Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/SIGWK4IA39r3GYIQY7cSCSyuA1c.roa
File:                     SIGWK4IA39r3GYIQY7cSCSyuA1c.roa (raw, json)
Hash identifier:          gxRjZYY5OivndrQq6R9iEJ+E6UlzyUGQZgU2ERbqXKs=
Subject key identifier:   48:81:96:2B:82:00:DF:DA:F7:19:82:10:63:B7:12:09:2C:AE:03:57
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0D8E
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/SIGWK4IA39r3GYIQY7cSCSyuA1c.roa
Signing time:             Tue 01 Apr 2025 02:21:33 +0000
ROA not before:           Tue 01 Apr 2025 02:21:33 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     9605
IP address blocks:        49.98.212.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3470 (0xd8e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr  1 02:21:33 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=4881962B8200DFDAF719821063B712092CAE0357
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:86:6f:72:6c:49:2c:e2:d2:a6:e1:20:11:b9:
                    1b:a4:c3:47:26:71:f6:8f:c8:fc:c0:5c:45:68:21:
                    e9:c0:48:02:25:3e:47:c0:a1:8b:10:e5:31:7f:ac:
                    93:1c:b3:26:aa:b1:95:92:61:d8:db:3e:3c:c8:12:
                    36:e8:a8:3c:32:a2:22:13:35:7c:66:67:52:1f:b4:
                    8d:2b:44:f7:29:66:21:ed:a2:71:b5:2f:5b:60:69:
                    dd:e5:0f:9d:3a:f4:0d:2a:80:98:35:80:bb:c4:d0:
                    d1:87:5b:d3:2a:3f:8b:1a:e2:61:a2:23:90:67:83:
                    53:93:ff:8b:17:f3:3d:84:95:d6:cb:4b:af:29:39:
                    ff:c4:b3:4b:ba:f3:69:82:34:d7:90:8f:b5:92:a9:
                    47:35:ec:81:46:96:ad:1e:3e:52:de:81:ae:94:f4:
                    57:26:6a:59:8b:37:b9:ba:0f:d6:92:27:cd:00:ba:
                    82:8b:55:27:f1:88:dd:9d:1b:40:0c:48:14:4a:a3:
                    38:81:fe:19:ba:19:dc:3d:2d:84:1a:6f:ab:76:ee:
                    17:f2:bc:c1:30:d3:50:bf:1d:56:cd:b8:e3:b1:80:
                    78:d2:a3:fe:aa:c8:78:ea:ae:1b:11:a4:22:f5:ed:
                    b2:5c:90:28:4f:24:22:d9:19:d9:f6:33:f1:4a:c3:
                    32:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:81:96:2B:82:00:DF:DA:F7:19:82:10:63:B7:12:09:2C:AE:03:57
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/SIGWK4IA39r3GYIQY7cSCSyuA1c.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.98.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1c:f9:ae:05:b8:37:97:4c:b4:77:a1:af:2d:48:63:a4:a9:5d:
         71:81:60:0d:d8:bc:60:7f:0f:ba:3e:3a:c1:6f:eb:3c:dd:02:
         6b:6e:c4:6b:8c:45:60:c1:73:4f:6d:5b:31:27:d3:68:2f:41:
         a9:e1:c9:13:a2:91:6d:91:dd:15:15:32:ce:3d:aa:28:16:b7:
         ab:a5:3d:b4:b2:e3:ad:c3:03:59:b1:a5:ed:4c:a1:20:62:f8:
         0d:7f:ba:dd:9f:44:f0:55:77:39:24:b0:08:bf:33:9f:1e:3e:
         f7:29:6c:3a:8b:b7:2e:9e:b7:63:6b:da:e7:81:00:e0:5a:1a:
         63:5d:16:62:09:f6:3a:f5:31:0a:82:32:3b:72:14:d7:e8:bd:
         04:73:a8:07:79:36:d0:0f:27:92:a6:06:77:e6:98:14:2c:56:
         6e:03:cd:70:e9:f6:09:07:fa:0b:fa:75:b8:01:e9:98:22:b4:
         89:7f:e6:42:9c:00:ff:a1:90:3d:61:8b:ea:0d:0f:f0:a9:f7:
         85:90:66:c2:ba:64:78:bc:56:e2:12:3b:85:ee:03:80:f4:66:
         15:1b:8e:0c:d3:2d:38:f0:90:ea:28:86:93:19:df:27:66:0f:
         54:e2:64:ee:b4:e0:84:bd:6d:d0:e2:25:d3:bd:db:3c:55:7d:
         7d:fd:f5:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:35:12 2025 by rpki-client