Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/fbQ-tIohMplQIsPixoJbNu-rGUo.roa
File:                     fbQ-tIohMplQIsPixoJbNu-rGUo.roa (raw, json)
Hash identifier:          cy7nhuDX9Jap0Fszrpmvu1WLGSIGUndDNKlX3OOB758=
Subject key identifier:   7D:B4:3E:B4:8A:21:32:99:50:22:C3:E2:C6:82:5B:36:EF:AB:19:4A
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0F0F
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/fbQ-tIohMplQIsPixoJbNu-rGUo.roa
Signing time:             Tue 10 Jun 2025 11:20:13 +0000
ROA not before:           Tue 10 Jun 2025 11:20:13 +0000
ROA not after:            Sat 23 May 2026 09:51:00 +0000
asID:                     9605
IP address blocks:        183.73.96.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 28 Jun 2025 21:03:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3855 (0xf0f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun 10 11:20:13 2025 GMT
            Not After : May 23 09:51:00 2026 GMT
        Subject: CN=7DB43EB48A2132995022C3E2C6825B36EFAB194A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:3e:9b:57:66:3a:4e:1e:3b:17:c4:4e:94:52:
                    ff:e2:22:c5:ef:54:52:7e:6d:32:e0:a9:4e:46:5f:
                    1a:ba:21:c8:a4:14:dd:20:05:ac:fe:18:b1:fd:66:
                    ae:92:4a:a5:3f:41:d5:b5:25:c3:b9:40:60:f9:5c:
                    b5:89:57:2f:b3:17:59:30:f0:4f:11:6f:10:ab:95:
                    a0:92:fd:b7:ad:e9:fc:dc:85:6a:0a:f4:72:bd:c7:
                    d6:00:f4:d9:d0:47:b3:7b:a1:d9:d6:9e:36:d8:06:
                    dc:4e:0a:62:c2:a3:53:36:b8:ce:a8:42:8d:a3:ad:
                    78:da:a0:05:ab:79:24:98:a8:b8:6f:f6:3f:94:b3:
                    36:8f:d0:4d:ce:5c:ea:d2:a9:fa:4e:16:35:af:b5:
                    32:fd:08:0f:bd:d4:f4:7e:6c:e6:94:f2:ab:32:49:
                    43:a0:97:3d:bb:e5:d1:dd:a7:02:2f:fd:5c:e2:28:
                    1b:6c:16:89:c8:16:ba:85:16:70:61:93:ed:d5:a1:
                    59:80:68:38:ab:3e:6e:3c:1f:34:d9:2b:df:ca:97:
                    84:02:36:6c:d0:6a:97:f1:4b:02:c6:8e:97:28:ab:
                    18:6a:78:d4:3b:a9:26:77:8f:6f:15:5f:c4:18:6b:
                    d4:2e:95:b2:fc:27:01:ad:88:7b:58:34:b6:c7:a0:
                    9b:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:B4:3E:B4:8A:21:32:99:50:22:C3:E2:C6:82:5B:36:EF:AB:19:4A
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/fbQ-tIohMplQIsPixoJbNu-rGUo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.73.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         35:35:94:7d:53:d2:ea:df:5f:96:ec:78:16:cb:ff:c6:14:fd:
         60:2b:47:71:0d:23:80:0c:ff:98:6b:4d:0d:45:53:2c:a6:03:
         ce:06:6e:67:8b:d5:41:8a:e0:bf:28:18:f3:ac:af:87:e2:73:
         dc:71:97:4b:4d:12:2e:f3:92:37:7c:64:a9:bf:17:80:1b:39:
         80:0d:d7:a8:b5:ab:b8:c5:28:8a:ca:54:21:69:8d:a4:3f:bf:
         84:ad:36:90:af:5e:c0:5e:a9:f6:55:02:fc:50:08:9d:28:bc:
         1f:14:e5:1b:0d:65:fb:bc:8a:da:10:fb:31:d0:95:9d:90:8b:
         a5:56:61:8a:55:bc:39:34:66:18:97:70:69:7f:01:9e:5a:16:
         94:87:40:81:8c:6f:65:37:63:36:b1:76:8b:40:62:f2:a3:37:
         d5:53:82:63:36:04:0a:01:15:fb:b0:67:af:e2:2d:cc:15:c7:
         9e:93:fe:d8:80:ea:a3:c8:69:b6:34:1f:d6:de:cd:33:67:72:
         eb:3d:0c:c5:82:b5:9e:dd:92:14:50:99:9e:6d:3d:51:7c:1c:
         17:60:cc:0e:46:83:97:a9:72:ce:f9:41:5a:46:d8:90:03:c1:
         4b:6b:8e:1f:5f:ea:ca:1e:08:87:60:f2:6a:e9:65:17:ed:f8:
         76:a4:04:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 00:56:54 2025 by rpki-client