Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Y6eE6XaLMOHVKGzNcHCFjpYunEY.roa
File:                     Y6eE6XaLMOHVKGzNcHCFjpYunEY.roa (raw, json)
Hash identifier:          2T9r/AzUNwZZnsgthhhSPBI9pQMYign4UuM9h3wMK8c=
Subject key identifier:   63:A7:84:E9:76:8B:30:E1:D5:28:6C:CD:70:70:85:8E:96:2E:9C:46
Certificate issuer:       /CN=F89E0F15C1E20E191AAF17288F6E30FF01869A6E
Certificate serial:       51
Authority key identifier: F8:9E:0F:15:C1:E2:0E:19:1A:AF:17:28:8F:6E:30:FF:01:86:9A:6E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Y6eE6XaLMOHVKGzNcHCFjpYunEY.roa
Signing time:             Sun 30 Jun 2024 01:46:26 +0000
ROA not before:           Sun 30 Jun 2024 01:46:26 +0000
ROA not after:            Tue 24 Jun 2025 10:46:45 +0000
asID:                     9605
IP address blocks:        146.99.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 81 (0x51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F89E0F15C1E20E191AAF17288F6E30FF01869A6E
        Validity
            Not Before: Jun 30 01:46:26 2024 GMT
            Not After : Jun 24 10:46:45 2025 GMT
        Subject: CN=63A784E9768B30E1D5286CCD7070858E962E9C46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:75:64:5c:f7:9c:eb:d7:7f:b8:3f:be:cf:93:
                    3d:05:5b:f0:8a:18:f8:e6:ba:fe:2a:d2:c6:0f:ef:
                    c2:c7:16:1c:be:6d:ee:8b:f9:80:5e:e8:54:28:db:
                    23:39:a6:81:f5:ac:2d:9a:64:fd:a7:51:bd:01:35:
                    c3:3b:63:05:6e:a7:63:93:8f:ca:95:45:24:e4:6b:
                    df:cc:c7:06:d2:9e:eb:c1:f6:70:38:a1:bb:7c:90:
                    3d:b7:1c:fd:a1:71:4b:0b:07:b5:1e:22:20:42:85:
                    d4:0a:46:36:8b:fd:68:54:92:71:47:57:c6:3c:39:
                    72:e9:2c:a5:de:8f:4e:7d:3c:90:00:76:a8:9d:95:
                    60:34:cb:0f:94:46:b5:02:c6:56:96:f1:92:ff:11:
                    29:3e:b4:82:88:f5:9b:e3:27:cb:d8:36:02:14:a2:
                    07:fa:52:cb:29:9a:13:46:27:06:eb:e3:aa:b8:af:
                    23:3f:16:91:3f:c8:20:0f:fd:3f:7d:44:df:dc:2c:
                    72:8e:6a:f2:63:1b:94:0f:8d:c8:5c:21:0e:42:26:
                    c4:90:52:01:03:7a:25:93:4f:e1:d9:b2:fa:fe:4e:
                    a5:88:f0:da:17:4c:47:da:85:31:81:a4:77:1a:9a:
                    d1:f5:96:95:86:6b:c3:b5:0f:7d:a5:e9:93:e6:bf:
                    52:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:A7:84:E9:76:8B:30:E1:D5:28:6C:CD:70:70:85:8E:96:2E:9C:46
            X509v3 Authority Key Identifier:
                keyid:F8:9E:0F:15:C1:E2:0E:19:1A:AF:17:28:8F:6E:30:FF:01:86:9A:6E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Y6eE6XaLMOHVKGzNcHCFjpYunEY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.99.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         be:7a:65:27:bc:df:f3:ca:65:20:bd:66:47:49:8b:3a:37:dd:
         0a:6a:cb:4c:18:71:53:48:26:0f:0e:c7:d1:62:5d:4c:63:2e:
         4d:8e:52:99:fa:b7:3a:11:84:8f:1f:1a:f5:80:a3:3d:8b:85:
         17:54:72:c8:44:d7:20:c2:e9:0d:f8:25:8f:b6:23:07:cd:7c:
         2e:20:8e:9c:09:92:9d:bf:39:d9:bc:b5:3e:4a:65:7e:ae:5a:
         ee:2c:6a:eb:d1:64:e2:25:37:64:f1:f2:3f:b5:d6:30:b2:f2:
         08:91:d9:72:ef:8f:15:93:2d:d4:5d:2b:e7:e1:87:12:8a:d1:
         cc:50:3c:cc:39:63:d8:3b:4c:0c:17:60:75:bc:e4:f7:3d:ce:
         65:bd:7d:e2:56:46:f5:10:74:3a:09:78:b4:fc:c4:5d:3c:e6:
         23:49:56:79:ce:ff:06:01:db:fe:d6:23:d7:9e:0d:1f:1c:4e:
         51:59:cc:7d:d2:7f:c2:58:97:78:c8:b3:cb:3e:1d:c8:48:89:
         ab:f6:89:d5:7c:47:68:e5:19:f9:2e:b3:98:30:b1:d6:48:9d:
         39:e8:65:4e:2e:8a:90:11:ca:49:47:63:c7:e0:70:6f:99:f1:
         00:6e:ef:16:cd:d6:11:a2:90:84:9c:cf:33:86:3f:69:be:03:
         06:ad:6d:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:35:35 2025 by rpki-client