Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/d3-T4wa9pKqA2nQ_t1j2qEgQnQQ.roa
File:                     d3-T4wa9pKqA2nQ_t1j2qEgQnQQ.roa (raw, json)
Hash identifier:          cXGiHhm1UGkYa0swjl/jA/+utbV41cIFDx8L3vertrs=
Subject key identifier:   77:7F:93:E3:06:BD:A4:AA:80:DA:74:3F:B7:58:F6:A8:48:10:9D:04
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0E35
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/d3-T4wa9pKqA2nQ_t1j2qEgQnQQ.roa
Signing time:             Tue 01 Apr 2025 02:33:36 +0000
ROA not before:           Tue 01 Apr 2025 02:33:36 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     9605
IP address blocks:        183.75.206.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3637 (0xe35)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr  1 02:33:36 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=777F93E306BDA4AA80DA743FB758F6A848109D04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:66:c3:ed:d3:a2:46:71:c7:91:89:f6:6f:08:
                    34:76:31:34:dc:43:69:06:30:a5:09:94:96:d6:11:
                    6f:d3:76:11:3b:19:df:31:c6:99:47:6e:0c:dc:94:
                    7f:c8:b6:57:2f:05:ed:bc:25:df:e9:da:f2:3f:ec:
                    12:8f:f9:84:9f:3a:51:40:28:df:41:86:74:37:f5:
                    24:d7:6f:9e:62:2e:79:a9:96:f7:04:da:ee:84:cd:
                    31:16:86:d6:c3:d6:1e:43:a5:a9:ee:b7:67:de:42:
                    fa:84:44:d0:5a:38:5d:b0:b0:1a:58:e3:0c:8b:bf:
                    95:1c:fc:33:e2:2a:06:a0:f1:68:16:aa:77:b6:6e:
                    be:71:c5:fe:44:8f:35:20:61:f3:64:21:c2:9a:fa:
                    4c:94:a5:7b:82:db:e7:30:9f:a2:5b:48:16:59:4d:
                    a4:4a:3f:f5:43:a2:d3:7c:f2:fa:2d:e6:60:25:35:
                    ab:a4:e8:c1:11:31:df:49:98:95:87:25:4c:c8:64:
                    e4:f9:06:e4:0f:ba:e4:ab:83:06:62:9e:77:e3:2e:
                    59:cd:77:76:91:e1:1f:7a:06:7f:25:f8:3b:31:1c:
                    10:6c:3e:e2:84:89:c9:fa:54:03:ca:0e:18:20:12:
                    87:3b:b4:30:39:3a:0e:56:3a:30:d3:af:5b:0b:7e:
                    2e:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:7F:93:E3:06:BD:A4:AA:80:DA:74:3F:B7:58:F6:A8:48:10:9D:04
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/d3-T4wa9pKqA2nQ_t1j2qEgQnQQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.75.206.0/23

    Signature Algorithm: sha256WithRSAEncryption
         28:ea:7b:90:b2:e3:f9:eb:38:70:fd:5d:14:5e:af:3c:03:dd:
         ca:a6:7e:77:1c:98:8a:d1:e0:86:e2:13:87:d6:cb:85:a8:03:
         1e:01:af:2b:64:63:f5:9e:88:fc:7f:e9:f2:48:eb:6b:bc:88:
         da:4c:47:e7:54:31:7f:a4:50:a2:9c:d6:4b:18:99:c8:27:9c:
         7a:e9:12:5d:be:53:86:2c:3a:2b:10:58:af:74:9b:1b:33:21:
         0c:29:db:20:87:75:29:94:47:16:45:0c:a4:91:bf:e9:b3:09:
         65:f2:1d:2e:aa:a8:f9:61:55:6c:21:da:95:72:47:fa:0f:eb:
         3d:e0:f5:b6:61:99:11:67:03:43:ef:88:80:d9:bd:9b:da:84:
         de:5f:12:29:0d:21:20:b0:66:6b:d5:35:00:32:5d:51:73:86:
         41:74:a4:c2:8a:fa:5e:db:b4:89:50:76:66:57:95:57:21:87:
         bd:9b:b3:97:1d:91:92:ee:70:8f:c9:38:2c:b4:70:a7:82:ca:
         78:58:db:ec:6e:4f:67:26:90:93:bd:7d:ff:cc:74:cb:07:34:
         9c:b6:23:29:a6:53:5b:2c:d1:09:f1:9b:6f:8a:b0:fb:2c:d1:
         89:98:24:7d:3f:a7:6b:b0:f3:48:a1:40:4d:a6:04:b6:b8:4b:
         a6:12:5c:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:10:55 2025 by rpki-client