Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/jds-_z6LsAoJ1RTimRy5ZjOgczc.roa
File:                     jds-_z6LsAoJ1RTimRy5ZjOgczc.roa (raw, json)
Hash identifier:          MrBYF2mzDwiAF7jT7mBziIkdxGJp2p9b8fugouWZVqg=
Subject key identifier:   8D:DB:3E:FF:3E:8B:B0:0A:09:D5:14:E2:99:1C:B9:66:33:A0:73:37
Certificate issuer:       /CN=F89E0F15C1E20E191AAF17288F6E30FF01869A6E
Certificate serial:       6B
Authority key identifier: F8:9E:0F:15:C1:E2:0E:19:1A:AF:17:28:8F:6E:30:FF:01:86:9A:6E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/jds-_z6LsAoJ1RTimRy5ZjOgczc.roa
Signing time:             Wed 02 Apr 2025 07:12:35 +0000
ROA not before:           Wed 02 Apr 2025 07:12:35 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     9605
IP address blocks:        160.249.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 15 May 2025 18:36:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 107 (0x6b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F89E0F15C1E20E191AAF17288F6E30FF01869A6E
        Validity
            Not Before: Apr  2 07:12:35 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=8DDB3EFF3E8BB00A09D514E2991CB96633A07337
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:2f:08:2b:d0:8c:68:b9:9d:f2:a5:85:7f:98:
                    06:b2:bd:64:ec:cc:fb:e1:e3:94:04:be:61:dd:64:
                    58:7d:1b:b5:2b:69:7b:9a:67:f1:80:0c:69:31:06:
                    a7:01:8c:d2:d9:2f:1d:39:71:b0:08:9d:19:ca:39:
                    d8:73:d5:0b:d3:9c:01:94:4a:bf:62:1c:42:13:f3:
                    20:cf:71:9a:01:86:a3:e5:60:0f:da:4f:40:fd:bc:
                    1c:4a:73:5a:97:8f:e5:96:8c:84:e5:03:6e:07:1e:
                    3d:f9:fe:43:b9:6c:58:3e:b0:3a:be:45:70:1c:ba:
                    09:95:df:b4:d4:2b:41:6f:3c:ec:b0:25:c1:86:ff:
                    ab:c0:cf:de:bc:38:56:b7:58:5b:54:dd:e3:62:fb:
                    ab:da:5a:aa:0a:ac:b1:9f:a0:43:2e:05:f7:ea:9a:
                    28:ba:d3:e5:48:27:ee:83:c0:0e:e3:32:4e:45:2d:
                    7b:7c:c3:b4:9c:76:5d:50:3b:2b:f6:09:99:a8:07:
                    22:9f:28:e0:a8:ec:a1:11:48:21:b1:65:da:35:15:
                    e5:f2:d5:8d:54:81:46:55:84:e6:b9:c7:b9:52:44:
                    60:ee:48:fa:d8:a3:a9:30:c1:a5:b0:a5:66:f2:70:
                    da:cc:30:52:b2:10:38:3b:f4:8c:02:a5:1e:f9:be:
                    1b:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:DB:3E:FF:3E:8B:B0:0A:09:D5:14:E2:99:1C:B9:66:33:A0:73:37
            X509v3 Authority Key Identifier:
                keyid:F8:9E:0F:15:C1:E2:0E:19:1A:AF:17:28:8F:6E:30:FF:01:86:9A:6E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/jds-_z6LsAoJ1RTimRy5ZjOgczc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.249.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:d2:57:7f:25:be:18:85:fa:47:4b:30:b7:a9:3e:45:7c:d4:
         67:d5:32:20:7b:36:2c:c9:9f:d8:8a:1c:3b:19:c3:b8:a7:23:
         c8:33:62:9b:be:04:55:5b:e9:65:71:ff:f7:ad:c6:06:e8:2f:
         b3:5e:0c:5c:81:10:cb:04:72:34:21:fa:c2:13:ac:d4:06:9b:
         ce:a7:7e:10:14:b5:66:58:07:65:28:72:4f:02:e9:00:af:6a:
         fe:46:7c:f9:1e:69:5b:f1:64:35:51:21:59:f5:0e:55:38:17:
         34:69:12:51:8a:f0:82:d7:4a:33:83:8f:3f:ef:2a:b7:5e:ad:
         c6:70:e8:7a:af:d3:20:52:0c:bf:dd:58:d7:3b:5c:f7:ea:f8:
         de:5c:4a:0e:c9:9e:ac:d8:8a:9d:2a:e8:aa:90:6f:8a:64:89:
         c6:9a:af:e1:39:3c:49:64:f8:40:1a:c3:f3:9f:1e:37:21:e6:
         ca:47:de:12:5d:11:d7:4f:7c:f5:d0:5f:ba:0a:a8:54:1b:3e:
         1a:26:66:45:4a:41:d5:35:3b:27:49:d3:a8:cc:3a:65:13:5b:
         53:e8:7d:70:a1:a4:a6:e8:f1:45:42:f7:5f:b5:e4:e7:27:92:
         77:30:c8:10:87:b7:a2:41:59:d7:a9:2d:c1:dd:38:47:4d:d6:
         59:4d:51:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 20:05:52 2025 by rpki-client