Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/E_rGQ7MRZlws8sXxaH1Vker2Rt4.roa
File:                     E_rGQ7MRZlws8sXxaH1Vker2Rt4.roa (raw, json)
Hash identifier:          Nh0A3g/GrFnUDlsaHM8WNdgNbEIVZgVRgyVT30WNc/I=
Subject key identifier:   13:FA:C6:43:B3:11:66:5C:2C:F2:C5:F1:68:7D:55:91:EA:F6:46:DE
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0B6E
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/E_rGQ7MRZlws8sXxaH1Vker2Rt4.roa
Signing time:             Tue 01 Apr 2025 01:36:42 +0000
ROA not before:           Tue 01 Apr 2025 01:36:42 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     9605
IP address blocks:        110.160.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 20:45:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2926 (0xb6e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr  1 01:36:42 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=13FAC643B311665C2CF2C5F1687D5591EAF646DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:ba:ab:97:85:08:fa:95:83:48:94:c5:b3:8a:
                    f0:c9:de:21:14:83:74:01:05:0c:e0:33:ff:44:c3:
                    68:93:16:45:91:65:5d:83:b7:49:37:91:56:b8:4c:
                    4f:40:6a:5f:f3:5c:12:23:dc:aa:2c:bb:1e:65:2a:
                    1b:26:b5:1a:76:c6:67:41:fd:0d:c4:f2:c8:3b:e1:
                    77:fa:8c:b6:da:b2:a7:ea:6d:53:70:69:53:9d:0c:
                    d1:11:34:9f:d3:01:84:21:95:c1:99:b4:f4:6d:2d:
                    8b:04:cc:a4:11:6d:66:bd:96:e0:13:ea:8b:e5:70:
                    24:a1:e8:07:6c:2a:2b:37:46:d9:3e:09:ab:dc:d1:
                    42:83:79:df:33:79:26:8d:97:03:c6:c5:15:3f:4b:
                    43:80:b1:6b:0a:eb:ac:60:8c:63:9c:b2:2d:fb:86:
                    d7:b4:f4:2a:a1:0b:a7:1b:c0:c1:4d:69:44:62:cc:
                    ac:22:91:52:c0:eb:21:f3:64:3b:03:3b:02:85:46:
                    65:bc:11:bd:8e:a8:01:92:e9:3c:c1:bb:2a:44:d4:
                    ab:90:48:f0:bd:07:dc:31:79:5c:9e:1f:f0:20:b5:
                    2d:b3:a8:9a:1c:8c:ce:b3:35:84:b1:1a:93:3a:98:
                    32:7a:1e:67:b7:82:83:19:0e:65:f5:ee:b7:09:de:
                    27:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:FA:C6:43:B3:11:66:5C:2C:F2:C5:F1:68:7D:55:91:EA:F6:46:DE
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/E_rGQ7MRZlws8sXxaH1Vker2Rt4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.160.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         ab:75:17:72:be:5d:85:5a:f2:05:7b:af:74:4e:a9:27:e4:33:
         ed:6e:48:89:76:0b:71:3d:36:98:09:39:43:eb:ea:91:7e:9b:
         79:64:b2:83:f7:a0:53:44:ae:ff:8c:ca:66:79:10:51:aa:16:
         84:cb:41:24:74:48:ee:23:44:25:c9:24:e0:53:76:67:88:87:
         24:24:2a:74:e6:70:e3:84:c4:3f:e9:87:f9:d8:05:11:1c:50:
         fb:0a:45:73:4e:2f:a4:f6:e4:61:7e:70:78:c7:1f:78:91:26:
         e1:c7:82:f1:93:79:f8:e3:37:69:88:e7:f8:70:93:9e:06:72:
         34:95:74:66:2e:66:0e:6a:1f:76:e3:39:2c:bd:e9:44:6c:c4:
         97:a4:d8:0d:af:53:8f:50:ed:d0:cb:e0:5f:64:82:9a:58:c6:
         02:a6:86:dd:65:61:8c:ff:ee:36:35:d3:0b:3c:a3:3b:fe:aa:
         b5:38:81:b8:34:ae:97:f0:36:2d:92:0f:e2:fc:41:2d:b9:ec:
         40:d1:73:03:05:e3:d0:b5:b4:8d:de:1d:69:7e:ab:07:eb:4b:
         c9:f1:c2:bb:12:40:7e:ec:70:7a:07:28:2e:ee:52:2f:ae:39:
         51:79:7f:90:f0:0f:26:1d:fa:d6:4e:86:c2:7e:c2:d6:8c:34:
         ab:50:da:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:51:44 2025 by rpki-client on console.sobornost.net