Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/acxs5onbHhQiT34iXsqjXdEyh3o.roa
File:                     acxs5onbHhQiT34iXsqjXdEyh3o.roa (raw, json)
Hash identifier:          7oOcg4diX+UDi/XdfE82gerryxlloMNqesexso+ZVJ4=
Subject key identifier:   69:CC:6C:E6:89:DB:1E:14:22:4F:7E:22:5E:CA:A3:5D:D1:32:87:7A
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0B81
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/acxs5onbHhQiT34iXsqjXdEyh3o.roa
Signing time:             Tue 01 Apr 2025 01:36:51 +0000
ROA not before:           Tue 01 Apr 2025 01:36:51 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     9605
IP address blocks:        49.98.116.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 18:34:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2945 (0xb81)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr  1 01:36:51 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=69CC6CE689DB1E14224F7E225ECAA35DD132877A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:79:fe:ca:f8:d8:ac:5a:64:03:da:94:75:35:
                    53:61:00:90:25:30:ef:a4:94:b9:58:62:c7:d3:e1:
                    d8:3c:21:86:8a:0f:74:4e:bd:7e:2c:e3:35:75:ab:
                    75:33:8e:1b:4c:ec:a5:55:0e:4f:c7:a1:cf:5f:c9:
                    64:dc:99:8f:18:c9:07:8b:9c:9e:0e:b6:56:6f:55:
                    90:32:5d:57:72:7e:f0:9e:57:0a:a6:f2:2a:23:43:
                    cf:34:5c:ef:e1:87:c4:ad:14:14:79:71:47:61:d7:
                    e2:04:b5:8a:35:82:39:93:83:88:d9:28:bf:16:0d:
                    cf:68:11:5c:c7:c9:2c:17:9d:b7:13:a0:3d:c0:44:
                    3f:4d:4f:ac:a8:85:11:e3:b6:be:7b:ba:2b:0b:eb:
                    da:c0:fb:86:8c:c0:08:ce:b6:a7:10:dc:24:44:44:
                    e1:7b:f1:ef:9c:24:24:77:c1:0e:66:8e:c9:d1:dd:
                    cf:8c:67:96:a3:89:71:1d:47:10:0b:1e:cb:ff:f0:
                    7e:f8:7c:75:14:65:6b:b2:fc:6f:55:8d:a2:96:b1:
                    e2:0b:03:8b:e1:96:5f:b4:8c:fb:cf:87:98:94:15:
                    f8:a5:4a:dc:1f:62:6c:75:d1:b5:62:6c:d0:42:64:
                    6a:ec:56:92:99:53:8a:da:57:97:d0:61:ce:da:ab:
                    4e:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:CC:6C:E6:89:DB:1E:14:22:4F:7E:22:5E:CA:A3:5D:D1:32:87:7A
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/acxs5onbHhQiT34iXsqjXdEyh3o.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.98.116.0/23

    Signature Algorithm: sha256WithRSAEncryption
         38:b8:55:33:d3:2e:49:31:8b:79:2f:73:a6:d8:48:10:a8:35:
         cd:8c:b2:87:a7:1b:5a:f5:c5:16:60:4e:3c:1f:73:8d:16:92:
         aa:ab:14:86:25:a8:72:af:a2:31:c0:ea:16:3f:aa:f8:c5:24:
         43:e9:39:54:99:b7:25:e1:35:1d:00:b7:28:c9:bb:4b:e0:26:
         e4:14:79:cc:be:aa:b7:e0:47:f9:17:34:c8:2d:f3:90:cc:bc:
         1a:55:ec:e0:d3:d0:0b:85:09:01:51:47:d4:e7:50:2a:27:79:
         da:70:f9:4b:1e:ff:25:81:1e:e2:e7:6c:a5:3b:4e:0f:4b:3a:
         67:2f:42:3d:d9:21:97:2f:5b:7e:f7:8a:68:e5:04:a7:27:01:
         5c:03:9a:1e:55:49:bb:bf:bb:dc:5c:1d:11:13:fe:f3:da:05:
         73:04:e4:7e:35:5b:fc:21:d1:6b:3f:2a:33:66:8a:7b:90:dc:
         55:1f:96:d7:07:2e:04:12:31:be:e7:ce:6c:07:6f:8e:27:49:
         52:c0:ca:9e:de:75:5b:f8:20:fd:ac:97:42:f4:f2:ed:20:9f:
         2a:f9:5a:b6:0d:d7:56:cf:4d:a7:ec:fc:68:c2:7c:88:ef:9e:
         55:4f:41:d6:68:66:22:8f:36:b9:29:a9:51:78:03:94:e9:e1:
         64:98:9b:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:12:53 2025 by rpki-client