Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/piZ4pYhMwmUzXJB0vt5Tv5wZ_t8.roa
File:                     piZ4pYhMwmUzXJB0vt5Tv5wZ_t8.roa (raw, json)
Hash identifier:          FANF/81CUKlEbqVRU6CmlydczZM5Lg5ntr4dMy3rq2M=
Subject key identifier:   A6:26:78:A5:88:4C:C2:65:33:5C:90:74:BE:DE:53:BF:9C:19:FE:DF
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0A0A
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/piZ4pYhMwmUzXJB0vt5Tv5wZ_t8.roa
Signing time:             Sun 30 Jun 2024 01:44:16 +0000
ROA not before:           Sun 30 Jun 2024 01:44:16 +0000
ROA not after:            Tue 24 Jun 2025 10:46:45 +0000
asID:                     9605
IP address blocks:        49.102.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2570 (0xa0a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun 30 01:44:16 2024 GMT
            Not After : Jun 24 10:46:45 2025 GMT
        Subject: CN=A62678A5884CC265335C9074BEDE53BF9C19FEDF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:07:90:70:2b:b5:ef:48:94:e9:09:24:ee:48:
                    6e:1a:b6:48:cc:1d:59:71:11:69:19:54:b1:d8:ba:
                    b8:30:30:ca:dd:61:ce:09:f3:b1:f0:ec:60:7c:66:
                    48:73:14:40:d2:49:75:fc:55:79:0d:0c:c8:2f:2b:
                    2c:c2:df:04:8b:e6:0c:c8:90:f9:3d:f0:74:df:c3:
                    51:93:eb:ee:e7:8b:97:b4:cf:9f:cc:74:f3:43:73:
                    5b:3b:ba:1d:f8:75:b0:1e:07:d6:24:69:5c:cd:c0:
                    0d:d3:9b:97:dd:56:6e:5d:68:d8:49:4d:9b:92:c7:
                    c7:b6:4d:97:50:43:59:a3:c6:1f:e4:a6:76:d8:49:
                    f8:10:2c:fc:e9:8b:3d:39:5f:dd:25:da:13:3b:c9:
                    fa:22:b9:3a:92:46:77:f0:30:c4:f5:11:55:c3:b9:
                    10:42:ca:ff:f4:5d:74:cf:31:ea:e0:8f:82:3b:a0:
                    1f:ff:5b:da:57:6b:e1:e8:e1:02:ef:08:4b:30:3a:
                    c9:b7:98:ec:37:f2:e8:17:ea:6e:e4:5c:99:47:cf:
                    a9:39:07:ba:34:eb:82:c8:0a:1a:d0:00:bf:a5:fb:
                    a0:b9:48:e9:81:84:d1:0c:0d:62:a0:1d:c5:e4:0b:
                    b6:54:6d:b7:90:64:06:86:f3:30:db:82:9e:c8:c1:
                    12:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:26:78:A5:88:4C:C2:65:33:5C:90:74:BE:DE:53:BF:9C:19:FE:DF
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/piZ4pYhMwmUzXJB0vt5Tv5wZ_t8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.102.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:20:b3:d3:12:64:c3:2b:c9:94:d0:4b:bf:72:c5:50:3c:ee:
         f6:08:11:20:9a:c7:e7:72:1c:2b:a1:dd:59:b6:d9:9e:eb:a1:
         8d:a5:9b:fe:c3:b4:f1:e4:2a:45:dd:c7:c1:7c:f3:4d:30:ea:
         55:bb:02:a6:c3:fe:57:00:c4:57:00:5f:87:90:24:97:d2:a7:
         9c:f8:01:32:ae:67:cf:87:06:f3:bc:9b:90:47:5b:e4:67:89:
         7c:c1:63:5e:f4:0a:47:a1:b4:18:f5:a1:be:ee:d8:83:0c:04:
         90:a8:d8:a0:33:ac:91:d4:2b:d7:3b:59:49:90:63:55:ae:e3:
         4e:80:88:1f:14:f3:ed:90:36:cc:7f:39:35:46:e3:44:2c:26:
         77:c4:72:1e:23:ec:b1:42:bb:2a:e1:58:80:0b:a0:1a:7c:bc:
         85:d6:ae:3c:4c:07:39:44:2c:4a:ee:83:bd:61:7c:20:f3:61:
         a2:ab:22:cb:c2:8e:e2:83:d8:03:8d:8b:f1:62:bd:ce:ff:93:
         f8:1a:2d:4c:f6:d2:b9:af:d9:26:52:c7:e1:c4:33:a3:cb:72:
         5d:10:ec:8f:ba:bd:e8:fd:64:8c:7d:2f:85:c6:c6:9a:88:c4:
         37:81:11:7c:77:23:a3:21:26:92:ee:c9:1d:1a:8e:6c:06:69:
         2f:2d:16:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:45:55 2025 by rpki-client