Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/ap-nogX2Wle0wdkz166hTqya_vs.roa
File:                     ap-nogX2Wle0wdkz166hTqya_vs.roa (raw, json)
Hash identifier:          rdn9fcHUhtPqBl4D+z5kFiSEa9FTac1k6Mtpv8NW8+4=
Subject key identifier:   6A:9F:A7:A2:05:F6:5A:57:B4:C1:D9:33:D7:AE:A1:4E:AC:9A:FE:FB
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0F4F
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ap-nogX2Wle0wdkz166hTqya_vs.roa
Signing time:             Tue 10 Jun 2025 11:28:26 +0000
ROA not before:           Tue 10 Jun 2025 11:28:26 +0000
ROA not after:            Sat 23 May 2026 09:51:00 +0000
asID:                     9605
IP address blocks:        211.14.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3919 (0xf4f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun 10 11:28:26 2025 GMT
            Not After : May 23 09:51:00 2026 GMT
        Subject: CN=6A9FA7A205F65A57B4C1D933D7AEA14EAC9AFEFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:46:c7:c3:8a:75:d0:c5:4d:5b:47:c5:82:50:
                    07:b4:e8:03:d7:23:99:80:d1:9c:fc:76:34:10:ed:
                    cd:f6:7e:6c:e4:d3:6a:dc:da:a6:7b:64:0f:8e:32:
                    79:9f:12:44:fa:64:b3:1f:c3:db:2b:8c:39:da:0f:
                    a8:0c:e0:2a:e6:8c:ab:f2:3b:60:bb:0f:36:d0:c2:
                    0e:46:4c:25:6f:ad:a6:f9:81:4c:b9:47:5f:04:e5:
                    1c:8f:c4:ea:a0:dc:03:9c:dd:eb:6e:9d:9e:a6:82:
                    d6:f7:c1:1b:c4:4b:00:12:97:3e:9a:b8:8c:fa:00:
                    cb:09:fe:93:57:41:02:74:19:9d:e8:b3:b1:23:9c:
                    18:11:b8:98:73:3e:d3:5e:68:7b:03:4f:10:23:41:
                    29:92:cd:7c:5b:5a:74:aa:64:0b:f2:01:be:1f:ee:
                    0f:f5:e5:7c:fb:23:f9:07:46:db:50:93:0a:e0:30:
                    be:38:75:3c:55:cf:17:b0:fd:c5:d9:28:2e:57:09:
                    72:89:b6:e1:a1:83:be:3e:53:9f:22:8c:6e:8e:2e:
                    8f:5f:b0:36:c9:41:b9:b6:fc:77:0a:34:de:fc:76:
                    3c:2d:75:0f:9f:0d:1d:4a:75:87:a6:68:44:bd:7b:
                    9d:bb:ae:68:bd:d5:52:a1:43:82:5b:1c:b7:e9:90:
                    0e:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:9F:A7:A2:05:F6:5A:57:B4:C1:D9:33:D7:AE:A1:4E:AC:9A:FE:FB
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ap-nogX2Wle0wdkz166hTqya_vs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.14.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:41:b6:d9:9b:3a:2b:d4:23:71:28:69:3b:53:51:20:ce:54:
         83:13:c1:84:88:f7:cb:0e:2e:68:eb:9f:e5:3c:20:0f:e8:87:
         e5:94:5c:95:9d:b8:cb:07:7d:ea:94:6f:b7:75:1f:fc:eb:49:
         f7:5d:f6:52:fb:68:eb:53:21:1d:cc:17:6d:63:95:a8:31:bd:
         0e:18:16:59:dc:d7:6b:d2:da:dd:20:fb:41:41:e8:7c:23:8c:
         3c:7f:cd:2c:78:50:dc:ef:28:66:64:9a:b2:32:c5:3c:71:8e:
         f0:b3:88:f3:ed:23:67:ac:92:7d:a9:fb:c4:6c:4b:47:d1:f0:
         13:52:60:41:2a:99:37:fb:2d:de:f6:c6:e9:08:49:a0:ee:5d:
         f0:30:3c:3e:e6:88:a1:4e:da:d0:7f:e3:b2:e0:0c:b1:b5:77:
         f2:75:28:fe:32:7a:3e:4c:a9:44:4c:2e:d1:96:b7:b1:c1:aa:
         76:d1:af:f0:26:25:37:c1:4b:90:43:17:0b:b5:d9:c4:d3:61:
         4d:8d:33:c3:b6:27:e8:29:d3:bb:70:3c:b2:0f:fa:14:87:a9:
         2d:4e:ed:68:99:ff:08:ad:fc:45:6e:98:d2:4b:45:5f:7a:eb:
         4e:96:61:fe:04:05:5d:6e:17:f7:25:0c:70:66:01:1c:56:0d:
         44:cc:34:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 15:57:51 2025 by rpki-client