Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/rj19jeBo8n9O90IjzcOmalKihPk.roa
File:                     rj19jeBo8n9O90IjzcOmalKihPk.roa (raw, json)
Hash identifier:          ko1BGH1PMM7c5ROsRp4Haf5LdmbgUNhat/3NHpvOm5k=
Subject key identifier:   AE:3D:7D:8D:E0:68:F2:7F:4E:F7:42:23:CD:C3:A6:6A:52:A2:84:F9
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0E9C
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/rj19jeBo8n9O90IjzcOmalKihPk.roa
Signing time:             Tue 10 Jun 2025 11:00:34 +0000
ROA not before:           Tue 10 Jun 2025 11:00:34 +0000
ROA not after:            Sat 23 May 2026 09:51:00 +0000
asID:                     9605
IP address blocks:        211.14.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 28 Jun 2025 21:03:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3740 (0xe9c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun 10 11:00:34 2025 GMT
            Not After : May 23 09:51:00 2026 GMT
        Subject: CN=AE3D7D8DE068F27F4EF74223CDC3A66A52A284F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a9:68:d7:0a:f5:1d:70:37:99:28:0b:65:d0:
                    70:77:93:49:7f:f1:e1:3e:fc:0f:9b:69:68:f5:2f:
                    fb:5d:78:96:18:b5:66:3d:90:15:51:b5:6e:34:b1:
                    18:ac:da:a6:4c:ed:80:b4:25:d2:67:63:29:13:39:
                    a8:e3:58:2a:84:a8:19:94:95:53:16:14:9c:74:23:
                    cb:d2:19:20:02:e0:d3:5e:e8:b2:b8:39:2c:84:8c:
                    c7:a9:b8:fe:77:b5:ea:2c:10:b7:d5:ab:29:44:0d:
                    31:1c:55:41:0a:1c:7f:b4:29:65:4b:2c:21:60:ca:
                    2f:4e:2b:22:44:8e:3b:cd:1d:54:68:01:89:87:1e:
                    3a:d3:d8:69:27:3a:4d:92:80:35:ca:40:81:40:8c:
                    dd:90:ef:4b:1a:9c:6f:69:9c:7d:b8:0e:5c:ce:3e:
                    bd:98:42:0d:7b:6e:8a:24:cf:c0:3d:ec:4a:47:3c:
                    46:04:07:ca:4b:43:b5:e7:84:87:dc:02:c2:e8:1f:
                    dd:1c:be:a4:83:f9:3b:c4:9c:0a:db:35:34:30:3a:
                    d0:b5:3e:d8:f9:a0:4f:7c:8d:38:66:95:9d:df:c3:
                    b0:70:0f:f5:1b:11:98:20:1d:e3:f9:ab:5c:df:a2:
                    47:8f:a4:cb:d3:12:72:1b:da:53:df:26:7e:07:28:
                    aa:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:3D:7D:8D:E0:68:F2:7F:4E:F7:42:23:CD:C3:A6:6A:52:A2:84:F9
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/rj19jeBo8n9O90IjzcOmalKihPk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.14.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:c3:81:52:bc:56:f3:d1:62:fd:50:36:43:7b:1d:2e:9b:cf:
         29:50:86:ef:58:89:e9:73:fd:96:c1:32:a2:04:92:79:57:da:
         b9:ca:3a:80:ad:f1:b3:1f:8c:2d:37:ef:a9:22:e2:3a:f0:80:
         b8:a0:5e:ed:45:83:f2:49:72:ec:ae:47:d6:1b:84:99:4d:6b:
         63:7e:7d:76:90:da:b6:3d:83:ef:79:33:3f:6d:be:f9:64:0e:
         46:92:cc:bc:cd:26:ce:ab:91:ec:8e:c9:f4:f3:5c:54:8f:f3:
         07:45:4d:d7:80:1b:dd:95:c6:46:27:96:63:99:c7:9c:0e:a1:
         61:09:b9:d7:2a:ce:e5:a5:66:9c:d5:5b:62:1e:da:03:de:61:
         d4:fe:a8:93:8a:07:63:fa:be:01:b2:0d:66:8c:ce:fd:a9:27:
         94:0b:9e:c4:ca:bb:5a:48:15:c9:00:d8:8b:da:be:c8:55:ea:
         09:c8:e7:68:a6:0b:55:7d:4f:4a:0e:60:06:89:7b:58:b0:c6:
         07:10:30:c4:80:e1:60:67:cd:4c:d5:09:6b:51:92:d1:75:2e:
         49:42:f0:a8:b5:19:bc:4b:5c:bc:34:ec:3f:04:f4:1e:41:c1:
         6f:0d:4d:4c:0d:f4:67:ce:b4:24:3a:e5:69:11:9d:8b:f2:ff:
         06:cf:af:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 01:02:48 2025 by rpki-client