Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/e0avZ-IWhHSavQ5O3VixcDvDvk4.roa
File:                     e0avZ-IWhHSavQ5O3VixcDvDvk4.roa (raw, json)
Hash identifier:          TrMUAG5uw8JzJA76A/NxFc83pmHd2/8eLVwoprb8o6M=
Subject key identifier:   7B:46:AF:67:E2:16:84:74:9A:BD:0E:4E:DD:58:B1:70:3B:C3:BE:4E
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0F95
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/e0avZ-IWhHSavQ5O3VixcDvDvk4.roa
Signing time:             Tue 10 Jun 2025 11:36:23 +0000
ROA not before:           Tue 10 Jun 2025 11:36:23 +0000
ROA not after:            Sat 23 May 2026 09:51:00 +0000
asID:                     9605
IP address blocks:        220.159.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3989 (0xf95)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun 10 11:36:23 2025 GMT
            Not After : May 23 09:51:00 2026 GMT
        Subject: CN=7B46AF67E21684749ABD0E4EDD58B1703BC3BE4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:33:9e:18:77:c8:e0:fa:1c:b0:c9:8c:c4:f1:
                    9c:28:fd:15:90:ad:9c:f6:3e:17:08:fb:f0:bf:ea:
                    14:e3:9e:67:1e:23:be:38:ff:18:9a:75:1a:0a:41:
                    20:d8:72:3c:74:27:5b:26:72:5b:8b:b9:ef:dc:b9:
                    50:d1:91:cb:a5:2f:16:a3:5e:b1:08:a1:bd:bd:45:
                    b2:44:04:29:c2:ec:24:f1:2f:8e:34:20:b9:83:a1:
                    49:e6:d0:9d:68:6b:52:9d:a3:98:88:8b:9b:0b:ad:
                    60:17:38:59:f8:8d:da:b2:1e:65:6d:87:9a:68:f0:
                    a7:d3:18:c7:fe:88:07:45:0b:e8:3e:8a:26:4b:69:
                    32:fd:28:f2:b9:11:83:8f:bc:67:1a:94:73:0e:90:
                    a3:67:a3:e3:86:14:3b:5f:3b:d5:42:cb:be:64:48:
                    63:75:fb:f5:ff:e1:1e:7b:71:e1:c3:47:06:2c:10:
                    f8:d2:ab:75:bc:fe:bd:6b:49:12:ba:c2:43:f8:59:
                    1b:be:28:cb:98:01:d1:16:1e:b8:84:a5:f4:3d:ea:
                    7b:15:d3:44:64:45:f2:49:41:a8:6e:12:ed:18:1d:
                    8c:dc:84:4e:86:76:ff:9e:9a:07:25:32:a7:70:c0:
                    87:66:4b:63:56:34:a2:2b:77:65:6c:d4:eb:9c:5e:
                    1c:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:46:AF:67:E2:16:84:74:9A:BD:0E:4E:DD:58:B1:70:3B:C3:BE:4E
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/e0avZ-IWhHSavQ5O3VixcDvDvk4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.159.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:29:9b:f5:2f:8c:ed:e4:d1:be:94:a7:9d:a3:d8:35:63:aa:
         f4:f0:67:b2:34:a1:32:e9:a9:e8:42:df:56:eb:87:06:d6:33:
         3d:18:d0:69:1c:74:ae:7a:2b:9f:1c:8c:e2:e5:c2:86:d4:72:
         1a:c0:3f:0d:ef:22:9c:62:97:5c:39:06:f7:54:05:f7:01:b5:
         be:97:ed:12:b3:25:4c:3e:ad:bc:3b:e5:f4:7a:da:c9:4b:f2:
         e4:74:a7:f8:75:3a:82:b2:cb:e2:87:35:4e:5d:3f:d5:2a:97:
         bd:a5:31:90:a6:62:c3:6d:55:5b:79:05:fb:65:cf:43:ff:3d:
         60:31:2d:fc:56:23:85:d3:06:6f:3f:c6:5b:60:be:a5:ff:a7:
         dc:40:ca:e5:56:e8:d3:44:db:d2:6c:b7:ea:ce:fe:c6:fd:0b:
         86:49:c8:04:96:c9:5a:a5:65:2b:6e:e4:8e:9d:df:77:79:2a:
         0d:11:63:ac:c2:be:69:ba:3d:5a:57:e6:3c:0d:0c:3e:d9:cb:
         df:e4:ce:5a:bc:2b:b9:09:68:3f:5d:1c:cd:a7:dd:be:2b:73:
         f8:95:a9:cb:df:43:76:ea:9d:2b:8d:e1:e5:0d:f6:26:97:18:
         20:9d:96:d6:37:d6:86:eb:b2:40:89:c8:b6:74:8d:30:67:48:
         41:4b:ca:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 06:21:32 2025 by rpki-client