Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/4RRWPZLJceRedhXYzJW0wx_WiXY.roa
File:                     4RRWPZLJceRedhXYzJW0wx_WiXY.roa (raw, json)
Hash identifier:          BMjr92lKILDbSLlJX6Jzr8blrBnpIk2FF6NDl7YUqmI=
Subject key identifier:   E1:14:56:3D:92:C9:71:E4:5E:76:15:D8:CC:95:B4:C3:1F:D6:89:76
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0EBE
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/4RRWPZLJceRedhXYzJW0wx_WiXY.roa
Signing time:             Tue 10 Jun 2025 11:04:58 +0000
ROA not before:           Tue 10 Jun 2025 11:04:58 +0000
ROA not after:            Sat 23 May 2026 09:51:00 +0000
asID:                     9605
IP address blocks:        1.74.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3774 (0xebe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun 10 11:04:58 2025 GMT
            Not After : May 23 09:51:00 2026 GMT
        Subject: CN=E114563D92C971E45E7615D8CC95B4C31FD68976
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:63:16:89:b7:90:b5:77:1e:6d:de:73:bb:4e:
                    8e:71:8b:47:c2:38:9d:0b:ee:92:00:4d:b5:3d:1b:
                    c5:e4:ef:d9:11:56:12:3a:c4:fe:2e:39:6c:76:48:
                    ab:ba:5d:e4:a5:16:6f:f7:a6:65:c6:07:7b:ca:9c:
                    17:a2:df:09:8b:39:61:fe:4c:5b:1d:c0:00:0a:46:
                    a9:ec:95:dd:97:20:c4:70:43:e3:99:2c:19:c1:bf:
                    4f:4d:19:cc:5e:0a:6a:5f:76:34:5c:92:e1:b8:43:
                    5d:7c:41:7c:cc:db:14:57:20:51:16:7f:f6:4c:95:
                    70:47:f0:34:25:1d:f2:20:0d:93:a6:07:a8:11:a3:
                    ae:10:08:12:48:23:f5:13:59:52:ce:12:cd:0f:4f:
                    51:aa:e3:b7:22:12:f7:7f:0f:72:2f:a6:32:2e:9f:
                    f1:2e:46:cd:ce:f7:0c:54:43:c9:37:c3:fd:2c:42:
                    ba:39:ed:20:e2:bc:c7:82:98:c2:93:00:9b:b8:c9:
                    b8:e7:9c:8c:b0:bf:2e:5e:0a:3d:74:62:64:cd:26:
                    5a:88:98:6e:58:20:7f:ee:fd:69:4d:de:b3:e6:c3:
                    2e:cc:d7:30:0b:a3:c5:69:8f:b8:9e:8c:b5:16:eb:
                    6b:27:68:c3:1d:b0:25:39:13:2a:79:a9:c4:29:3d:
                    f6:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:14:56:3D:92:C9:71:E4:5E:76:15:D8:CC:95:B4:C3:1F:D6:89:76
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/4RRWPZLJceRedhXYzJW0wx_WiXY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.74.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:b6:5b:6c:ec:d1:d0:0e:28:03:ce:b5:9e:29:aa:2f:1a:92:
         08:37:64:7d:97:a7:f0:05:84:8f:a8:09:8b:e9:9f:40:5e:f9:
         b4:46:21:ae:b0:96:2a:da:e4:46:7c:34:48:46:21:a6:be:a1:
         0a:2d:e3:f7:dc:a1:5f:d0:c7:fa:21:71:3d:80:ec:60:d1:69:
         ea:8c:0b:74:88:68:4c:fd:d4:73:ec:e4:a9:f2:10:8c:05:77:
         9a:a4:12:75:a2:eb:90:ff:3b:b9:d2:d4:30:49:cb:e7:1f:51:
         16:c5:c5:68:61:74:3e:b6:4c:eb:bd:db:7d:7f:94:ac:01:23:
         8f:71:69:3c:b9:34:66:6a:a8:4d:ea:29:fa:70:60:28:80:2e:
         75:46:c1:33:d4:0b:22:68:61:3c:1e:49:9e:44:78:71:72:6d:
         66:9a:45:84:54:92:ac:9a:4a:b5:60:f5:8d:c8:80:b7:61:8b:
         d7:d6:5d:aa:24:a0:5a:93:5a:c9:1b:9b:df:c3:c3:71:50:e7:
         8a:23:9b:bc:f1:f9:77:af:ae:58:d4:82:a7:d2:73:13:5e:06:
         75:be:b0:6c:0c:f8:57:64:67:53:6e:86:bc:3f:fe:25:54:d7:
         e5:e4:98:de:09:71:a1:17:f5:4a:18:33:43:a7:ec:a6:c3:89:
         fb:02:04:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 12:24:29 2025 by rpki-client