Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/M6uSRl4atdzfc4xB_k02pBpdltA.roa
File:                     M6uSRl4atdzfc4xB_k02pBpdltA.roa (raw, json)
Hash identifier:          OpfWOfAJC62oGVMhKvVkKfMaqvTH2T/AQM1bYrrungc=
Subject key identifier:   33:AB:92:46:5E:1A:B5:DC:DF:73:8C:41:FE:4D:36:A4:1A:5D:96:D0
Certificate issuer:       /CN=F89E0F15C1E20E191AAF17288F6E30FF01869A6E
Certificate serial:       62
Authority key identifier: F8:9E:0F:15:C1:E2:0E:19:1A:AF:17:28:8F:6E:30:FF:01:86:9A:6E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/M6uSRl4atdzfc4xB_k02pBpdltA.roa
Signing time:             Tue 01 Apr 2025 01:43:45 +0000
ROA not before:           Tue 01 Apr 2025 01:43:45 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     9605
IP address blocks:        148.67.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 May 2025 02:50:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 98 (0x62)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F89E0F15C1E20E191AAF17288F6E30FF01869A6E
        Validity
            Not Before: Apr  1 01:43:45 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=33AB92465E1AB5DCDF738C41FE4D36A41A5D96D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:5e:54:20:96:93:e7:2e:80:e5:b2:2b:9d:1f:
                    e5:0d:e6:14:fc:1a:fd:ea:57:fb:31:14:a5:06:56:
                    92:85:73:69:2f:01:44:e9:98:02:fb:8f:35:03:f7:
                    d3:71:1c:39:24:2e:ea:aa:87:4f:03:14:75:29:04:
                    ff:61:13:d5:04:5f:0e:31:b1:53:2b:83:2d:34:e3:
                    f5:1c:9c:22:c7:eb:f0:0b:21:19:04:28:f3:25:52:
                    bd:35:68:05:6c:b2:b7:a3:ec:a2:4b:d2:4e:f7:39:
                    1c:58:e1:e7:17:78:cf:ee:5f:ab:3a:68:59:95:c5:
                    f0:81:ee:30:9a:19:72:18:3d:2f:bb:02:dd:2b:25:
                    87:d3:9f:ee:50:df:dc:0f:71:f7:7c:86:c4:00:a9:
                    7b:19:05:21:4c:00:2b:8c:94:f7:a1:21:9d:c5:a0:
                    6a:e0:c9:dd:df:2f:77:a9:50:70:d6:4e:4d:3c:8b:
                    9e:10:d2:79:a5:dd:56:19:32:53:73:eb:f5:41:18:
                    47:9b:f2:ca:53:7d:c5:28:4d:b8:af:72:dd:d4:b2:
                    59:80:7f:c3:44:18:c6:be:72:34:ab:1e:c3:44:9c:
                    1f:30:25:b3:15:e0:20:c2:de:da:7c:48:89:bf:34:
                    5d:c1:9e:ab:e6:d1:0a:07:8c:b4:ae:5f:4e:4f:45:
                    5a:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:AB:92:46:5E:1A:B5:DC:DF:73:8C:41:FE:4D:36:A4:1A:5D:96:D0
            X509v3 Authority Key Identifier:
                keyid:F8:9E:0F:15:C1:E2:0E:19:1A:AF:17:28:8F:6E:30:FF:01:86:9A:6E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/M6uSRl4atdzfc4xB_k02pBpdltA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.67.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         69:bb:b7:1f:1a:cc:7b:3b:73:34:d8:19:ae:1d:ff:68:e3:be:
         ff:9b:4c:79:e9:07:19:87:9f:3e:2d:41:90:74:a2:44:65:a0:
         84:ae:bc:c3:db:5b:77:67:ce:3b:ba:28:f8:da:b9:17:8f:6b:
         e1:78:6e:52:cf:aa:cb:db:eb:59:f9:e5:09:d2:cc:49:02:88:
         2f:d6:4e:0a:35:2f:ef:8e:9a:e9:a6:cf:8e:9e:fa:03:53:e2:
         31:fd:5d:11:ce:dd:e9:ef:1b:47:23:0e:33:cb:7d:7b:64:1c:
         de:9c:04:fc:e8:9f:f4:2d:69:3c:3d:46:1f:3b:4d:3f:87:57:
         1c:67:af:16:e5:05:27:02:48:63:d1:65:13:c1:cb:be:f1:9d:
         ee:24:b8:38:e5:43:e3:c4:b8:62:45:8e:6a:81:a4:77:f7:9d:
         c4:ec:31:11:d3:4b:e5:22:90:f3:f1:99:b7:27:d5:5c:13:0a:
         84:50:3e:d6:6e:f2:a7:5f:42:fa:70:3d:ee:cf:6a:b7:ee:4e:
         5f:49:1e:19:c4:11:41:fa:dc:67:d3:47:22:0b:39:61:65:19:
         59:80:28:b5:ca:18:07:3e:b4:0b:e5:e4:75:0b:bd:8b:a6:07:
         5d:f3:32:70:43:8b:1a:d6:17:ed:67:b2:75:7e:7e:9c:ad:00:
         ef:ea:f0:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 07:27:47 2025 by rpki-client