Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/fHqFi4p3A-Trlndm1vNjhzCbw_U.roa
File:                     fHqFi4p3A-Trlndm1vNjhzCbw_U.roa (raw, json)
Hash identifier:          aDw4awlid2qra1U/oUrsvUCZ+DYkvR+rbqoEPvVY+Ww=
Subject key identifier:   7C:7A:85:8B:8A:77:03:E4:EB:96:77:66:D6:F3:63:87:30:9B:C3:F5
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0E68
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/fHqFi4p3A-Trlndm1vNjhzCbw_U.roa
Signing time:             Tue 10 Jun 2025 10:53:25 +0000
ROA not before:           Tue 10 Jun 2025 10:53:25 +0000
ROA not after:            Sat 23 May 2026 09:51:00 +0000
asID:                     9605
IP address blocks:        49.102.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Jun 2025 21:44:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3688 (0xe68)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun 10 10:53:25 2025 GMT
            Not After : May 23 09:51:00 2026 GMT
        Subject: CN=7C7A858B8A7703E4EB967766D6F36387309BC3F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:42:af:11:cc:20:79:0c:5f:42:6b:a9:31:91:
                    c3:21:3c:3a:07:2f:9d:56:b5:f0:67:8f:e0:bb:3d:
                    ea:0a:b3:fc:43:40:22:e9:7f:7e:3b:d6:cf:93:d4:
                    d6:fd:1d:19:e2:a6:6a:f9:1f:aa:36:10:66:14:e5:
                    18:97:ea:8a:c1:b6:b2:de:42:7d:12:10:4d:37:48:
                    52:17:ac:66:95:4e:48:b8:23:45:9b:dc:77:64:93:
                    53:f1:c2:13:78:33:ab:ba:49:86:0f:28:2d:db:65:
                    b3:39:73:6b:6c:b8:9f:f9:7e:a2:98:80:67:bb:6a:
                    5d:ef:1a:30:66:38:d5:a1:17:cd:28:06:34:21:fd:
                    c1:dc:f0:6b:8e:a6:17:31:03:d7:bb:8d:52:c6:57:
                    dc:f9:cc:2d:83:88:13:a2:58:ab:ed:7c:82:f9:45:
                    02:25:f2:95:c5:30:6f:5f:a2:e1:a9:81:f6:d8:0c:
                    5c:26:ff:52:71:4e:5d:5e:38:35:e8:d0:78:1d:4d:
                    cb:9d:89:a1:9a:a4:63:aa:4a:52:8c:7d:5c:91:11:
                    98:ed:57:94:b4:ef:b6:c3:51:b2:d4:61:b5:53:40:
                    17:8b:a0:f2:62:f2:f7:97:ff:04:0e:10:19:26:51:
                    49:96:6d:85:1d:d9:80:db:11:41:1d:db:7f:31:14:
                    3a:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:7A:85:8B:8A:77:03:E4:EB:96:77:66:D6:F3:63:87:30:9B:C3:F5
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/fHqFi4p3A-Trlndm1vNjhzCbw_U.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.102.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:04:e1:a5:de:05:6c:03:d2:de:59:e2:f8:73:90:33:aa:9d:
         b0:4b:1a:e4:55:60:33:03:f7:cf:b4:c1:1d:23:fe:09:cc:df:
         9e:37:60:a5:21:61:df:4b:6c:8c:c3:47:80:d2:a2:65:e1:ad:
         a0:0f:1d:5e:b3:a6:02:ae:3b:89:8c:dc:f5:4a:e6:da:97:b6:
         4c:97:41:f2:d9:70:c3:a8:bf:90:c3:b9:30:e0:e1:a3:13:24:
         1c:ac:dd:b9:ad:32:b2:18:e2:5c:b2:e8:da:f1:6c:66:95:a5:
         19:d1:d2:94:7a:d4:50:39:c3:f4:6e:58:c5:00:f1:99:32:16:
         52:ce:6d:91:96:a0:f2:2f:bd:89:0d:66:1f:e3:5c:23:e8:45:
         b4:1f:c7:af:d3:5e:22:a9:66:0f:e1:90:46:f3:51:12:91:e1:
         0f:ba:d0:41:48:a0:33:36:8d:c3:b8:d6:a4:a4:62:4d:9a:af:
         9b:17:47:d2:9d:1e:d8:1f:0c:b4:f4:97:07:7a:6b:b9:20:36:
         a9:f4:20:f6:c9:f1:fc:79:f4:8b:64:34:3b:2b:29:43:ee:15:
         d5:e0:b2:e7:df:c4:e1:b6:c4:39:9e:f5:63:b4:10:0c:ae:bc:
         9f:2c:83:74:aa:1f:73:38:5b:26:ef:b0:2a:5a:14:56:78:28:
         f2:10:ee:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 23:42:37 2025 by rpki-client