Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/96mAvWKIlGIPhZ2hxNoSzao404o.roa
File:                     96mAvWKIlGIPhZ2hxNoSzao404o.roa (raw, json)
Hash identifier:          Awm0M75aLmDnsA3AEHCmDTGLs6MUQpJAUVQWeXwLPHM=
Subject key identifier:   F7:A9:80:BD:62:88:94:62:0F:85:9D:A1:C4:DA:12:CD:AA:38:D3:8A
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0E0A
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/96mAvWKIlGIPhZ2hxNoSzao404o.roa
Signing time:             Tue 01 Apr 2025 02:31:26 +0000
ROA not before:           Tue 01 Apr 2025 02:31:26 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     9605
IP address blocks:        110.158.136.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3594 (0xe0a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr  1 02:31:26 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=F7A980BD628894620F859DA1C4DA12CDAA38D38A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:da:7d:5e:13:1b:86:ff:1f:c7:c4:0d:a1:a7:
                    16:9b:11:4e:32:a6:be:39:bb:da:86:af:a3:1f:52:
                    8f:bd:09:8a:bb:a0:f5:fc:49:b6:ee:2a:54:29:dd:
                    89:74:57:81:fc:d1:3e:21:7c:88:3a:01:05:5a:6e:
                    1a:f0:a5:e9:2c:7e:8e:71:4e:32:ca:93:c8:6f:3d:
                    a1:48:c1:ce:d5:6d:e4:ac:80:b1:3e:c4:41:d8:a3:
                    25:94:02:c8:40:1a:63:f8:60:a7:12:a6:ab:db:45:
                    13:a0:cb:0b:05:eb:55:e6:97:2e:3e:f2:a5:a9:6c:
                    f5:97:45:94:08:5c:63:ef:d9:2b:41:70:2d:50:97:
                    c4:06:2a:3c:0a:10:c1:bb:4e:7e:9e:a4:e5:30:80:
                    a8:35:f5:33:bb:d2:b7:85:37:ae:18:2a:03:7d:d8:
                    ea:76:01:c9:5d:37:c7:3f:6b:50:bc:4e:0d:9f:6d:
                    a0:91:ab:6b:95:87:03:71:7f:e5:ea:c5:5f:86:13:
                    7a:dd:d1:d7:8e:9c:92:fb:4a:a9:02:e6:da:4d:d7:
                    05:c9:f8:f2:10:9f:c4:23:a5:1d:87:24:a3:5e:86:
                    de:7b:f9:80:8e:30:f9:86:69:10:d6:22:cb:2b:ce:
                    d7:b1:96:50:63:d7:a5:e9:20:1d:30:62:63:a1:19:
                    5f:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:A9:80:BD:62:88:94:62:0F:85:9D:A1:C4:DA:12:CD:AA:38:D3:8A
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/96mAvWKIlGIPhZ2hxNoSzao404o.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.158.136.0/21

    Signature Algorithm: sha256WithRSAEncryption
         22:03:45:66:99:a3:3b:17:90:be:3e:1b:4c:ec:13:82:a7:94:
         53:5b:54:61:a0:d6:db:42:df:86:65:03:5e:6f:d9:6c:3d:de:
         05:23:9a:5f:9c:a0:ae:4e:0d:81:ff:43:16:c1:50:85:0d:82:
         f1:cb:cf:10:5f:57:4e:10:28:04:a9:a0:0f:8d:bc:e9:6c:69:
         e9:c6:f6:8e:93:48:6c:93:00:af:24:2b:ff:fe:f7:b1:74:51:
         7f:2c:d2:5f:22:9f:cf:eb:22:7a:93:82:87:b3:f2:57:4a:c6:
         24:50:a8:54:26:d6:54:16:c8:02:c5:a6:c0:46:19:83:9e:6c:
         79:f4:25:62:1d:e7:bc:7f:69:6c:bf:58:58:bc:11:ab:14:54:
         ee:3e:4a:1f:f8:b8:94:c1:5f:39:40:0d:ad:c0:d1:36:fe:78:
         95:a3:18:4d:a4:70:12:f7:f3:73:f7:46:cb:54:6a:7b:8e:6d:
         e4:cc:35:f6:b4:22:8e:4c:45:e6:89:8d:f0:11:a7:80:c8:51:
         68:94:40:45:f0:b3:41:19:2c:86:72:8e:16:5a:a5:6c:fd:81:
         13:55:37:27:2c:5b:2f:da:49:c4:cd:47:db:1b:64:07:a8:ee:
         5a:45:8a:a9:bc:16:ce:ce:3a:56:5c:87:5c:1a:eb:09:40:f4:
         60:e9:20:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:40:25 2025 by rpki-client