Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Xn68JiU_aUPAqq8b_VpqHSPO50o.roa
File:                     Xn68JiU_aUPAqq8b_VpqHSPO50o.roa (raw, json)
Hash identifier:          X/FR2fTFIihlcoKpYNJCSaBuiwPbe2PFPt3Z4mUEiTU=
Subject key identifier:   5E:7E:BC:26:25:3F:69:43:C0:AA:AF:1B:FD:5A:6A:1D:23:CE:E7:4A
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0FB7
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Xn68JiU_aUPAqq8b_VpqHSPO50o.roa
Signing time:             Tue 10 Jun 2025 11:44:13 +0000
ROA not before:           Tue 10 Jun 2025 11:44:13 +0000
ROA not after:            Sat 23 May 2026 09:51:00 +0000
asID:                     9605
IP address blocks:        110.162.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 28 Jun 2025 21:03:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4023 (0xfb7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun 10 11:44:13 2025 GMT
            Not After : May 23 09:51:00 2026 GMT
        Subject: CN=5E7EBC26253F6943C0AAAF1BFD5A6A1D23CEE74A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:b6:14:45:a7:95:22:e8:8b:7f:81:e8:7c:79:
                    17:cb:e3:ba:01:14:d1:6b:a1:78:ed:3e:1a:e1:54:
                    16:f9:4a:c7:b0:d2:4b:24:36:81:ef:a6:87:81:7d:
                    41:2f:02:56:d5:cc:51:fe:30:6e:2b:9f:a1:52:13:
                    a0:3a:8d:07:8c:fa:27:0f:dd:5f:01:be:d0:8b:ed:
                    c5:83:0e:bf:ad:a5:dd:3f:d0:47:65:0e:7a:9c:d7:
                    0c:64:36:df:fa:05:af:61:63:e5:28:81:64:0a:f7:
                    26:45:1b:62:b2:63:71:a1:e7:67:d5:f8:05:4f:9f:
                    ae:2e:25:92:67:80:9e:05:3c:54:db:52:31:74:17:
                    29:c0:72:9c:2a:b1:c2:4a:5c:71:42:ff:01:28:8f:
                    5b:1b:75:60:da:d0:e2:44:14:eb:a8:07:46:33:8c:
                    97:10:96:69:7a:61:dd:d5:97:94:3c:d3:06:00:1c:
                    e6:d6:43:53:dc:ec:c3:f4:1b:3e:32:b4:28:66:64:
                    80:6d:2a:d8:09:16:94:b5:fe:bc:23:5c:ee:53:85:
                    0b:63:3c:9f:96:ba:81:34:9c:fe:79:09:5b:a5:fe:
                    ec:89:dc:3f:5c:03:80:4a:bf:4f:12:8f:6b:9f:bb:
                    b7:b0:93:81:bf:23:c5:04:49:d2:bb:71:ab:17:f0:
                    62:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:7E:BC:26:25:3F:69:43:C0:AA:AF:1B:FD:5A:6A:1D:23:CE:E7:4A
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Xn68JiU_aUPAqq8b_VpqHSPO50o.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.162.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         6a:68:ce:9d:c4:47:7f:f4:bb:88:00:9d:a9:d0:43:19:9c:c4:
         67:cb:5b:07:35:fa:3f:47:aa:91:67:40:ef:81:64:ba:f3:95:
         e3:f8:6a:bc:46:b3:fb:cf:9a:d8:20:88:72:6b:24:84:8e:f7:
         3a:50:dd:ec:a7:b5:25:5d:3b:ff:58:ce:08:a4:5f:55:68:a4:
         70:d7:7b:95:99:c8:73:fb:88:50:d4:98:e1:c3:ad:40:4f:b6:
         c9:9d:5d:71:0c:ac:56:0d:10:4a:16:d8:37:0c:f6:9e:7e:fe:
         ff:69:bc:a4:1f:9a:9a:f8:d7:cc:7f:60:7b:eb:d2:f0:3e:30:
         75:b9:c2:82:12:a5:97:cc:9a:b8:d4:5a:de:dd:e4:ec:90:38:
         19:bc:d5:94:24:39:6b:73:04:be:3d:a1:24:d8:ef:68:42:e7:
         9f:1b:83:e0:6e:a3:ea:d1:57:d2:5d:c0:ae:0b:27:4a:7e:cc:
         9e:84:1d:81:44:97:86:4c:cf:5b:94:7f:0a:72:55:7d:08:52:
         7c:bc:4b:8b:30:c4:b4:f7:86:e8:12:2a:69:0e:de:8b:7c:8d:
         db:a2:83:cf:58:7e:6c:f0:17:7c:30:4b:e0:9b:2d:71:96:6a:
         84:d0:66:34:58:2d:89:9a:6e:1b:c6:43:bf:38:fd:4a:3e:58:
         87:24:08:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 01:48:31 2025 by rpki-client