Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/gMpsV7FBMA7FdUYP0fhRyWEI_Lw.roa
File:                     gMpsV7FBMA7FdUYP0fhRyWEI_Lw.roa (raw, json)
Hash identifier:          0ptZ/B3AKK2qEATdAFvXC7g1DGDDgLWjenkwHyhqBmk=
Subject key identifier:   80:CA:6C:57:B1:41:30:0E:C5:75:46:0F:D1:F8:51:C9:61:08:FC:BC
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0F58
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/gMpsV7FBMA7FdUYP0fhRyWEI_Lw.roa
Signing time:             Tue 10 Jun 2025 11:28:31 +0000
ROA not before:           Tue 10 Jun 2025 11:28:31 +0000
ROA not after:            Sat 23 May 2026 09:51:00 +0000
asID:                     9605
IP address blocks:        1.78.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 29 Jun 2025 13:51:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3928 (0xf58)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun 10 11:28:31 2025 GMT
            Not After : May 23 09:51:00 2026 GMT
        Subject: CN=80CA6C57B141300EC575460FD1F851C96108FCBC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ea:78:44:21:c8:8e:78:8a:79:68:35:0a:38:
                    a6:54:c4:ce:e4:d4:44:93:a6:48:66:b5:71:0a:5d:
                    c8:53:af:09:a6:2a:0e:43:21:4f:2d:97:84:c8:ac:
                    5b:ae:a4:92:75:37:14:03:a7:5b:90:d4:de:fa:63:
                    5e:a6:e2:46:ca:28:78:c9:72:4d:14:12:16:d9:d7:
                    4c:8f:9d:95:57:ed:77:35:46:aa:af:9b:d5:cc:9d:
                    ce:60:33:ae:be:45:ba:cc:80:92:c2:c6:11:42:7e:
                    ed:88:ba:53:15:87:1a:1e:54:72:be:09:2c:da:c3:
                    e8:96:d9:47:3e:ef:90:24:b4:86:c6:f9:8d:d3:36:
                    80:6d:2b:01:e4:20:bb:c7:42:9f:1c:61:49:34:88:
                    6a:a9:22:0d:80:7f:60:96:a7:36:1f:49:d5:5e:98:
                    63:67:41:da:28:15:bd:85:36:5f:40:71:20:67:4d:
                    55:c0:91:47:5c:32:d1:91:89:a9:b0:f2:37:bd:64:
                    c8:37:34:11:02:0d:77:bb:90:c4:de:3e:41:f5:a1:
                    8c:75:01:cb:63:68:d7:04:1b:80:e5:87:9c:51:70:
                    43:ee:d8:72:e3:f7:e2:34:d7:62:41:7f:49:69:73:
                    38:bb:fe:9e:f8:3b:c3:3d:03:fd:38:67:5c:a3:be:
                    75:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:CA:6C:57:B1:41:30:0E:C5:75:46:0F:D1:F8:51:C9:61:08:FC:BC
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/gMpsV7FBMA7FdUYP0fhRyWEI_Lw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.78.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         91:4b:34:e7:6d:da:96:42:16:33:da:6a:34:d0:82:10:8f:a8:
         cd:cd:5f:67:3c:fa:3f:da:21:47:a2:ba:ec:25:42:45:cf:7e:
         db:74:9a:7b:51:2d:ff:49:4c:7d:76:f1:20:34:f4:39:c5:fe:
         ed:6d:82:82:bb:2c:d9:ae:0d:e0:fd:da:d6:53:65:1a:c6:f3:
         8f:6e:68:a7:8c:80:98:a9:66:59:52:51:08:4c:27:4d:a2:e9:
         da:c6:32:f6:cd:ee:bf:5c:03:e5:2c:a9:09:c3:5c:b3:3a:10:
         cd:5b:fb:02:79:fa:da:23:01:c3:f7:f4:11:7c:0c:9b:22:67:
         03:19:e5:db:14:f5:5e:86:80:0a:d2:66:f0:da:2b:6f:12:bd:
         48:94:1f:d3:fb:a9:01:53:bc:0c:00:bd:cd:63:3f:0d:8c:b4:
         95:15:bb:ba:d3:1d:f7:c6:94:4d:1e:10:6d:98:61:d9:de:5d:
         04:69:81:18:b7:67:20:fa:db:b1:35:77:7e:ba:ce:b5:50:c1:
         04:ac:90:59:bc:7b:72:21:af:4d:b0:c4:93:a4:ce:2b:94:8b:
         57:1d:ac:a5:76:35:52:2e:06:a5:b6:ce:f4:e5:11:81:c7:4a:
         5d:3e:f3:c0:ee:a8:bb:e3:0d:5b:84:1c:8e:1a:24:ba:39:c3:
         54:fe:a9:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 16:31:51 2025 by rpki-client