Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/qAoGZuwotIe7W9GxRd5gl25Zyj4.roa
File:                     qAoGZuwotIe7W9GxRd5gl25Zyj4.roa (raw, json)
Hash identifier:          R8kIdDal4ZoSskumTSmurbw42UzBeh2heeFsu3Fr5II=
Subject key identifier:   A8:0A:06:66:EC:28:B4:87:BB:5B:D1:B1:45:DE:60:97:6E:59:CA:3E
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0C31
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/qAoGZuwotIe7W9GxRd5gl25Zyj4.roa
Signing time:             Tue 01 Apr 2025 01:54:08 +0000
ROA not before:           Tue 01 Apr 2025 01:54:08 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     9605
IP address blocks:        49.98.154.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3121 (0xc31)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr  1 01:54:08 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=A80A0666EC28B487BB5BD1B145DE60976E59CA3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:cf:8e:6f:ff:06:71:ae:f1:85:05:8d:50:a8:
                    06:34:30:87:97:da:ee:c0:e3:6c:28:34:b2:af:2e:
                    0e:af:da:b2:52:02:54:d2:ff:2f:f8:1f:01:ff:12:
                    13:a6:83:9e:dc:ee:1a:3a:5e:4e:cc:00:5d:79:ca:
                    21:59:56:df:87:ba:83:91:fb:d1:33:0a:29:a1:26:
                    62:86:e1:74:21:51:da:bc:b4:ab:24:62:39:c3:cf:
                    44:02:af:ec:64:31:1e:1a:61:80:00:09:a1:02:70:
                    7c:e4:3c:00:10:38:a7:72:7b:b3:87:0f:58:3d:84:
                    8a:2a:38:ac:ed:21:ad:90:13:9f:7e:fe:c1:82:11:
                    a4:dc:fe:5a:43:82:cf:95:be:a2:4e:e4:75:89:69:
                    02:68:74:08:87:ee:a9:7e:80:cf:98:aa:1f:46:fc:
                    26:ad:4e:a2:3a:a8:fa:b1:61:75:8f:52:e4:73:08:
                    b5:b3:29:d9:03:e1:b7:52:4c:91:74:9b:1c:fe:2c:
                    a1:97:e4:39:d3:94:e7:b5:10:0a:4c:19:61:15:a8:
                    84:00:0f:a4:06:d9:fd:3f:48:3f:f8:c0:c7:5e:38:
                    cc:7b:68:27:7a:27:8a:61:a7:e2:61:d7:12:60:38:
                    9c:58:0c:27:d4:98:f3:b5:d1:f1:59:d2:0e:c4:da:
                    fc:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:0A:06:66:EC:28:B4:87:BB:5B:D1:B1:45:DE:60:97:6E:59:CA:3E
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/qAoGZuwotIe7W9GxRd5gl25Zyj4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.98.154.0/23

    Signature Algorithm: sha256WithRSAEncryption
         71:14:62:d4:14:48:47:c5:bd:b3:2e:17:87:b3:b9:be:31:c0:
         f0:b4:fd:9f:b8:37:40:f3:0b:41:e6:07:24:84:0d:57:e3:db:
         0e:82:99:0e:a1:19:a2:1e:58:c8:1d:6c:7a:3a:a9:64:ba:42:
         9e:fd:7e:13:61:3d:da:6f:09:e3:e0:5d:e4:19:8c:9a:8b:8f:
         ca:f2:c3:06:43:da:5b:c4:30:18:85:e6:b2:1d:24:ab:d7:14:
         9d:53:4b:2f:8a:ef:35:db:4d:35:f5:89:01:3c:a5:cd:cc:e5:
         17:ba:20:76:66:cd:c4:00:6e:69:3f:1c:af:be:26:c1:f5:c5:
         1d:87:f9:de:63:98:51:e8:30:fd:03:88:f5:c0:65:6c:6b:82:
         63:4e:62:06:d5:34:7e:ae:04:d5:53:17:05:ca:d5:ec:2a:cb:
         86:17:b9:85:1e:a8:c2:4a:74:9f:65:55:4c:2c:40:9b:86:c6:
         c3:3a:7c:84:4a:cf:16:ee:b2:1f:65:c4:e7:ae:38:58:e8:66:
         88:07:6d:e1:6e:fd:a2:be:88:40:51:de:7e:ff:ec:c7:85:7e:
         21:67:10:17:ae:9c:c6:e1:76:2d:e8:34:1f:96:75:e2:ae:4b:
         82:b9:0d:3f:8f:06:f5:ba:51:4d:cb:89:f3:c6:29:50:e9:f1:
         73:e2:15:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:07:47 2025 by rpki-client