Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/TcuWLq-Plf6tNXn8wxlawG9nnJk.roa
File:                     TcuWLq-Plf6tNXn8wxlawG9nnJk.roa (raw, json)
Hash identifier:          c3F0fLvCpejWvxCxWj23aRCgHirKDNMFPCKL2Zu0XX0=
Subject key identifier:   4D:CB:96:2E:AF:8F:95:FE:AD:35:79:FC:C3:19:5A:C0:6F:67:9C:99
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0C8E
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/TcuWLq-Plf6tNXn8wxlawG9nnJk.roa
Signing time:             Tue 01 Apr 2025 02:03:20 +0000
ROA not before:           Tue 01 Apr 2025 02:03:20 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     9605
IP address blocks:        183.74.208.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 15:43:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3214 (0xc8e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr  1 02:03:20 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=4DCB962EAF8F95FEAD3579FCC3195AC06F679C99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:66:1b:ba:43:ae:16:f5:4c:ef:b9:29:89:21:
                    29:ff:7b:38:56:05:03:9a:05:09:86:17:3c:6c:37:
                    36:4a:76:fd:a1:bb:09:76:7e:30:74:23:05:3a:59:
                    af:3f:23:b7:fd:ef:61:04:5a:02:3c:00:67:e0:cd:
                    69:bb:d1:79:cb:90:99:b5:16:37:61:3c:aa:27:6a:
                    9f:53:f7:6b:e9:34:ce:2a:8b:62:38:b4:a0:ef:a5:
                    f7:31:20:7b:33:27:03:a8:ee:1c:32:84:5c:8e:01:
                    47:33:54:74:9d:d3:3f:75:26:36:c9:cf:5c:a4:4c:
                    fc:1f:0e:84:a0:bb:ec:3b:34:c1:d8:bc:c1:5a:fd:
                    a5:1a:6a:7b:49:cf:c1:2c:62:da:01:91:f8:38:e7:
                    96:31:b5:95:40:80:74:0e:c8:5d:e2:9b:12:e2:88:
                    c8:12:c1:d9:a1:2f:93:53:a4:e3:93:d8:64:62:a3:
                    b9:47:5d:bf:bf:ad:80:72:81:35:5c:29:43:80:49:
                    9f:b2:c7:ea:a3:76:e0:b4:23:9d:90:6e:7d:85:61:
                    77:a0:b3:0f:c5:f5:cd:00:4a:d5:10:2a:17:55:d0:
                    6f:34:27:a7:e2:91:ab:67:bf:74:d2:68:da:57:04:
                    6a:6a:f3:e9:df:83:38:f7:4c:99:f1:85:d5:00:96:
                    c9:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:CB:96:2E:AF:8F:95:FE:AD:35:79:FC:C3:19:5A:C0:6F:67:9C:99
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/TcuWLq-Plf6tNXn8wxlawG9nnJk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.74.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         98:0e:81:36:64:df:cd:10:f6:d1:cd:dd:1f:45:0e:e4:86:b7:
         d3:5e:c8:d9:d8:ef:90:20:d4:d5:0f:88:96:45:04:de:54:fc:
         7a:b0:81:f7:af:75:7b:9f:e7:0c:7b:30:e1:17:74:14:a5:c4:
         4a:00:07:57:0e:a3:56:fe:72:af:99:c2:44:50:e5:45:b7:06:
         4d:c6:26:81:19:6a:36:8e:5d:89:49:ea:5d:cb:14:69:b8:dd:
         60:ac:98:65:d8:26:14:dc:86:e6:91:28:db:ba:33:24:e6:54:
         c3:51:24:36:a5:20:9c:2d:54:4b:d5:96:cc:e1:3b:a6:79:17:
         62:00:d1:d7:b0:07:0f:63:ae:9b:5a:ec:c9:a2:88:66:ed:28:
         11:d1:d7:b2:f1:34:ff:d5:0c:25:82:eb:d8:d6:49:c5:05:ae:
         20:ef:12:69:f9:e9:b7:9c:14:73:a8:c5:ec:b8:7c:7a:8b:6a:
         15:c5:bd:d6:e2:07:a0:c1:70:8c:f1:17:23:68:f0:7d:65:2c:
         83:46:8d:9b:bd:48:88:14:2a:38:e3:ab:86:cd:fd:ff:72:b9:
         28:ce:54:14:e8:dc:f4:63:01:93:c9:8e:66:ae:84:5c:fc:86:
         c5:63:5b:d4:11:22:6c:da:3d:11:d7:15:3c:45:3e:b3:bd:42:
         22:9e:55:65
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICDI4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw
MjAzMjBaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDREQ0I5NjJFQUY4Rjk1
RkVBRDM1NzlGQ0MzMTk1QUMwNkY2NzlDOTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDkZhu6Q64W9UzvuSmJISn/ezhWBQOaBQmGFzxsNzZKdv2huwl2
fjB0IwU6Wa8/I7f972EEWgI8AGfgzWm70XnLkJm1FjdhPKonap9T92vpNM4qi2I4
tKDvpfcxIHszJwOo7hwyhFyOAUczVHSd0z91JjbJz1ykTPwfDoSgu+w7NMHYvMFa
/aUaantJz8EsYtoBkfg455YxtZVAgHQOyF3imxLiiMgSwdmhL5NTpOOT2GRio7lH
Xb+/rYBygTVcKUOASZ+yx+qjduC0I52Qbn2FYXegsw/F9c0AStUQKhdV0G80J6fi
katnv3TSaNpXBGpq8+nfgzj3TJnxhdUAlsm/AgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUTcuWLq+Plf6tNXn8wxlawG9nnJkwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L1RjdVdMcS1QbGY2dE5Ybjh3eGxhd0c5bm5Kay5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAS3StAwDQYJKoZIhvcNAQELBQADggEBAJgOgTZk380Q9tHN3R9FDuSGt9Ne
yNnY75Ag1NUPiJZFBN5U/HqwgfevdXuf5wx7MOEXdBSlxEoAB1cOo1b+cq+ZwkRQ
5UW3Bk3GJoEZajaOXYlJ6l3LFGm43WCsmGXYJhTchuaRKNu6MyTmVMNRJDalIJwt
VEvVlszhO6Z5F2IA0dewBw9jrpta7MmiiGbtKBHR17LxNP/VDCWC69jWScUFriDv
Emn56becFHOoxey4fHqLahXFvdbiB6DBcIzxFyNo8H1lLINGjZu9SIgUKjjjq4bN
/f9yuSjOVBTo3PRjAZPJjmauhFz8hsVjW9QRImzaPRHXFTxFPrO9QiKeVWU=
-----END CERTIFICATE-----
Generated at Sat Apr 26 18:20:40 2025 by rpki-client