Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/yoywikDaUeuvCh4T33fp2c397mE.roa
File:                     yoywikDaUeuvCh4T33fp2c397mE.roa (raw, json)
Hash identifier:          ZL02r46aX+PHChJjxgybmiAaFOLuFcO7nk2mkjDCdcQ=
Subject key identifier:   CA:8C:B0:8A:40:DA:51:EB:AF:0A:1E:13:DF:77:E9:D9:CD:FD:EE:61
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0D7A
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/yoywikDaUeuvCh4T33fp2c397mE.roa
Signing time:             Tue 01 Apr 2025 02:19:28 +0000
ROA not before:           Tue 01 Apr 2025 02:19:28 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     9605
IP address blocks:        183.74.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 23 May 2025 02:36:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3450 (0xd7a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr  1 02:19:28 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=CA8CB08A40DA51EBAF0A1E13DF77E9D9CDFDEE61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f6:91:af:99:90:12:34:21:64:24:ec:3b:7b:
                    b2:69:b8:06:55:8d:bb:5d:3c:75:72:fa:f7:04:65:
                    c6:27:f2:ac:f8:e1:21:7e:16:10:a7:0c:49:84:7b:
                    ba:06:9b:d5:e9:3d:88:72:c2:f4:0a:43:0d:82:f9:
                    05:5b:c5:fe:bf:5a:29:d7:88:51:b7:29:00:8a:35:
                    cf:b7:7b:5c:95:a5:6c:a7:01:0c:95:8f:3b:1d:58:
                    13:9b:ca:b2:5f:83:4a:d9:16:04:4a:cd:9e:03:b8:
                    21:20:d5:bf:f4:c4:3f:61:ea:56:77:2a:4c:ce:1a:
                    3a:68:54:8e:20:a7:c5:e0:82:79:fc:d2:1b:c7:dd:
                    14:e6:6a:4f:90:1a:d4:da:23:21:b3:1f:f5:2b:96:
                    84:0f:50:8a:35:7e:eb:71:7e:e1:26:5a:c9:3f:48:
                    fd:d4:8c:85:d6:ec:9f:a4:4c:8f:38:52:ab:a7:51:
                    ed:4c:cb:8e:d8:9f:86:04:44:12:cc:b5:36:37:3d:
                    0c:61:1c:a5:51:cc:22:76:40:b6:37:48:80:97:07:
                    83:dc:a4:d7:9e:8d:c5:06:de:06:74:69:8f:3d:97:
                    97:10:78:6d:ab:8b:15:3f:da:d6:b9:75:90:70:cc:
                    da:c6:f1:5f:66:44:8e:94:a0:33:e1:b2:80:86:5a:
                    e8:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:8C:B0:8A:40:DA:51:EB:AF:0A:1E:13:DF:77:E9:D9:CD:FD:EE:61
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/yoywikDaUeuvCh4T33fp2c397mE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.74.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d3:f9:72:c7:a5:50:11:5c:9c:fb:5e:1f:3d:c3:7a:44:eb:c5:
         46:6d:7c:29:0b:c1:96:40:2b:4a:70:92:bf:62:9e:bf:63:55:
         ed:50:62:d7:9e:f2:20:23:d2:e6:f0:bc:c6:5c:98:24:55:15:
         02:f4:7a:b2:85:3a:a3:55:8d:f8:52:20:ab:52:aa:b3:2d:22:
         ca:94:63:75:a9:21:21:0b:63:06:0a:2d:f8:32:7b:ad:84:ae:
         49:65:6f:32:ea:95:60:c8:f2:00:66:52:e9:3d:bb:50:79:83:
         75:df:6a:42:3c:4d:87:d5:b8:b2:93:7e:b3:c6:3c:fb:5e:47:
         7c:85:12:c0:a3:bf:c4:16:90:d6:eb:f8:3b:d1:7b:80:bf:00:
         44:32:dd:ce:96:46:ce:86:29:f7:d6:97:a7:83:f1:84:47:5c:
         d9:d7:45:2a:ca:7a:1f:14:33:b4:62:16:2f:78:2b:80:da:87:
         bf:dc:90:91:75:76:64:5d:1f:58:17:88:80:2d:d7:67:e0:cb:
         cb:dd:ac:af:6b:44:6d:ee:3d:fb:0c:da:bd:68:d6:b6:77:63:
         18:d2:f0:05:44:7d:ac:7f:7a:11:52:26:cc:43:ba:b1:92:75:
         9b:32:a6:76:e6:fd:cf:4f:d3:b3:31:1d:6c:ec:15:3b:ca:7b:
         99:42:74:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 09:48:21 2025 by rpki-client