Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/QV5Kl7nbx80Ypa65_-kgtQ0SY2M.roa
File:                     QV5Kl7nbx80Ypa65_-kgtQ0SY2M.roa (raw, json)
Hash identifier:          Flvo2ylgwob358l3crxRHN2P6tB5vyAc3kjT/rXHxG8=
Subject key identifier:   41:5E:4A:97:B9:DB:C7:CD:18:A5:AE:B9:FF:E9:20:B5:0D:12:63:63
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0F1F
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/QV5Kl7nbx80Ypa65_-kgtQ0SY2M.roa
Signing time:             Tue 10 Jun 2025 11:20:23 +0000
ROA not before:           Tue 10 Jun 2025 11:20:23 +0000
ROA not after:            Sat 23 May 2026 09:51:00 +0000
asID:                     9605
IP address blocks:        61.195.212.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 28 Jun 2025 21:03:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3871 (0xf1f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun 10 11:20:23 2025 GMT
            Not After : May 23 09:51:00 2026 GMT
        Subject: CN=415E4A97B9DBC7CD18A5AEB9FFE920B50D126363
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:e7:9e:b4:85:3a:87:b7:82:66:fb:cf:57:e0:
                    89:5b:4b:0c:aa:af:10:eb:41:c7:e9:47:84:6e:f6:
                    a7:ac:00:4a:e3:23:b0:23:31:2d:2c:00:69:cf:cc:
                    95:ff:b1:73:5c:81:b6:a8:af:27:89:3c:92:73:b0:
                    c8:0d:6e:b3:a4:fa:42:ea:3e:72:51:14:56:70:04:
                    42:84:a4:22:f0:da:97:56:f5:c8:29:03:0a:43:59:
                    55:07:05:3b:63:d4:64:31:2a:7b:cc:f4:e4:88:9b:
                    5e:97:8a:a7:e9:22:86:b6:cf:3d:54:1d:44:7e:52:
                    42:8a:85:45:82:f6:0a:0d:96:ee:6e:00:0e:e9:f2:
                    44:a6:7a:f2:b5:66:e6:00:61:ee:f5:17:52:5c:89:
                    fc:b6:e9:3a:0b:97:f2:a2:08:32:e3:d9:a0:f1:3f:
                    60:2b:f3:36:3b:38:b0:89:f4:da:65:ab:52:a9:12:
                    5f:ae:17:7e:d7:be:aa:e6:f8:cd:d8:5e:10:8a:10:
                    53:cb:04:35:f7:c4:05:57:a6:2a:b9:f1:e0:5e:ad:
                    ad:4d:37:0b:b3:bd:4f:60:d8:8d:55:8a:fa:df:18:
                    41:65:3e:eb:75:d9:36:75:e8:24:7d:c3:d3:ca:57:
                    54:6f:7a:a3:be:62:88:cf:d8:05:2e:cb:3b:f9:8f:
                    3f:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:5E:4A:97:B9:DB:C7:CD:18:A5:AE:B9:FF:E9:20:B5:0D:12:63:63
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/QV5Kl7nbx80Ypa65_-kgtQ0SY2M.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.195.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         70:75:27:a4:4f:a3:ac:3b:44:91:1c:1b:07:b0:6f:38:c1:73:
         fd:80:4f:54:17:8d:9c:45:4b:a9:d0:46:34:71:49:3f:2a:0c:
         04:e2:3a:88:4e:13:de:95:01:8b:cc:fc:1d:18:3d:29:66:a3:
         2a:7f:31:18:57:32:75:71:5a:12:b2:f1:8a:03:44:14:8f:be:
         b8:e9:31:84:cb:0a:ce:68:2c:81:74:e9:e3:7e:20:91:42:dc:
         76:88:52:b9:20:ca:e9:d6:75:53:9d:b1:81:99:42:25:b1:57:
         58:5b:d5:7a:00:28:1a:41:d2:b8:f2:d0:29:14:4f:18:d2:a4:
         53:b2:3b:7e:65:c0:ac:bf:64:f4:fa:8a:2f:bc:8f:02:9e:74:
         c6:0d:79:9e:fc:ae:c2:17:8a:24:8d:74:e3:4e:b7:56:9f:b7:
         fe:bf:dc:77:79:e3:16:83:0a:3b:d6:d2:76:3f:98:36:1c:ff:
         3f:07:80:9f:51:6e:74:93:69:11:3c:d6:07:47:ba:53:83:09:
         e9:9c:b7:9b:bd:da:53:f3:71:f9:38:e0:a1:8e:26:04:31:6f:
         cf:09:4b:23:b6:ce:4e:08:80:f9:4b:e6:ad:21:3e:da:88:2c:
         28:b3:6d:31:65:05:a6:1f:dd:d1:b9:c2:b4:0a:af:f1:9d:7e:
         46:85:de:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 01:10:04 2025 by rpki-client