Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/VwhyL9R7UJ1R3Ju0nqEfVrnjbOU.roa
File:                     VwhyL9R7UJ1R3Ju0nqEfVrnjbOU.roa (raw, json)
Hash identifier:          D4DsC4ARzlo9SacGHyPapEPTbXXTMYoYVGbopXmoS4w=
Subject key identifier:   57:08:72:2F:D4:7B:50:9D:51:DC:9B:B4:9E:A1:1F:56:B9:E3:6C:E5
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0C17
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/VwhyL9R7UJ1R3Ju0nqEfVrnjbOU.roa
Signing time:             Tue 01 Apr 2025 01:51:38 +0000
ROA not before:           Tue 01 Apr 2025 01:51:38 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     9605
IP address blocks:        219.114.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3095 (0xc17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr  1 01:51:38 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=5708722FD47B509D51DC9BB49EA11F56B9E36CE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:85:48:83:1d:24:00:9f:03:b2:71:33:ef:24:
                    34:79:b1:49:c3:57:e5:ac:7a:9a:b5:73:53:a3:b8:
                    b6:18:46:cb:4b:73:6b:8c:b5:f0:70:bd:1e:59:00:
                    8d:b6:d0:7d:d0:1a:5c:8c:02:06:cf:cb:41:5a:a7:
                    f8:26:6a:b2:99:4e:a0:0f:3e:8f:21:66:d0:19:0f:
                    c4:2c:f2:52:9f:60:a9:48:1d:fe:e2:fa:ff:c2:28:
                    41:dc:13:0a:f0:cc:46:f7:f8:f9:d5:64:1f:1c:41:
                    8b:7e:2c:9f:df:47:68:79:61:13:30:c1:4e:5b:f7:
                    52:29:d2:44:7c:5b:90:09:3d:00:ee:9c:71:a0:4b:
                    aa:01:f6:b2:17:b6:52:12:93:b6:94:33:ba:46:1c:
                    9b:97:90:a3:38:50:ed:27:c0:ea:e4:fb:2e:57:f0:
                    68:cc:3d:6e:fa:4b:74:1e:25:e7:56:1d:4b:2d:e0:
                    15:8d:ea:a2:6b:a1:6d:f7:ac:8e:5e:b8:45:6f:13:
                    7b:c9:c6:70:33:86:25:02:03:25:f6:25:f2:75:41:
                    1d:92:15:2f:e2:02:3d:b3:79:31:cd:72:80:69:2b:
                    e3:f1:c5:d6:96:cc:48:37:54:a8:64:a7:e0:04:63:
                    5a:d6:2e:51:c0:f8:de:75:05:84:68:69:c5:9f:df:
                    22:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:08:72:2F:D4:7B:50:9D:51:DC:9B:B4:9E:A1:1F:56:B9:E3:6C:E5
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/VwhyL9R7UJ1R3Ju0nqEfVrnjbOU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.114.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ce:03:96:ea:63:b8:3b:d3:21:07:8b:f3:60:74:e8:ae:c1:77:
         d8:97:e8:f9:82:01:d3:16:11:97:48:73:22:a1:83:21:fc:2e:
         69:df:f0:3d:06:57:d6:b4:05:02:8c:d0:e4:22:c9:d6:35:0d:
         7a:10:46:3d:40:77:67:14:cf:f0:aa:01:76:6d:c5:54:50:1a:
         7f:a0:ad:86:6a:4f:38:08:86:4c:22:ac:db:79:7d:d6:cd:d2:
         c2:5c:c2:e2:f1:9c:44:b1:e7:56:c1:ef:9d:65:26:48:51:32:
         c8:a5:55:ee:93:70:0d:53:e2:3e:89:63:82:59:a9:e5:85:22:
         f1:90:51:ac:05:35:b9:0b:65:fb:54:a6:c1:1c:2d:17:e8:5d:
         11:f0:d7:0a:71:72:1a:4c:97:39:33:c3:5e:e4:4e:50:38:1a:
         d9:61:69:dd:db:dc:7b:37:9e:d7:27:d3:d4:03:09:04:f6:d5:
         21:8e:1c:ab:0c:75:f1:88:61:42:0b:b0:51:dd:e2:19:42:15:
         54:88:8b:cd:ea:a8:b5:25:9c:a0:8f:d8:ce:b5:42:a3:76:d7:
         6a:a5:c7:3c:60:43:29:d2:11:fe:04:df:ed:6a:6b:a6:be:31:
         08:f3:75:72:ea:5f:1e:1a:44:39:96:ff:7d:7f:54:a9:33:22:
         da:d3:04:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:28:10 2025 by rpki-client