Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/dZv8-shTMg1hv9jK6J91L4tBGGA.roa
File:                     dZv8-shTMg1hv9jK6J91L4tBGGA.roa (raw, json)
Hash identifier:          UMoVQthux1i/OIUZjr1H+16aqYdVx/67rutSTSo/8zc=
Subject key identifier:   75:9B:FC:FA:C8:53:32:0D:61:BF:D8:CA:E8:9F:75:2F:8B:41:18:60
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0B5B
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/dZv8-shTMg1hv9jK6J91L4tBGGA.roa
Signing time:             Tue 01 Apr 2025 01:33:21 +0000
ROA not before:           Tue 01 Apr 2025 01:33:21 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     9605
IP address blocks:        49.105.74.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2907 (0xb5b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr  1 01:33:21 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=759BFCFAC853320D61BFD8CAE89F752F8B411860
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:bf:88:56:94:cc:95:67:9d:c0:b7:88:b2:6b:
                    f2:4e:5a:69:2f:99:f5:5e:39:19:76:0c:9d:1c:62:
                    50:60:3b:c9:19:3c:e5:63:2d:c9:8a:d3:2f:54:b0:
                    c1:7c:eb:b6:a9:c6:19:ad:69:99:3b:a2:39:d6:f5:
                    0c:23:73:d1:e1:fc:b1:6a:31:85:fe:32:99:c7:72:
                    4d:21:2c:ab:75:c1:7a:2b:69:31:59:30:28:bc:bf:
                    61:8d:24:64:4a:54:84:52:22:81:6c:66:2e:e9:07:
                    ed:f7:fd:f9:66:5c:ba:2e:95:d9:2c:7a:65:87:9c:
                    bc:41:57:0b:a8:a3:5f:da:4f:f1:04:4e:73:a1:e7:
                    91:7a:6b:95:d6:63:6b:9b:c3:68:42:15:e9:c9:f1:
                    af:b0:d9:78:fa:d9:ad:b8:84:48:5f:f5:7f:64:db:
                    1a:c4:b2:fe:07:b8:4b:37:3d:f4:d7:37:73:5a:60:
                    4b:46:68:a2:39:a1:14:6e:b0:9d:cd:c8:4b:d4:d5:
                    87:cc:a8:c5:f0:6d:d1:94:2c:a5:74:88:d2:d3:a2:
                    13:46:f0:05:5e:d8:b6:c2:46:bb:fa:c9:fe:0f:70:
                    ee:67:69:07:69:b0:75:e1:1a:7f:e3:8b:39:06:6e:
                    14:1e:b0:02:1f:48:cc:2f:7b:74:20:30:02:51:06:
                    c8:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:9B:FC:FA:C8:53:32:0D:61:BF:D8:CA:E8:9F:75:2F:8B:41:18:60
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/dZv8-shTMg1hv9jK6J91L4tBGGA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.105.74.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7d:81:41:2d:09:2c:fe:9c:e4:96:70:fc:b3:7f:fd:21:4b:06:
         88:3b:9b:10:18:e9:85:da:9f:f3:ff:5a:fb:b9:89:40:cf:06:
         96:76:45:cf:bc:5f:8c:bd:1d:7a:f8:b2:a2:33:50:ec:e4:e1:
         34:d6:f0:94:06:77:21:89:5e:2e:4b:0a:71:a5:ab:76:c0:c6:
         b0:9b:4f:50:be:80:eb:66:99:44:7d:bf:45:10:37:e2:59:8f:
         f2:2b:c9:af:08:2d:23:90:81:6e:79:95:a9:b0:ad:ac:cf:f5:
         7f:ac:19:e0:2e:ce:ea:fe:19:e2:ad:fd:be:d0:4a:81:c9:df:
         db:f8:68:2a:28:cc:ff:a8:97:9c:e1:43:58:61:df:a3:da:f5:
         4f:a9:49:a6:ad:53:58:24:20:4e:28:62:e4:e7:03:c3:3c:f8:
         51:49:13:f7:b8:ef:26:b9:f6:9b:9c:ff:21:b8:fd:c4:7d:de:
         11:93:ae:82:6f:14:43:a3:ed:d7:f1:ea:98:b6:f1:0b:65:30:
         fe:ef:34:0f:ff:df:b6:6e:fe:0f:d2:f4:89:1c:9a:48:f4:1b:
         e4:b5:a7:7b:2a:07:f3:15:e1:01:5d:19:7e:f4:b1:00:95:2b:
         be:0d:c8:25:cf:c7:76:a4:3b:2f:75:f8:c4:ea:6a:c4:07:0d:
         6c:48:5f:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:07:34 2025 by rpki-client