Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/QaeTNcubFkbUQQ_snx0drCY9ok4.roa
File:                     QaeTNcubFkbUQQ_snx0drCY9ok4.roa (raw, json)
Hash identifier:          0kknkuthB4HrTtHw4cIDEXrUkNXJAhp0JaBpk1eLLQw=
Subject key identifier:   41:A7:93:35:CB:9B:16:46:D4:41:0F:EC:9F:1D:1D:AC:26:3D:A2:4E
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0E4E
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/QaeTNcubFkbUQQ_snx0drCY9ok4.roa
Signing time:             Tue 10 Jun 2025 10:47:46 +0000
ROA not before:           Tue 10 Jun 2025 10:47:46 +0000
ROA not after:            Sat 23 May 2026 09:51:00 +0000
asID:                     9605
IP address blocks:        183.73.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3662 (0xe4e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun 10 10:47:46 2025 GMT
            Not After : May 23 09:51:00 2026 GMT
        Subject: CN=41A79335CB9B1646D4410FEC9F1D1DAC263DA24E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:08:a1:de:bf:18:6d:19:9c:a7:0e:43:6f:61:
                    fe:01:11:3d:21:67:0b:e1:3c:dc:49:51:dc:d5:a4:
                    af:83:2d:47:b3:2e:70:8f:c1:e6:49:21:a1:af:c5:
                    31:fd:7f:38:64:4c:86:d8:91:15:1e:ca:70:b2:b6:
                    87:32:3b:56:6e:c3:5f:8f:99:ca:13:db:cc:5b:b3:
                    95:bc:b2:24:77:bd:67:85:4d:4a:89:49:f2:a7:a1:
                    d7:36:f5:39:fc:ce:8f:42:bc:b1:3a:41:b0:4f:09:
                    d2:8c:ca:bc:15:73:09:1c:6a:e0:6d:56:77:34:ff:
                    95:43:51:1c:d9:ca:43:3f:2c:07:65:5c:eb:30:9c:
                    39:e3:19:67:8d:3e:b9:12:db:9e:92:08:0e:b0:43:
                    6c:d7:36:e9:1d:92:d6:08:cb:cd:55:8a:5c:92:e4:
                    9a:0e:45:f3:ae:91:5e:4a:88:ea:d9:59:4d:44:2a:
                    9b:d6:09:02:f4:bf:bb:9d:bc:84:db:d1:8a:01:4c:
                    da:37:4a:8c:c4:8a:e2:42:18:94:eb:3c:1b:b5:68:
                    fc:6f:db:e0:35:97:67:94:24:65:eb:85:e0:e8:27:
                    86:46:52:b9:b7:c2:96:a7:0a:7c:82:e4:d3:0b:0f:
                    32:af:89:db:88:45:82:64:40:5e:70:78:a7:32:67:
                    ec:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:A7:93:35:CB:9B:16:46:D4:41:0F:EC:9F:1D:1D:AC:26:3D:A2:4E
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/QaeTNcubFkbUQQ_snx0drCY9ok4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.73.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         74:38:84:3a:7b:53:4b:9a:62:e8:7e:27:87:f7:fc:ef:0b:16:
         c5:65:52:75:53:91:05:58:8f:36:8d:8c:40:fb:2e:13:bb:c0:
         60:a2:98:96:0f:06:34:5c:84:12:1f:2f:fd:59:4a:8b:1c:87:
         c3:46:ba:b5:e9:58:36:73:01:a3:25:82:df:86:54:d9:26:c4:
         8e:f1:dc:c8:f1:b8:ec:9b:d7:70:34:e8:8e:83:f1:1a:7c:fa:
         85:f9:46:8d:ec:c0:77:3f:11:f1:22:36:57:8a:22:3c:6a:b0:
         30:d9:dd:fd:b7:2c:92:5d:67:0a:8f:89:6e:0a:c6:7a:53:5f:
         1a:99:fe:eb:3e:37:76:b9:dd:0b:4e:25:47:d1:50:70:02:53:
         7e:a1:e3:51:b5:d6:36:e3:11:40:22:8c:48:c3:c9:37:c4:15:
         41:c6:a0:c2:c0:58:58:15:a7:8f:10:2c:e0:d6:da:41:7a:9e:
         a0:7d:a8:47:34:61:5b:8e:70:1e:d4:32:df:b5:ea:f6:33:fc:
         98:24:b5:29:98:a4:d0:6e:b8:ea:cc:b5:e5:a1:22:75:b1:8a:
         66:23:05:fc:d4:fb:98:f8:c7:0d:dd:96:77:67:37:7b:9f:b2:
         bb:5e:56:4a:6c:3d:cc:51:d3:81:54:90:3f:d1:ad:1f:91:9e:
         ef:be:46:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 07:53:05 2025 by rpki-client