Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/DM8u2756RKeR97I9CnqqYDvhxm8.roa
File:                     DM8u2756RKeR97I9CnqqYDvhxm8.roa (raw, json)
Hash identifier:          PkMkPW5FdO+yyJfy4Yz9HQ6C9WXSEy4+/U9wroQNiVI=
Subject key identifier:   0C:CF:2E:DB:BE:7A:44:A7:91:F7:B2:3D:0A:7A:AA:60:3B:E1:C6:6F
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0FC7
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/DM8u2756RKeR97I9CnqqYDvhxm8.roa
Signing time:             Tue 01 Jul 2025 01:36:12 +0000
ROA not before:           Tue 01 Jul 2025 01:36:12 +0000
ROA not after:            Mon 15 Jun 2026 01:30:02 +0000
asID:                     9605
IP address blocks:        49.109.16.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4039 (0xfc7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jul  1 01:36:12 2025 GMT
            Not After : Jun 15 01:30:02 2026 GMT
        Subject: CN=0CCF2EDBBE7A44A791F7B23D0A7AAA603BE1C66F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:1e:64:28:57:c7:c6:39:08:7c:86:4e:2e:02:
                    67:d8:8c:65:88:75:ad:bc:1d:35:b6:3d:6f:5a:86:
                    ac:9c:cc:39:9b:15:a4:06:4c:69:32:52:0c:68:d8:
                    d6:a7:c6:d0:e3:25:95:fc:c1:bc:ae:48:9d:11:d2:
                    0f:65:8a:5b:a7:66:9a:94:e6:d8:4a:0b:91:45:21:
                    5d:f1:37:8e:04:08:89:22:07:fd:8e:eb:97:e0:57:
                    63:6f:d0:75:97:33:54:3e:3e:ee:85:0f:8e:69:e4:
                    b6:bc:99:f2:fc:09:75:32:27:e0:bb:0b:d1:5b:b2:
                    38:31:b5:6e:b3:6c:fc:8d:a4:96:4c:e1:dd:92:fc:
                    ee:c4:19:52:83:16:04:c4:e2:a1:ae:7c:9c:2f:10:
                    e6:40:24:cc:aa:fa:c2:4d:f4:29:b8:c3:00:ca:bb:
                    8a:bf:3d:b2:9c:bd:63:e9:25:fe:9c:5f:d8:4e:8a:
                    ee:c1:a6:b1:06:2a:30:78:76:ce:af:ac:a9:69:e1:
                    9a:2d:a5:cc:e6:fe:d0:d8:83:77:2b:4b:c8:9a:8b:
                    48:46:39:88:69:71:e8:ff:a2:1b:78:e1:14:a5:d7:
                    12:ed:3d:2e:7c:ff:e9:93:bb:cd:d7:62:5a:cd:eb:
                    89:74:ad:f7:48:8b:e1:37:bf:8d:9b:c3:e7:b5:5e:
                    03:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:CF:2E:DB:BE:7A:44:A7:91:F7:B2:3D:0A:7A:AA:60:3B:E1:C6:6F
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/DM8u2756RKeR97I9CnqqYDvhxm8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.109.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         91:dd:61:3e:df:dd:89:72:e0:9d:c0:3c:68:1c:be:51:7e:7f:
         8a:fb:3c:30:44:84:8c:78:19:b9:b5:85:37:50:e4:3f:69:57:
         b9:e1:bd:7c:e9:e7:3f:5f:ba:3c:2f:ed:31:f0:73:f2:c3:72:
         39:86:29:39:0d:8a:dc:d3:cb:8e:9b:ae:06:a3:1a:09:11:09:
         e9:7c:36:fb:80:60:3d:b3:2a:6b:b8:2b:b1:b6:62:47:33:af:
         47:ee:e0:dc:1e:21:73:06:0a:b8:5f:ba:00:36:14:61:7f:65:
         ee:e2:66:83:64:dd:98:03:c7:cf:12:60:e1:66:86:9e:d2:78:
         12:27:2a:fa:0d:e5:bb:e1:ea:46:65:23:ae:f5:09:61:36:cf:
         70:33:92:64:1f:9a:4b:97:a7:08:5e:b6:f8:ff:f9:77:73:3a:
         1b:ec:0a:86:0e:c8:48:4c:fb:dd:12:60:74:fa:8d:d1:2f:a7:
         59:2a:36:a7:59:6d:0e:e3:20:a2:85:4b:36:69:32:1e:9b:b1:
         ae:17:23:5b:f4:1c:4f:3c:79:f9:22:e9:e2:c4:65:37:6a:af:
         c6:7b:49:c4:ed:1b:5e:a4:76:c6:e5:f3:0a:24:31:27:04:83:
         96:91:e8:7f:bc:e6:05:05:a6:f5:fb:68:5e:58:cd:18:66:3b:
         07:53:ba:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 15:51:33 2025 by rpki-client