Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/gppQzyenrVw81cjA61nbz6gH-Eo.roa
File:                     gppQzyenrVw81cjA61nbz6gH-Eo.roa (raw, json)
Hash identifier:          x1lMMBgHddG3QnJgVH6QJXRZwcaz9i4ZT58LJZVt7qw=
Subject key identifier:   82:9A:50:CF:27:A7:AD:5C:3C:D5:C8:C0:EB:59:DB:CF:A8:07:F8:4A
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0E66
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/gppQzyenrVw81cjA61nbz6gH-Eo.roa
Signing time:             Tue 10 Jun 2025 10:53:24 +0000
ROA not before:           Tue 10 Jun 2025 10:53:24 +0000
ROA not after:            Sat 23 May 2026 09:51:00 +0000
asID:                     9605
IP address blocks:        211.14.82.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 28 Jun 2025 21:03:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3686 (0xe66)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun 10 10:53:24 2025 GMT
            Not After : May 23 09:51:00 2026 GMT
        Subject: CN=829A50CF27A7AD5C3CD5C8C0EB59DBCFA807F84A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:66:66:ff:d4:94:fb:af:32:6d:75:ab:8b:13:
                    77:06:7b:f6:dd:d7:3b:19:09:3c:5f:a8:f1:07:6a:
                    0f:73:4c:ff:c8:88:4d:81:b1:4e:11:f2:f9:0b:c8:
                    31:b5:f3:0a:9c:fe:af:23:38:65:97:80:93:18:35:
                    37:05:11:05:ba:35:34:64:6b:41:19:01:1d:0f:28:
                    b5:49:d0:ed:6c:01:49:07:54:a8:72:d4:9e:01:dd:
                    01:03:fb:29:17:13:53:28:eb:5e:db:4f:cc:2f:81:
                    c6:83:30:d8:84:c3:02:20:7d:92:e9:54:8b:c8:3c:
                    3e:c5:52:37:9b:1b:b4:f9:a2:22:2c:07:3b:2c:80:
                    4d:43:ed:f5:34:83:0d:6b:5a:f1:d0:e1:40:29:70:
                    d9:52:7f:0c:03:13:dc:0a:f5:32:ea:93:85:75:58:
                    3e:cd:5a:a7:c3:ee:f8:96:37:6e:68:c4:61:60:38:
                    48:64:74:7b:39:a2:9b:ca:f0:11:66:98:f4:9f:da:
                    9d:ad:de:81:e1:87:dc:8c:6e:08:ab:dd:c2:2c:ed:
                    d3:42:28:1b:ca:5b:ac:6c:7e:51:37:2a:87:fa:27:
                    36:ac:60:ce:72:af:ae:9a:40:0a:18:ed:fb:e1:9f:
                    fb:47:66:41:39:80:ea:03:e5:fb:21:2e:49:aa:40:
                    38:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:9A:50:CF:27:A7:AD:5C:3C:D5:C8:C0:EB:59:DB:CF:A8:07:F8:4A
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/gppQzyenrVw81cjA61nbz6gH-Eo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.14.82.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2a:0c:64:03:25:7a:51:6b:d6:04:82:47:dd:50:00:26:c0:f7:
         15:a5:5a:9e:ca:61:e1:79:86:a2:14:62:b3:7b:d2:c9:82:03:
         b1:bb:d7:f6:fc:61:f4:b5:7e:62:e5:f8:dc:7c:0c:1b:62:6b:
         f3:22:c2:2a:c1:39:5e:91:21:10:24:d2:91:87:51:4a:88:4e:
         bd:93:ab:ef:f3:b7:9e:fd:75:23:27:1e:97:75:b3:ca:be:6c:
         da:74:64:67:5e:c3:0c:3b:bc:7c:20:f0:e9:2d:1c:bb:15:b6:
         19:2f:da:06:fd:e9:ba:21:21:27:97:bb:b9:c2:1d:7b:bf:31:
         64:3a:9d:9a:8c:37:cb:65:18:c2:97:43:b1:89:54:ba:b5:35:
         43:65:72:14:6a:6f:7d:8c:2c:48:58:6a:03:84:61:0e:84:a3:
         94:cb:53:1b:27:06:0b:83:8e:a7:84:04:4f:9a:db:3f:03:27:
         c5:4c:1d:99:f5:f1:ef:fc:12:53:26:4a:22:90:31:7a:66:40:
         f1:b3:c3:6c:d2:25:98:da:02:04:a2:76:d8:c4:64:61:24:0b:
         64:ee:7f:0a:91:23:e5:97:ef:91:d3:91:62:16:d1:17:c9:5b:
         51:50:6e:f9:96:13:c3:be:17:28:7c:3e:ec:62:05:a1:65:d2:
         70:9c:e4:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 23:28:06 2025 by rpki-client