Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/LJwRLeliCHWTg1nGQGp8snQf4T8.roa
File:                     LJwRLeliCHWTg1nGQGp8snQf4T8.roa (raw, json)
Hash identifier:          4rQGzzIODI/wUXlZSKpy3ZDhIT3WWGNu3mbV9H/llmQ=
Subject key identifier:   2C:9C:11:2D:E9:62:08:75:93:83:59:C6:40:6A:7C:B2:74:1F:E1:3F
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0D96
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/LJwRLeliCHWTg1nGQGp8snQf4T8.roa
Signing time:             Tue 01 Apr 2025 02:21:37 +0000
ROA not before:           Tue 01 Apr 2025 02:21:37 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     9605
IP address blocks:        211.14.94.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3478 (0xd96)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr  1 02:21:37 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=2C9C112DE9620875938359C6406A7CB2741FE13F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:2f:ba:94:ec:bb:a5:a7:27:10:d6:55:ee:bd:
                    b8:89:43:05:06:72:db:45:83:e9:af:53:e2:94:7c:
                    8d:5d:8f:0b:64:24:a4:90:04:86:fb:1b:ec:b6:dd:
                    2d:0e:cd:9f:be:92:42:1e:87:59:6d:cc:fc:27:42:
                    5f:f3:b1:36:1a:25:2a:45:d8:5e:47:e8:cd:77:e2:
                    77:89:5f:54:f6:51:df:af:43:82:52:92:27:35:dd:
                    72:d5:db:b6:05:cf:17:2b:19:91:47:74:4f:53:7c:
                    06:eb:00:8e:9b:e0:34:67:fd:d5:c3:57:20:c1:12:
                    eb:db:94:21:e6:cb:0c:99:f4:a3:e1:76:e6:fc:70:
                    a2:c8:40:b9:85:99:b7:02:5d:05:25:e4:57:1b:72:
                    ff:29:8d:51:7a:23:79:b9:f9:5a:a7:ba:9d:c6:ee:
                    11:a1:d2:72:a5:fd:34:90:23:be:ed:05:ee:a3:e2:
                    97:cb:da:7d:e5:60:7d:6a:f1:67:18:05:f4:73:47:
                    fa:bd:c8:5a:0c:6a:42:57:f9:48:c4:a3:81:04:f1:
                    f2:60:6b:37:a3:df:5f:77:6a:ff:d2:35:06:d0:7c:
                    da:ac:5a:66:60:7f:f8:62:64:66:3a:54:c1:c9:11:
                    d8:0b:d5:57:ab:9f:3e:39:f0:52:f7:e7:9e:ed:99:
                    fe:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:9C:11:2D:E9:62:08:75:93:83:59:C6:40:6A:7C:B2:74:1F:E1:3F
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/LJwRLeliCHWTg1nGQGp8snQf4T8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.14.94.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d8:6f:e9:ff:a4:e8:a0:83:25:a1:d7:49:58:ec:fa:08:b6:0c:
         32:4d:29:7a:81:cf:a4:3f:e0:ac:df:8a:79:2b:bd:bf:de:c8:
         ce:f4:6c:e4:65:43:51:c7:34:9d:6b:f5:80:42:a5:0b:db:8a:
         bd:e0:50:3c:f2:17:3e:55:32:2e:15:cc:21:c3:7f:b9:e0:de:
         4d:53:91:fc:4b:b0:c4:70:b1:34:8c:0a:6b:97:b0:4f:10:20:
         63:0f:d1:c3:13:f9:c4:98:5e:79:3c:ad:3e:f9:c7:0b:e8:62:
         d8:48:29:9d:77:7b:86:58:66:a8:fb:8b:c5:b1:83:8c:31:0d:
         a0:40:c7:33:c8:75:7b:36:95:3e:03:79:5a:a8:66:c6:0a:47:
         50:70:94:f3:74:e2:c3:2a:e7:6c:7a:f0:91:a8:28:e7:c8:9d:
         03:30:06:df:6c:a3:8b:ec:36:a7:a9:6c:eb:47:49:80:fa:85:
         f8:e9:1a:6a:4e:9e:4f:38:24:6d:59:f1:56:33:5b:ce:f6:4c:
         f1:3a:49:cd:1e:fd:cc:6e:5c:9d:e0:a0:8d:73:1d:63:07:86:
         63:5f:f7:f4:bd:82:26:42:65:00:d4:83:f1:7e:55:82:2c:d5:
         84:3b:e8:6d:81:ed:50:d2:9d:d8:03:3f:a9:04:93:a2:63:a7:
         22:b0:ab:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:41:52 2025 by rpki-client