Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/sm5HHEDH1bAPSxWKKhgnT4UOdho.roa
File:                     sm5HHEDH1bAPSxWKKhgnT4UOdho.roa (raw, json)
Hash identifier:          aFUg0kqA836ZLBjvOIKkpaY5Uhm+C0WHrkFTNESI/Nc=
Subject key identifier:   B2:6E:47:1C:40:C7:D5:B0:0F:4B:15:8A:2A:18:27:4F:85:0E:76:1A
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0DFB
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/sm5HHEDH1bAPSxWKKhgnT4UOdho.roa
Signing time:             Tue 01 Apr 2025 02:29:11 +0000
ROA not before:           Tue 01 Apr 2025 02:29:11 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     9605
IP address blocks:        49.106.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3579 (0xdfb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr  1 02:29:11 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=B26E471C40C7D5B00F4B158A2A18274F850E761A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:6d:5f:d8:9a:df:ad:d8:fd:73:6b:4d:91:c9:
                    58:ac:ba:0c:72:bf:1c:ef:77:25:5b:ff:d9:73:1d:
                    5e:10:78:24:0f:3a:f3:4d:7b:c2:34:87:88:13:e6:
                    36:4d:1d:f3:44:50:04:95:24:9c:80:26:5f:68:fe:
                    27:05:ac:9c:75:c6:7d:4b:6c:ec:69:3b:84:5a:77:
                    0d:08:39:21:0c:e1:ec:78:66:b0:67:19:5b:44:bf:
                    b2:c3:ee:36:03:de:7e:6f:5c:47:0e:66:0b:95:46:
                    5e:d4:af:72:34:bc:14:6f:cc:ba:2b:30:18:81:a7:
                    5c:6d:23:b7:f5:7a:74:1c:35:41:c4:d2:8f:f1:a4:
                    c4:b4:44:a2:76:19:a2:a6:63:26:c4:74:d5:9e:af:
                    f8:f5:06:16:aa:f9:23:09:a8:af:b2:b3:12:c8:8f:
                    01:ca:61:e1:99:5d:5e:05:72:e2:87:ba:f7:6b:4b:
                    b3:36:b8:89:4f:c7:9a:03:b9:4a:f1:4d:e5:73:09:
                    a1:97:74:6e:ca:a4:e2:8c:98:b6:45:00:1f:ed:20:
                    2c:f1:d5:2f:62:d1:6d:1b:c4:91:2e:7d:29:40:fc:
                    3c:32:20:bb:e7:10:a4:a6:e3:c1:35:07:48:71:a5:
                    c3:bc:35:9e:71:ce:49:0f:af:2d:b2:35:c4:59:e2:
                    40:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:6E:47:1C:40:C7:D5:B0:0F:4B:15:8A:2A:18:27:4F:85:0E:76:1A
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/sm5HHEDH1bAPSxWKKhgnT4UOdho.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.106.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:e1:ff:65:4a:b3:53:f4:78:8d:cf:06:0e:0d:21:19:b9:31:
         42:5d:19:8d:03:88:1f:2d:c4:06:68:7d:b5:e3:ec:07:3e:10:
         ff:5d:c3:b1:ad:10:53:57:a3:7f:73:00:a1:51:ac:b6:cd:60:
         d1:80:5f:1f:bf:8f:30:b9:8f:f5:44:fd:1c:29:3e:20:df:b3:
         5e:b6:7d:f4:ae:f5:9e:63:91:9c:95:ec:a3:ef:86:f9:2b:6c:
         94:d5:0b:37:3a:b5:c5:64:db:98:1e:42:ec:00:78:10:3b:9a:
         a6:2c:a6:68:a4:ea:65:8d:91:b8:19:80:30:03:72:6c:aa:53:
         2a:d9:44:a1:01:94:36:e1:69:67:dc:b2:11:22:c7:12:4d:89:
         ac:66:3a:22:db:1b:14:4e:a9:61:85:71:77:fc:b6:4e:b0:df:
         6d:d0:9a:2b:08:b7:83:df:6d:df:68:42:12:4d:5c:bc:35:2e:
         1a:63:aa:fd:8a:4b:e1:70:8b:a3:7e:e0:d8:9e:9c:82:43:8e:
         63:9a:fc:d1:b4:1f:43:a2:b9:a5:5f:82:5f:31:2e:e2:77:ec:
         9a:52:76:e4:f9:3a:9e:da:93:51:42:0a:d9:b5:e8:51:2e:40:
         84:8c:57:d4:93:dc:a2:fd:5c:b9:5e:23:44:60:39:13:e6:ea:
         2b:ea:a5:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:18:11 2025 by rpki-client