Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/0iRWk2NGlFR85e3ihmrKzGyaDdQ.roa
File:                     0iRWk2NGlFR85e3ihmrKzGyaDdQ.roa (raw, json)
Hash identifier:          EpPKejT6JaWOsxZvMu26Xe5SzABwC85m2jRhCjYM28A=
Subject key identifier:   D2:24:56:93:63:46:94:54:7C:E5:ED:E2:86:6A:CA:CC:6C:9A:0D:D4
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0C40
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/0iRWk2NGlFR85e3ihmrKzGyaDdQ.roa
Signing time:             Tue 01 Apr 2025 01:57:17 +0000
ROA not before:           Tue 01 Apr 2025 01:57:17 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     9605
IP address blocks:        110.163.6.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3136 (0xc40)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr  1 01:57:17 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=D2245693634694547CE5EDE2866ACACC6C9A0DD4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:f0:64:95:74:12:26:fd:e7:c5:53:ed:39:62:
                    51:63:06:3e:ae:03:7e:66:3a:7a:15:77:99:db:e1:
                    1e:12:de:84:a5:80:95:2a:2b:13:16:fd:91:ff:ad:
                    8b:5d:e6:73:12:c3:7d:fe:24:ab:92:f4:a2:6b:00:
                    de:26:b2:ba:82:f3:4f:d8:45:d0:a8:52:7f:41:b1:
                    b0:be:ff:f2:a7:bb:b6:9a:31:ff:e2:aa:c0:cb:20:
                    66:ee:c0:92:9a:ee:4a:ee:39:f0:34:0a:b0:c1:74:
                    71:05:c7:b6:a5:32:6c:6e:d2:3d:ed:9b:33:f9:d1:
                    59:a8:f7:83:90:01:ac:63:6e:13:46:8b:b6:f7:06:
                    af:91:fd:aa:26:c8:cb:b2:18:8b:b5:cf:a5:d8:d5:
                    97:b7:3f:00:ff:1b:9e:e4:81:76:d5:f6:46:79:5a:
                    aa:fc:bb:4e:f6:0c:3b:cf:75:13:83:e4:60:03:84:
                    b0:00:43:18:a1:57:09:0d:93:c7:02:ef:e6:ae:e1:
                    f2:1b:ae:67:ad:de:a3:e2:da:4a:bb:a1:af:53:b5:
                    4a:f2:e8:c8:56:7e:a3:5c:73:b3:94:a5:8d:9f:0a:
                    9e:51:19:e4:2b:37:48:eb:03:22:48:ae:81:20:96:
                    38:1e:7a:27:17:08:f6:13:7f:70:56:f4:f4:36:4f:
                    18:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:24:56:93:63:46:94:54:7C:E5:ED:E2:86:6A:CA:CC:6C:9A:0D:D4
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/0iRWk2NGlFR85e3ihmrKzGyaDdQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.163.6.0/23

    Signature Algorithm: sha256WithRSAEncryption
         61:3c:28:2a:71:1b:6a:33:53:59:f9:07:78:5d:23:5b:15:81:
         0a:ea:22:7c:93:48:ac:35:37:d5:b6:57:06:21:55:62:dc:54:
         88:d0:df:34:4a:6e:33:86:92:00:e2:05:69:22:13:95:62:76:
         91:a2:60:23:63:93:ef:81:22:03:17:33:f8:86:38:58:31:8f:
         23:5e:44:0e:3e:52:3f:8c:e2:8f:0b:a7:ba:6e:46:46:68:0e:
         ef:09:c6:e8:5f:ab:a4:72:60:ee:a4:05:6b:4c:cb:8b:fa:1d:
         71:fa:57:00:0b:16:6b:c7:45:1b:16:fc:26:1e:25:b7:7a:32:
         73:73:30:cb:30:13:a3:53:48:2b:4e:a1:3c:ec:69:a4:78:99:
         71:2d:e5:30:4b:ce:da:a9:33:0a:fa:6e:1a:81:db:db:bf:6e:
         13:26:35:bf:60:67:5b:f9:c6:b4:06:d7:fb:02:96:bc:12:90:
         1d:97:d9:3a:2e:55:1f:e7:5f:7c:a7:e2:7b:db:a5:33:f2:29:
         97:58:65:3c:23:3c:11:89:f0:1f:4e:07:01:1d:6c:49:52:2e:
         3f:0e:5f:4d:52:ae:f8:3a:a7:a4:34:2e:45:d7:ea:d4:57:6b:
         6a:05:1c:8e:a7:c1:3a:fd:a4:8b:51:d1:e9:e8:35:d1:d9:c7:
         a1:b5:d3:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:35:06 2025 by rpki-client