Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/7MXuL6fCSiblFqvwkjTlK7wIHHg.roa
File:                     7MXuL6fCSiblFqvwkjTlK7wIHHg.roa (raw, json)
Hash identifier:          342F77djypb7Ji3QmPbC2RgecxGoXlQCDuKJDChjXcc=
Subject key identifier:   EC:C5:EE:2F:A7:C2:4A:26:E5:16:AB:F0:92:34:E5:2B:BC:08:1C:78
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0FD5
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/7MXuL6fCSiblFqvwkjTlK7wIHHg.roa
Signing time:             Wed 03 Sep 2025 08:54:29 +0000
ROA not before:           Wed 03 Sep 2025 08:54:29 +0000
ROA not after:            Sat 15 Aug 2026 01:30:02 +0000
asID:                     9605
IP address blocks:        49.96.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Sep 2025 02:20:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4053 (0xfd5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Sep  3 08:54:29 2025 GMT
            Not After : Aug 15 01:30:02 2026 GMT
        Subject: CN=ECC5EE2FA7C24A26E516ABF09234E52BBC081C78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:f4:5b:fa:cf:a5:7e:23:28:2f:b0:08:a3:72:
                    89:4c:c0:3b:9c:44:45:5e:3f:5d:38:6d:4c:59:1d:
                    ec:79:76:c0:06:7a:37:63:d3:f1:20:f4:48:85:c5:
                    9f:eb:f5:c7:71:d5:f4:d3:32:b6:b6:4a:f2:3c:70:
                    d8:75:9e:b6:27:27:87:a6:8e:21:45:4c:af:ef:71:
                    a2:a4:ad:24:1b:f2:eb:9c:5c:0e:75:db:f0:a4:a5:
                    63:9b:ef:e1:ef:9e:4d:34:34:7e:5e:aa:cf:b0:f8:
                    66:5b:fe:9e:c4:65:dd:df:78:27:9a:e1:6b:0a:d3:
                    9f:8b:6e:01:52:72:7d:9a:62:e5:ef:09:5e:5a:bf:
                    2e:df:08:a5:d9:7b:44:c6:e2:d4:4a:0c:41:45:01:
                    eb:6d:2f:66:bc:7d:34:bf:ee:26:7f:dc:ca:f0:b1:
                    b8:6f:dc:58:c0:ee:15:5d:29:93:1b:54:4b:82:e8:
                    fc:54:d8:db:f8:8a:bc:d1:a3:af:92:85:24:07:70:
                    b7:30:54:e6:ba:19:7a:50:dc:23:c6:f7:58:c6:84:
                    6f:79:ed:28:cc:f9:64:c1:b3:f7:5a:69:7f:06:3f:
                    51:bd:36:99:d6:22:f8:93:2d:18:2d:75:c2:d5:00:
                    e2:5b:71:90:c0:c7:c7:c1:c5:36:3e:a3:6a:44:75:
                    59:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:C5:EE:2F:A7:C2:4A:26:E5:16:AB:F0:92:34:E5:2B:BC:08:1C:78
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/7MXuL6fCSiblFqvwkjTlK7wIHHg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.96.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:07:6a:aa:3f:88:a4:97:f4:1a:93:36:f5:bb:7e:99:31:72:
         5b:44:e0:eb:51:83:9a:53:fb:9f:81:3c:2a:1d:6c:3d:ce:ae:
         ab:54:7e:dc:8e:c5:e0:97:7b:b2:0a:f7:f0:50:50:20:f6:57:
         52:c3:46:7a:5f:5a:a4:89:ab:8d:ca:03:ef:0d:85:33:be:ab:
         e8:ed:d2:99:0c:22:05:ad:4e:11:43:56:94:38:7d:0d:cd:27:
         50:08:e7:28:49:b2:bc:5f:d8:20:72:87:4f:61:e7:a1:c4:06:
         76:5e:fa:87:f4:3f:28:d7:69:a1:5c:07:33:8f:08:3e:b8:d8:
         67:25:98:80:ba:b0:0f:1c:6d:6c:e4:b3:d5:4f:b1:59:40:12:
         7a:76:dd:92:a4:27:ab:29:b6:36:47:32:3e:04:8b:39:c4:a3:
         30:99:d5:fd:a5:95:cc:c3:3e:09:9c:a6:98:06:b9:c2:74:e0:
         9c:1d:d4:4c:4e:ec:b5:e2:26:b3:9e:65:fa:2b:75:2c:ab:f3:
         37:f6:d1:58:b1:02:47:9c:e2:37:96:e0:48:67:15:1f:78:07:
         c9:b8:40:83:39:ca:4a:45:bc:01:4d:f4:3d:dd:99:f2:9d:bf:
         aa:d1:96:36:47:e6:a9:a9:61:26:62:6c:a2:bb:e0:21:18:bf:
         45:cc:9c:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 03:34:36 2025 by rpki-client