Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/uQJJgJgUgcVTJHC2Zgwtld0V6m8.roa
File:                     uQJJgJgUgcVTJHC2Zgwtld0V6m8.roa (raw, json)
Hash identifier:          8Cvn3WalrTWSHt4qsiTOQfTdcdFLpDxthA3CLCA+dXA=
Subject key identifier:   B9:02:49:80:98:14:81:C5:53:24:70:B6:66:0C:2D:95:DD:15:EA:6F
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0B75
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/uQJJgJgUgcVTJHC2Zgwtld0V6m8.roa
Signing time:             Tue 01 Apr 2025 01:36:46 +0000
ROA not before:           Tue 01 Apr 2025 01:36:46 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     9605
IP address blocks:        49.104.20.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 20:45:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2933 (0xb75)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr  1 01:36:46 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=B9024980981481C5532470B6660C2D95DD15EA6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:2b:e3:03:09:50:88:bf:69:bc:c7:2a:9e:dc:
                    19:58:4c:cc:97:5e:a7:3f:48:66:16:e8:26:f7:97:
                    ec:32:ce:3c:9b:87:7f:c8:8c:48:01:b9:a7:13:ef:
                    6b:96:89:ca:b2:66:13:f3:69:3c:c4:fa:5d:bb:21:
                    4d:f4:1f:2e:54:1c:62:e9:72:a5:f8:51:11:e3:11:
                    41:01:12:5e:57:65:1c:f7:50:5a:59:ca:73:bb:c9:
                    64:00:71:48:c6:1f:19:31:b6:5b:53:39:0c:87:f2:
                    cc:1a:26:4b:9f:39:2b:63:2b:81:ec:c5:a7:eb:8f:
                    51:c4:d3:a3:fa:b8:b5:0c:5f:36:3b:ce:f4:f6:68:
                    3c:d5:73:3a:1a:81:bf:d0:d8:0b:8b:33:6c:7c:01:
                    7d:76:c2:10:49:bf:0b:91:d8:ea:9e:f7:df:86:8e:
                    05:be:55:63:51:eb:58:2e:10:8d:82:43:85:b9:70:
                    39:47:4d:a4:e5:48:6f:d7:c1:80:37:52:37:1f:f2:
                    c4:6a:a0:94:d1:bc:41:93:83:a3:a6:a0:d3:fc:9e:
                    3e:fc:93:d6:85:c5:d1:d5:b2:e9:2b:f9:ce:ea:99:
                    4b:85:23:2c:59:24:b0:b7:98:1b:88:e3:9f:41:55:
                    cf:80:bc:21:10:7c:b5:cb:06:28:c3:24:7a:76:ad:
                    73:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:02:49:80:98:14:81:C5:53:24:70:B6:66:0C:2D:95:DD:15:EA:6F
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/uQJJgJgUgcVTJHC2Zgwtld0V6m8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.104.20.0/23

    Signature Algorithm: sha256WithRSAEncryption
         47:05:84:78:2a:72:f4:14:a9:51:20:83:87:e1:8b:87:02:01:
         4c:06:7e:be:47:d4:78:55:3d:89:28:59:6b:59:05:5c:74:94:
         84:eb:a5:07:25:2a:91:5e:43:7c:f0:6a:20:3c:68:af:45:4e:
         d0:9c:a5:63:0d:59:93:1e:d1:91:76:08:bd:bf:3c:cb:cd:fb:
         57:bf:c7:f5:ba:b4:19:0b:30:26:04:b8:8d:34:86:4b:13:5c:
         26:7f:07:8a:ec:21:cb:2a:62:ca:4f:6c:21:3c:91:ae:a7:ae:
         ed:b8:23:7b:05:d4:49:68:bf:c6:a5:cc:2a:2a:f7:02:c1:5a:
         7e:f0:98:7b:2b:64:ce:da:20:bf:69:b2:aa:b4:82:4e:65:46:
         26:4b:c9:e7:ca:e5:7c:8d:25:a7:54:1f:aa:8e:98:f6:11:04:
         e7:7f:98:a0:bf:b9:86:89:fa:b2:78:36:23:0c:d6:47:ef:16:
         24:53:94:cc:14:37:ec:98:f2:05:a8:d8:1a:16:d3:94:d5:2f:
         03:1c:cc:fd:70:e2:f8:c6:db:00:78:f4:fb:04:57:18:f7:8e:
         de:df:25:16:a0:a5:82:5c:a4:e0:89:23:af:ba:da:91:ed:47:
         47:d8:ab:05:2f:a6:5d:30:87:df:56:50:36:1c:d7:24:8f:9a:
         17:50:16:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:52:26 2025 by rpki-client on console.sobornost.net