40:e1:01:2e:e7:22:46:
                    9f:6e:5e:3e:ef:bc:dc:6e:04:aa:9b:57:87:34:10:
                    3e:29:00:a0:f9:8f:c0:17:f6:da:46:4c:09:f2:89:
                    b5:4e:d6:c7:13:47:76:21:d7:99:e4:4f:ca:90:42:
                    e7:95:2f:25:c8:79:52:d0:1a:ea:00:76:9d:85:80:
                    09:6c:05:7d:9f:4e:6d:f7:37:55:49:3e:63:48:1d:
                    60:2a:7c:4b:c2:ee:a7:14:9d:19:9f:de:04:c1:58:
                    1d:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:E0:F8:C9:0E:02:A1:D5:D9:AA:23:5E:10:6E:23:DD:EC:FB:1A:AC
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/PeD4yQ4CodXZqiNeEG4j3ez7Gqw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.106.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:af:92:0b:4c:96:11:2f:b8:d0:b2:a1:c7:be:d3:f8:04:8a:
         d3:2f:c5:be:bb:e5:0f:3b:76:23:ea:eb:6d:8e:5c:0a:77:08:
         98:b8:d4:fb:f5:57:f0:5f:e9:4d:44:75:fc:d5:67:1b:b2:65:
         58:77:43:3f:8e:3e:ed:31:6c:cd:fb:f9:5f:5f:8c:41:32:a5:
         fb:09:5a:12:33:e0:b9:47:50:dc:62:a7:59:d0:ab:ac:d9:1b:
         a8:52:73:96:b1:07:b1:5b:de:11:d0:96:bb:8f:f4:01:7a:8b:
         c6:aa:83:16:e2:83:01:52:a4:f4:e0:a5:42:9b:b8:45:d9:88:
         d2:ba:10:d6:a1:56:f0:d8:63:82:a6:a6:5d:93:bb:fd:d0:c6:
         d2:52:d7:d6:67:af:dc:f5:99:e1:8d:16:6f:93:97:e9:e0:15:
         ac:8c:41:fc:34:e0:25:2e:a6:64:56:c8:61:10:6e:2b:03:f9:
         fb:35:35:71:2a:fb:63:b3:42:20:dc:26:93:25:fb:52:71:18:
         7f:6f:4b:fe:ee:1d:8a:4b:a7:f4:6e:60:f3:e8:b3:f2:db:73:
         00:7d:1b:1c:29:f8:84:86:e6:e3:dc:fb:b2:fe:d8:b2:1f:4f:
         f4:54:8b:27:b6:de:6b:f1:11:15:8f:35:a7:e7:f4:26:10:4f:
         8c:21:50:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:38:46 2025 by rpki-client