Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/11207/3o4efsy6CF7jZ61dtOW7PqQSq94.roa
File:                     3o4efsy6CF7jZ61dtOW7PqQSq94.roa (raw, json)
Hash identifier:          kBN7u6BGw6aX4jO6ee9sQffgu3wHtY2kw5tnWjAwSDc=
Subject key identifier:   DE:8E:1E:7E:CC:BA:08:5E:E3:67:AD:5D:B4:E5:BB:3E:A4:12:AB:DE
Certificate issuer:       /CN=E056D0501D430CE0FCF0DB0675BAFC90B05D9BF5
Certificate serial:       75
Authority key identifier: E0:56:D0:50:1D:43:0C:E0:FC:F0:DB:06:75:BA:FC:90:B0:5D:9B:F5
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4FbQUB1DDOD88NsGdbr8kLBdm_U.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/3o4efsy6CF7jZ61dtOW7PqQSq94.roa
Signing time:             Tue 01 Apr 2025 01:29:46 +0000
ROA not before:           Tue 01 Apr 2025 01:29:46 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     55391
IP address blocks:        217.178.128.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/4FbQUB1DDOD88NsGdbr8kLBdm_U.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/4FbQUB1DDOD88NsGdbr8kLBdm_U.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4FbQUB1DDOD88NsGdbr8kLBdm_U.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0ZV-xYwI81uqa_535FqXQLpHH54.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 14:50:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117 (0x75)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E056D0501D430CE0FCF0DB0675BAFC90B05D9BF5
        Validity
            Not Before: Apr  1 01:29:46 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=DE8E1E7ECCBA085EE367AD5DB4E5BB3EA412ABDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:83:6f:4b:60:8e:2b:98:17:f0:53:f0:9a:4f:
                    97:da:17:95:58:c0:03:aa:c8:b4:ed:30:28:88:60:
                    2d:ca:41:f0:97:c2:68:1b:da:cf:03:0d:21:4e:99:
                    85:77:eb:77:65:6b:de:04:7d:d8:d4:51:e1:d7:ed:
                    d6:96:70:40:40:a1:04:9a:71:61:ea:38:55:b0:54:
                    b4:6a:27:5b:e9:f2:bb:37:9e:30:fa:4d:50:7a:57:
                    2e:59:74:47:ec:52:e5:90:e3:67:60:6f:dd:51:53:
                    67:3b:88:c1:2b:f6:02:ba:50:dd:60:00:d1:46:04:
                    24:59:6e:38:45:9e:bb:c1:5c:cd:fe:b5:e3:9b:74:
                    db:b1:e0:0e:75:95:db:3e:74:46:4f:d5:ce:dc:e0:
                    6b:25:ef:e7:50:af:3e:b6:c6:87:a9:ae:8a:c3:ad:
                    4a:63:66:62:14:92:57:0d:ef:62:a0:c4:93:f9:81:
                    cc:96:85:ae:38:1c:4e:35:80:cc:63:3a:22:21:d0:
                    e3:1d:fc:a6:c9:61:fc:3f:67:57:7f:0e:c0:4a:bb:
                    2f:93:69:ea:70:2f:b1:bf:56:d6:8c:79:17:e6:60:
                    ff:63:ee:36:ac:2f:92:ed:6a:8b:c6:02:e2:4e:40:
                    b0:b0:dc:8b:c4:46:5f:f7:ac:b9:4a:c7:0a:e9:98:
                    39:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:8E:1E:7E:CC:BA:08:5E:E3:67:AD:5D:B4:E5:BB:3E:A4:12:AB:DE
            X509v3 Authority Key Identifier:
                keyid:E0:56:D0:50:1D:43:0C:E0:FC:F0:DB:06:75:BA:FC:90:B0:5D:9B:F5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/4FbQUB1DDOD88NsGdbr8kLBdm_U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4FbQUB1DDOD88NsGdbr8kLBdm_U.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/3o4efsy6CF7jZ61dtOW7PqQSq94.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  217.178.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         00:d9:d4:f6:db:76:0a:c7:6d:5c:4e:7d:8d:93:40:1c:d2:18:
         18:b3:c5:7f:36:37:39:80:aa:b4:9c:1f:08:0b:50:b2:5a:00:
         54:13:f4:d7:c9:4c:4a:2c:8d:d3:a4:f2:2b:ed:3a:3f:53:06:
         8e:b1:f7:b9:bf:15:d1:4b:bd:98:23:a3:12:b1:74:fc:b6:d0:
         24:34:1a:29:b0:09:af:fc:77:6c:22:0a:64:04:47:6f:07:7c:
         bf:b8:78:ba:42:64:70:3f:02:43:87:d7:74:b0:98:86:18:f7:
         65:b6:a6:22:93:1b:b3:d2:a8:b9:14:c9:4b:78:43:c8:b3:60:
         d0:72:6a:0c:cc:a4:77:8d:21:09:82:94:9e:c3:1a:c4:e1:2c:
         a2:9d:92:c4:8a:11:d2:b1:a1:94:5b:50:1f:82:19:84:b0:f3:
         e9:a5:4d:a7:3b:e4:0c:b9:d1:a7:2d:55:52:e4:b9:e3:f7:3c:
         51:bc:bd:fe:cf:c1:30:e4:25:44:d1:42:bd:9d:5d:ea:1d:e4:
         a2:39:d0:ee:83:59:d3:90:96:92:ad:af:ed:7e:2d:15:8d:4f:
         75:31:c6:86:a4:63:84:72:5d:bd:70:3b:9d:e5:d8:36:bd:69:
         82:c2:90:4b:5d:2e:06:de:ff:c6:24:f9:5a:49:33:57:bf:b0:
         82:9c:34:84
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Apr 28 22:50:54 2025 by rpki-client on console.sobornost.net