Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/FV2-VUMKeI8KA6wipB8pMmWju8s.roa
File:                     FV2-VUMKeI8KA6wipB8pMmWju8s.roa (raw, json)
Hash identifier:          X6byfrB++Rrktgtlh3o1uYQ6kuyYL4KiNoCWCaKd5ns=
Subject key identifier:   15:5D:BE:55:43:0A:78:8F:0A:03:AC:22:A4:1F:29:32:65:A3:BB:CB
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0B5F
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/FV2-VUMKeI8KA6wipB8pMmWju8s.roa
Signing time:             Tue 01 Apr 2025 01:33:23 +0000
ROA not before:           Tue 01 Apr 2025 01:33:23 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     9605
IP address blocks:        110.163.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2911 (0xb5f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr  1 01:33:23 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=155DBE55430A788F0A03AC22A41F293265A3BBCB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:8c:c5:02:d8:db:bf:b6:39:46:9a:2a:60:36:
                    ed:f1:31:8a:19:39:65:4b:fa:b3:2d:79:79:44:e9:
                    8a:88:e5:52:fd:30:ca:e5:f2:ce:a2:07:20:0e:d4:
                    74:a8:39:4d:53:d8:84:9b:56:8d:11:75:1a:7e:17:
                    76:ff:50:8c:8a:26:60:e8:bb:fa:ee:1f:a6:1d:ec:
                    f6:d6:6a:01:32:7b:64:60:3c:ae:bc:20:a9:3e:41:
                    be:9d:3c:a2:e7:ed:1b:b9:22:1f:df:40:0b:12:fd:
                    5a:e0:e3:bd:2f:42:54:7a:9e:8e:9d:74:e6:c3:02:
                    69:b6:8d:73:d7:0e:61:0b:13:aa:24:e0:bd:7d:87:
                    8e:8e:c1:f0:b6:f2:e5:76:18:90:3a:82:df:24:d6:
                    af:89:65:fd:5d:bb:f8:52:e2:25:a6:17:cc:62:6c:
                    0c:c0:fa:aa:e1:7a:20:77:8f:df:07:33:5c:53:62:
                    33:ce:b4:16:b2:7e:95:01:02:12:28:a5:7d:01:c0:
                    b7:4d:da:84:55:b0:55:ef:c6:d6:bf:d9:3e:45:64:
                    26:78:ed:f8:78:62:58:04:28:8f:7e:dc:da:b3:5c:
                    03:c2:69:0d:a2:17:11:c8:3e:cd:27:16:51:e2:3a:
                    37:70:1d:3a:21:c5:77:4e:43:27:9a:54:fc:db:f0:
                    bd:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:5D:BE:55:43:0A:78:8F:0A:03:AC:22:A4:1F:29:32:65:A3:BB:CB
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/FV2-VUMKeI8KA6wipB8pMmWju8s.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.163.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:b4:75:04:6e:33:8e:aa:09:23:23:11:a3:80:28:56:3d:18:
         57:40:a6:61:3f:89:94:22:ba:5d:e1:d4:9e:cd:80:12:f8:5a:
         a7:dc:bd:d7:eb:58:51:a2:77:76:70:e3:a6:03:da:65:28:97:
         91:eb:95:36:b8:4b:11:a3:02:e6:3a:41:92:b1:a3:f0:ee:51:
         ea:fd:ef:f8:1f:ff:de:1c:b7:01:5e:72:09:d7:f7:5f:6c:a4:
         53:2b:46:9b:8c:da:69:51:f5:9b:35:a8:e6:81:80:c4:d6:06:
         f2:e0:cb:6d:7d:f9:1e:39:2b:00:69:3d:da:0e:b3:75:f8:f6:
         e1:7c:2d:1c:1b:d5:60:88:1c:da:c0:48:7a:fe:ea:19:41:0f:
         b4:95:17:c9:88:6e:55:0c:92:49:84:1c:5d:00:51:ed:1b:fd:
         4b:84:ea:9f:20:ce:5b:0f:01:09:2f:76:c2:c7:34:77:71:cc:
         a1:e4:dc:0a:37:57:15:eb:d8:1f:e2:aa:88:39:89:93:1c:49:
         e3:09:b3:09:69:8b:5c:0b:ec:29:41:aa:a4:40:05:70:02:6f:
         bd:48:e9:04:1a:1a:7e:cd:9f:be:37:a0:73:34:c0:51:29:1c:
         4b:73:61:f4:78:aa:8e:82:cd:03:71:6a:b8:5b:2d:65:40:b4:
         24:3d:fc:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:44:21 2025 by rpki-client