Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/jAubGBVaefgqr215NTwj6GsF8i4.roa
File:                     jAubGBVaefgqr215NTwj6GsF8i4.roa (raw, json)
Hash identifier:          r0LZY8Lp5yvGzdYMbjX+hwGSw8v2JpM7ivo3L5snmoQ=
Subject key identifier:   8C:0B:9B:18:15:5A:79:F8:2A:AF:6D:79:35:3C:23:E8:6B:05:F2:2E
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0C55
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/jAubGBVaefgqr215NTwj6GsF8i4.roa
Signing time:             Tue 01 Apr 2025 01:57:25 +0000
ROA not before:           Tue 01 Apr 2025 01:57:25 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     9605
IP address blocks:        110.163.224.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 18:34:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3157 (0xc55)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr  1 01:57:25 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=8C0B9B18155A79F82AAF6D79353C23E86B05F22E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:3b:8a:14:d9:d5:1f:e4:10:8b:a7:82:dd:69:
                    5d:25:31:b2:a4:34:c8:68:3d:e8:06:13:62:13:bd:
                    81:5c:3b:11:63:cf:ee:5c:c8:4d:fb:6f:61:d6:e8:
                    26:97:85:a6:8e:c3:1f:5b:7d:b7:73:b2:61:26:86:
                    f2:f6:d1:96:96:14:b6:5f:eb:a3:06:72:64:ae:ee:
                    cc:89:76:53:c9:22:38:60:1c:cf:cd:51:a8:0c:74:
                    c8:04:94:5f:ff:1a:52:f3:0d:ab:f2:ce:3c:ab:bc:
                    ae:57:28:3f:79:c7:02:e6:8c:9b:5e:2d:57:7d:37:
                    da:c5:29:03:57:0b:ce:96:e9:a9:70:1b:c0:ec:e2:
                    9d:d0:f3:40:4e:ba:9c:bc:3b:bf:d0:5f:a8:32:00:
                    fe:52:f1:ed:1c:a5:b9:c7:04:0d:6e:43:a8:bb:38:
                    49:64:83:10:d1:9d:3e:f6:bb:a2:df:5f:c9:10:c9:
                    a4:99:39:4e:8f:f9:56:7d:9d:96:60:47:d1:d1:e0:
                    0f:f3:d9:e8:68:e4:3f:bf:85:33:34:0a:ab:8e:b3:
                    4a:b2:a3:2b:b5:84:44:57:89:a1:cb:e1:fd:a0:12:
                    09:cf:a1:79:f2:85:a5:78:5b:3f:dd:1a:a7:c0:10:
                    c7:f4:0d:7c:49:45:42:e0:2c:7d:36:f9:e4:1f:cf:
                    82:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:0B:9B:18:15:5A:79:F8:2A:AF:6D:79:35:3C:23:E8:6B:05:F2:2E
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/jAubGBVaefgqr215NTwj6GsF8i4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.163.224.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1c:c3:31:a0:a9:ac:5f:11:1f:f3:34:13:74:17:67:95:55:75:
         5f:fb:94:7a:0d:6d:7f:98:fc:6f:8e:ef:a9:d3:0e:7d:ef:0f:
         bc:e8:4b:f8:ce:94:15:1e:bb:8b:29:f7:54:83:c7:4a:93:17:
         7d:55:82:60:2e:d4:69:14:27:5b:ed:1f:09:a6:62:74:75:99:
         b5:63:9f:d3:ca:69:5d:ee:4b:79:f1:63:10:63:3e:bb:7d:c6:
         af:4d:58:a6:d7:4b:a8:6b:05:cc:19:84:ed:90:42:9c:68:9a:
         5c:5f:f9:bf:f6:a2:4f:d2:98:9d:dc:c8:68:10:26:16:21:53:
         c5:68:3d:0b:3d:71:8f:f5:d9:e8:d2:b7:f9:0a:54:c5:1e:3e:
         05:be:82:4b:12:1b:38:14:8b:91:00:3a:f4:73:74:84:67:00:
         fd:10:c2:fe:cb:de:7e:6c:3e:6d:dd:6b:cf:26:fa:20:59:38:
         1b:fe:22:28:2f:a7:87:50:5f:fc:4f:75:51:26:56:4f:70:bb:
         ee:f2:32:03:00:90:b1:d9:f9:d2:23:2d:91:c9:0b:56:e3:46:
         b9:ef:64:1a:ff:22:6a:55:b3:77:9c:e0:0f:01:81:9b:e1:2b:
         8d:79:5c:80:a9:0a:77:e4:98:ed:bb:14:59:03:8d:8b:a9:a5:
         23:a3:59:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:39:49 2025 by rpki-client