Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/qPE6Wf5kmzGKC-CoS87ZYcmLfIU.roa
File:                     qPE6Wf5kmzGKC-CoS87ZYcmLfIU.roa (raw, json)
Hash identifier:          3La7f8LzhOMUFviIx//wc5ruRPcd9ZfTs3nKAlIWa3U=
Subject key identifier:   A8:F1:3A:59:FE:64:9B:31:8A:0B:E0:A8:4B:CE:D9:61:C9:8B:7C:85
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0F52
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/qPE6Wf5kmzGKC-CoS87ZYcmLfIU.roa
Signing time:             Tue 10 Jun 2025 11:28:28 +0000
ROA not before:           Tue 10 Jun 2025 11:28:28 +0000
ROA not after:            Sat 23 May 2026 09:51:00 +0000
asID:                     9605
IP address blocks:        183.74.254.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3922 (0xf52)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun 10 11:28:28 2025 GMT
            Not After : May 23 09:51:00 2026 GMT
        Subject: CN=A8F13A59FE649B318A0BE0A84BCED961C98B7C85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:6f:be:dc:46:8e:bf:ba:7e:6c:c9:db:8c:46:
                    d7:71:1f:65:f8:7c:ed:eb:59:7a:cc:b2:2b:9c:d5:
                    8b:24:a8:1f:e9:29:7a:1e:ed:29:0d:74:fb:6c:0b:
                    04:c5:30:8a:11:1e:63:ab:9b:76:95:b1:c9:3b:18:
                    ce:e2:4f:e4:0a:68:eb:78:ec:f8:3c:f6:f0:e9:49:
                    84:a9:48:15:12:5e:ae:52:07:58:ab:1c:d9:18:9d:
                    c7:10:b6:13:48:db:97:68:25:03:fa:e1:10:69:6e:
                    bc:40:e4:eb:51:05:6a:96:3e:0b:f1:2e:1b:74:2f:
                    f4:cf:bd:4b:5b:c8:3f:6a:17:c2:27:56:11:51:37:
                    bf:e6:f9:5b:ba:c3:85:8e:d8:14:14:61:86:f1:00:
                    98:08:22:f6:ee:3a:f1:5b:37:2e:12:ee:b0:d0:c1:
                    9b:3d:74:f1:c9:af:a5:04:dd:a4:f9:d0:74:54:27:
                    c4:12:4e:79:88:6b:bc:84:60:8f:b9:b1:17:98:4e:
                    5a:69:6b:9b:20:6b:c5:5d:17:91:46:76:c5:da:2f:
                    4a:6e:8b:79:4b:75:bc:d2:a3:06:19:65:4e:de:a5:
                    42:da:cb:61:9d:e3:8e:62:da:ee:f6:d8:70:be:d2:
                    d7:0a:3a:42:dc:07:62:e0:fc:7b:92:39:b7:0b:bb:
                    a0:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:F1:3A:59:FE:64:9B:31:8A:0B:E0:A8:4B:CE:D9:61:C9:8B:7C:85
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/qPE6Wf5kmzGKC-CoS87ZYcmLfIU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.74.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         43:82:8c:56:05:e3:6e:1f:35:a8:50:4b:45:07:3e:53:ac:dd:
         d2:42:2c:11:95:93:0a:52:87:40:5b:5e:70:81:3f:cb:7c:97:
         1f:b4:45:52:63:3f:01:fb:a6:5c:60:38:f2:56:51:2d:0e:a2:
         9b:12:44:33:d4:6b:02:26:6d:89:bc:67:8c:88:0a:d0:f6:7f:
         4f:a1:21:61:f2:58:2a:3b:e2:18:a1:ef:a1:a9:24:ed:ca:ba:
         72:90:f5:5f:a6:14:e1:14:66:01:1a:ea:14:b1:f9:6e:c4:5c:
         2c:74:71:fa:9a:16:28:b9:87:12:9b:a0:3c:00:3d:5a:c6:ee:
         2b:dd:7a:30:91:12:35:e7:9a:83:1d:76:59:22:c1:76:82:73:
         52:22:d2:f8:35:03:1b:92:ec:9a:e6:ff:d2:31:11:68:33:8e:
         ca:c4:54:e2:46:45:9b:85:c0:bb:e8:81:6a:c4:df:35:ba:54:
         49:c7:b1:75:b5:2c:0f:8d:ca:1e:e5:e6:13:04:29:3d:1f:c8:
         a1:b0:a8:d7:2a:70:f2:bf:19:16:31:a5:a2:75:b8:44:58:93:
         8e:a2:00:28:4c:1d:75:2e:5f:3c:bf:27:80:31:87:f9:fa:f4:
         1a:80:a7:02:72:2c:e4:20:82:5c:06:15:0e:79:1f:94:57:93:
         08:31:09:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 01:30:18 2025 by rpki-client