Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/wCzIutlcdc5dXKg_-3rIbxmfX5M.roa
File:                     wCzIutlcdc5dXKg_-3rIbxmfX5M.roa (raw, json)
Hash identifier:          AgP/VCBKxvfbgOn6DJ7ii4pucg6lWaP3P3ZEEOy/Vy8=
Subject key identifier:   C0:2C:C8:BA:D9:5C:75:CE:5D:5C:A8:3F:FB:7A:C8:6F:19:9F:5F:93
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0D4A
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/wCzIutlcdc5dXKg_-3rIbxmfX5M.roa
Signing time:             Tue 01 Apr 2025 02:17:11 +0000
ROA not before:           Tue 01 Apr 2025 02:17:11 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     9605
IP address blocks:        1.75.196.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3402 (0xd4a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr  1 02:17:11 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=C02CC8BAD95C75CE5D5CA83FFB7AC86F199F5F93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:20:da:4e:06:cb:48:3c:92:c0:dc:2c:e7:00:
                    5a:73:5a:50:ee:d2:22:fc:2f:d7:fa:c9:83:75:78:
                    65:b0:5b:d7:ee:51:a8:40:43:1f:08:92:b8:5e:4d:
                    3b:05:b2:50:8e:d7:81:bb:28:53:e5:c4:d8:34:c7:
                    46:ae:ee:5b:a5:d5:cf:b1:6e:7d:a2:9c:17:bd:dd:
                    5f:05:9a:82:fb:ef:64:d9:d5:1e:3c:e1:95:34:15:
                    80:39:21:db:b6:b5:4d:f0:b2:c5:23:78:4f:56:d4:
                    ff:9e:64:cf:e2:4b:10:ec:de:a2:6d:1f:66:37:32:
                    29:9c:a5:86:fb:1c:e3:ff:06:6d:61:78:6b:c5:b4:
                    8e:2c:b4:e9:e8:10:53:58:94:30:51:b4:ba:12:b0:
                    f6:7e:39:f9:4a:dc:3b:92:6d:5a:94:c0:3b:07:bf:
                    03:66:44:ed:9b:2e:86:6e:87:03:d0:f5:ba:87:f7:
                    28:48:65:2b:00:fa:0b:fb:bd:6e:c4:16:08:aa:94:
                    79:3b:20:c3:d7:fa:73:bf:14:fd:0d:1a:b9:21:17:
                    cb:ae:77:7a:34:4a:08:77:60:e3:e5:28:9f:5a:54:
                    a7:04:75:85:f0:95:cf:ed:9f:09:18:45:ff:f5:fe:
                    37:af:9a:2c:68:8f:9c:69:16:c2:c3:da:ec:6e:d5:
                    11:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:2C:C8:BA:D9:5C:75:CE:5D:5C:A8:3F:FB:7A:C8:6F:19:9F:5F:93
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/wCzIutlcdc5dXKg_-3rIbxmfX5M.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.75.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4f:39:89:ca:5d:22:13:49:3b:25:20:eb:bb:9f:4b:b9:34:d5:
         cf:ea:af:10:4c:ba:a3:55:56:63:f3:8a:f5:08:ea:34:83:f8:
         76:02:fe:8a:0c:17:a4:12:77:cf:09:22:19:0e:23:be:fe:2d:
         b1:5c:42:7b:6d:bc:18:00:16:3d:a0:71:e0:f8:b8:2b:91:00:
         81:c3:aa:ae:e7:40:fe:02:e9:17:c0:4d:e3:61:98:3a:8f:fc:
         a9:f3:f6:87:67:6f:29:e4:72:14:7d:7c:6b:02:32:ce:07:dd:
         15:4b:ad:64:6d:2b:ff:b1:7b:11:4c:9a:34:0c:6e:5b:82:d2:
         c7:d4:e0:db:c6:54:f8:d7:f3:16:b9:d6:5f:39:f8:6d:55:29:
         66:96:33:da:7a:e0:cc:97:b4:34:c1:46:ba:c8:98:51:8d:bf:
         51:06:81:81:75:39:ec:71:c3:11:36:fd:c2:fc:96:72:11:91:
         53:e3:64:61:d5:14:77:6a:a1:bf:36:49:80:f7:db:b5:4b:0b:
         bc:b0:fa:b5:58:1e:5b:5a:07:1b:39:e3:e6:48:f2:16:f2:df:
         d4:4e:8d:a0:76:15:67:cb:9a:df:5a:e6:87:52:56:06:87:cf:
         e3:da:2a:e2:96:b0:ed:a6:f7:97:7e:c8:f4:21:ac:f7:db:c0:
         df:f7:2e:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:33:34 2025 by rpki-client