Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/aqr0qBOFpW47lNs9KtQvYmy6mcc.roa
File:                     aqr0qBOFpW47lNs9KtQvYmy6mcc.roa (raw, json)
Hash identifier:          QdhXOOTRAAxIOtNiFWtP2Ks+FiTGLR0ZRFk8t6NEVNU=
Subject key identifier:   6A:AA:F4:A8:13:85:A5:6E:3B:94:DB:3D:2A:D4:2F:62:6C:BA:99:C7
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0B57
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aqr0qBOFpW47lNs9KtQvYmy6mcc.roa
Signing time:             Tue 01 Apr 2025 01:33:20 +0000
ROA not before:           Tue 01 Apr 2025 01:33:20 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     9605
IP address blocks:        183.74.248.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2903 (0xb57)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr  1 01:33:20 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=6AAAF4A81385A56E3B94DB3D2AD42F626CBA99C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:73:7b:44:00:88:5d:63:62:63:18:db:77:dc:
                    18:02:2b:3d:5c:41:d6:5d:41:9a:c5:58:93:b4:e0:
                    5f:13:51:8d:d9:99:18:87:0f:ca:98:a0:d6:9e:8b:
                    26:c7:b4:46:b6:48:85:ac:93:c4:a8:d1:19:9c:5d:
                    7c:bc:1a:0e:10:7e:5e:ac:f9:fe:07:15:f0:8c:0e:
                    d4:5d:40:06:3b:42:b1:0d:32:a7:ed:5d:cb:35:6e:
                    8f:82:2f:29:22:99:38:ae:08:69:38:ab:41:02:ea:
                    48:56:45:13:32:20:41:ad:c1:48:17:d1:6b:42:c1:
                    3e:55:2a:3d:be:1d:3e:72:04:a6:fe:ca:91:75:21:
                    9f:4f:64:fa:ef:96:bf:c8:79:8b:ab:32:60:64:e2:
                    5e:82:d8:fd:29:51:78:72:46:04:e8:d4:34:f6:6d:
                    f1:e7:6b:6d:97:04:a5:a9:87:90:93:2e:1b:cc:5b:
                    5c:f2:b1:4c:d8:9b:aa:71:58:81:dc:b3:df:2e:ab:
                    e4:46:fc:a2:57:8d:81:28:4e:49:69:6c:3c:53:fb:
                    96:a2:bc:99:94:4c:f7:84:c0:fc:9e:23:d9:53:3a:
                    b4:cf:f6:03:c8:a6:c8:11:b7:90:a5:7d:ef:9a:27:
                    e8:44:fe:c6:05:da:95:c0:75:22:31:4f:9e:9b:21:
                    71:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:AA:F4:A8:13:85:A5:6E:3B:94:DB:3D:2A:D4:2F:62:6C:BA:99:C7
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aqr0qBOFpW47lNs9KtQvYmy6mcc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.74.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         48:f3:4e:54:b2:8c:4c:a7:dc:a6:e2:6e:ab:c3:04:77:f2:ae:
         00:ec:df:35:c2:e7:aa:bf:27:5b:83:98:86:44:71:41:95:02:
         80:98:fe:2d:d3:97:84:eb:64:2e:cd:dc:33:a5:0b:e7:f5:7e:
         ff:95:c0:f3:81:a7:c2:34:c6:b0:fb:f3:10:38:39:c1:51:d2:
         dc:86:f1:c8:f6:28:6a:ec:02:50:1f:61:60:15:d2:2d:7d:cf:
         6b:89:f2:d0:f5:c2:1b:e7:43:2d:a6:a6:65:3a:9d:df:fe:2a:
         b2:01:97:92:cc:8e:e4:c2:45:c3:14:28:62:a6:a7:d9:16:ad:
         81:de:87:b2:31:7b:54:ee:83:b6:6b:19:83:6d:78:8a:c5:1c:
         4b:33:5c:98:a8:f8:fc:b6:0a:a4:fe:fe:7a:8d:37:2d:f7:1f:
         c8:fd:79:5d:57:db:cb:13:69:ce:6e:c8:75:09:91:5e:c2:d9:
         fc:73:79:bb:4f:f5:d9:ec:7f:9a:91:a6:96:97:6f:37:32:bd:
         4f:c3:01:64:4a:ee:50:bb:44:cf:71:a5:d3:14:e7:f2:5c:2e:
         61:31:59:6e:75:fe:81:06:d0:21:6f:72:3c:3b:b1:83:c1:a1:
         e0:8b:21:6d:74:91:ad:38:45:d2:5c:a5:38:a1:9e:87:5f:c1:
         4a:fd:96:89
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICC1cwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw
MTMzMjBaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDZBQUFGNEE4MTM4NUE1
NkUzQjk0REIzRDJBRDQyRjYyNkNCQTk5QzcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC+c3tEAIhdY2JjGNt33BgCKz1cQdZdQZrFWJO04F8TUY3ZmRiH
D8qYoNaeiybHtEa2SIWsk8So0RmcXXy8Gg4Qfl6s+f4HFfCMDtRdQAY7QrENMqft
Xcs1bo+CLykimTiuCGk4q0EC6khWRRMyIEGtwUgX0WtCwT5VKj2+HT5yBKb+ypF1
IZ9PZPrvlr/IeYurMmBk4l6C2P0pUXhyRgTo1DT2bfHna22XBKWph5CTLhvMW1zy
sUzYm6pxWIHcs98uq+RG/KJXjYEoTklpbDxT+5aivJmUTPeEwPyeI9lTOrTP9gPI
psgRt5Clfe+aJ+hE/sYF2pXAdSIxT56bIXFpAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUaqr0qBOFpW47lNs9KtQvYmy6mccwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L2FxcjBxQk9GcFc0N2xOczlLdFF2WW15Nm1jYy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAK3SvgwDQYJKoZIhvcNAQELBQADggEBAEjzTlSyjEyn3KbibqvDBHfyrgDs
3zXC56q/J1uDmIZEcUGVAoCY/i3Tl4TrZC7N3DOlC+f1fv+VwPOBp8I0xrD78xA4
OcFR0tyG8cj2KGrsAlAfYWAV0i19z2uJ8tD1whvnQy2mpmU6nd/+KrIBl5LMjuTC
RcMUKGKmp9kWrYHeh7Ixe1Tug7ZrGYNteIrFHEszXJio+Py2CqT+/nqNNy33H8j9
eV1X28sTac5uyHUJkV7C2fxzebtP9dnsf5qRppaXbzcyvU/DAWRK7lC7RM9xpdMU
5/JcLmExWW51/oEG0CFvcjw7sYPBoeCLIW10ka04RdJcpTihnodfwUr9lok=
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:48:06 2025 by rpki-client