Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Vr5NCPHzGmMwHQHJ7htq6qSMlqc.roa
File:                     Vr5NCPHzGmMwHQHJ7htq6qSMlqc.roa (raw, json)
Hash identifier:          AapVqKQQmmC8cMj2hV50RQqaRHzw3DnXKQqsQ711vjY=
Subject key identifier:   56:BE:4D:08:F1:F3:1A:63:30:1D:01:C9:EE:1B:6A:EA:A4:8C:96:A7
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0F9A
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Vr5NCPHzGmMwHQHJ7htq6qSMlqc.roa
Signing time:             Tue 10 Jun 2025 11:40:29 +0000
ROA not before:           Tue 10 Jun 2025 11:40:29 +0000
ROA not after:            Sat 23 May 2026 09:51:00 +0000
asID:                     9605
IP address blocks:        183.73.32.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 28 Jun 2025 21:03:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3994 (0xf9a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun 10 11:40:29 2025 GMT
            Not After : May 23 09:51:00 2026 GMT
        Subject: CN=56BE4D08F1F31A63301D01C9EE1B6AEAA48C96A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:87:f7:36:40:7e:6f:11:db:46:aa:02:fb:f4:
                    a9:34:84:a7:65:bc:b2:21:e3:7b:fa:5e:f6:ac:51:
                    60:a5:bd:5c:be:42:97:f6:2b:fa:38:9c:28:8b:62:
                    b2:2a:e8:8d:59:e4:2c:35:2f:bf:1e:f9:fa:1b:a0:
                    77:fd:58:b2:cb:cb:58:ff:e0:6a:13:99:4c:2b:2b:
                    fa:8d:4e:0a:01:9c:77:30:db:05:ba:b2:38:84:0d:
                    d5:a9:5e:92:31:37:07:51:bb:cc:18:f2:dc:fc:5d:
                    7c:23:c5:69:0b:82:ac:fd:0f:28:f7:08:7a:a5:b3:
                    f1:25:65:3f:a9:0f:30:20:79:b2:89:fc:bf:ce:fa:
                    18:6f:d8:06:96:75:55:79:26:f0:bf:3e:7b:25:59:
                    f7:06:f5:66:0f:2d:bd:fb:0c:e1:07:c9:5b:70:f2:
                    1f:97:52:d3:94:b8:48:a3:6f:a5:18:ee:a4:72:4a:
                    e2:5c:80:2f:08:ea:01:ca:15:ca:54:b6:b5:59:e2:
                    c9:09:1c:cc:2e:95:75:1b:6e:ae:3c:4d:cb:e4:a7:
                    29:19:9b:3e:03:f0:e9:16:11:c8:55:9c:5e:72:d1:
                    82:07:ff:76:a5:78:d1:bf:fc:82:46:69:fa:34:72:
                    cb:86:ef:56:0b:c5:a7:c7:40:dc:55:39:90:b4:72:
                    26:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:BE:4D:08:F1:F3:1A:63:30:1D:01:C9:EE:1B:6A:EA:A4:8C:96:A7
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Vr5NCPHzGmMwHQHJ7htq6qSMlqc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.73.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         1f:d9:6b:91:b5:60:d1:50:73:28:11:99:96:93:f9:1e:31:39:
         49:4c:a8:8e:e2:2d:d7:47:fb:aa:1f:25:0c:00:b4:91:a7:66:
         e0:c1:01:fa:37:b0:e9:05:6f:32:f2:a3:36:1b:04:0e:b9:c5:
         42:d2:f4:9e:b1:60:35:38:ae:1f:62:ad:5e:c0:c0:4e:a1:cb:
         ff:fd:b7:d4:18:52:b7:e7:34:5c:ad:ae:7e:8c:93:10:38:88:
         af:11:28:2c:e7:ad:fc:3f:54:fb:ff:70:a6:42:5d:dd:eb:93:
         74:9e:4a:5b:70:e0:66:0a:82:fa:ef:f0:ca:e7:41:de:0c:4d:
         89:68:dd:e7:8c:eb:3a:5e:6f:38:f4:24:67:c5:f0:4a:53:77:
         05:37:35:4c:f8:2c:12:13:60:c3:47:de:cf:a3:dc:6b:f3:c6:
         d3:cb:80:3d:67:4c:e2:fd:04:9d:41:d4:c0:6a:e8:0b:45:1f:
         12:57:47:fd:07:e9:f0:cd:a2:82:ca:a7:a8:83:46:27:31:d1:
         61:b3:57:b0:9f:1d:aa:ac:6b:00:81:5a:e6:99:2c:71:2a:f2:
         ee:a5:66:e8:bf:92:0c:27:c0:92:9f:2a:63:81:3e:05:4f:12:
         63:05:80:65:bd:c2:aa:7c:9b:ed:d4:2d:70:65:c7:71:96:d9:
         4c:69:66:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 01:07:13 2025 by rpki-client