Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/-a4OpSOf7Faj7N4hkJk1gVQSriY.roa
File:                     -a4OpSOf7Faj7N4hkJk1gVQSriY.roa (raw, json)
Hash identifier:          a4qZ6W7O/95FlnRCLIIh6uVpjecxHxQDtauIcXrV1Zk=
Subject key identifier:   F9:AE:0E:A5:23:9F:EC:56:A3:EC:DE:21:90:99:35:81:54:12:AE:26
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0BED
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-a4OpSOf7Faj7N4hkJk1gVQSriY.roa
Signing time:             Tue 01 Apr 2025 01:47:45 +0000
ROA not before:           Tue 01 Apr 2025 01:47:45 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     9605
IP address blocks:        1.73.72.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 20:45:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3053 (0xbed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr  1 01:47:45 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=F9AE0EA5239FEC56A3ECDE21909935815412AE26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:49:c0:29:9f:95:ed:bc:ff:3a:7d:40:4e:17:
                    f7:a6:1d:95:6b:46:c0:63:ff:fc:ae:c1:1b:c5:c4:
                    e2:27:b4:35:a4:a1:b8:c4:7d:1d:98:23:0a:7e:d3:
                    a3:c9:cf:2d:ba:df:82:11:ca:c7:50:17:36:68:b3:
                    f1:e7:10:e8:4e:bd:8d:38:aa:79:86:83:a7:10:a5:
                    1a:8b:9e:a1:11:8a:6b:f7:a6:4d:78:81:5f:24:c5:
                    14:85:29:5d:f6:0a:dc:87:02:70:cc:e4:96:7e:30:
                    5e:3f:b2:cd:2e:bb:48:4b:2b:fb:b0:b3:87:d7:76:
                    ec:3e:49:03:9b:d7:1d:59:ae:08:c0:89:6f:11:7b:
                    2e:98:10:05:e8:81:1c:1e:aa:ce:02:c1:95:f5:e5:
                    5c:9e:7e:8b:17:a6:0b:ad:25:e2:cb:85:28:60:de:
                    7b:bb:a5:be:80:cd:e0:41:5d:df:67:3d:37:15:8f:
                    23:c5:23:25:2b:37:16:45:df:82:04:49:1a:25:a5:
                    59:52:bf:f8:f5:ff:a9:f1:e6:b8:93:15:f1:fd:76:
                    a7:18:d7:f0:64:24:e9:e0:9f:d4:ef:e9:7b:85:1c:
                    a3:a9:55:48:7d:d0:68:5b:7a:49:07:74:c6:3e:2f:
                    00:e0:b9:09:5e:0e:b9:e8:ab:db:4c:37:57:de:85:
                    ab:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:AE:0E:A5:23:9F:EC:56:A3:EC:DE:21:90:99:35:81:54:12:AE:26
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-a4OpSOf7Faj7N4hkJk1gVQSriY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.73.72.0/23

    Signature Algorithm: sha256WithRSAEncryption
         51:0c:c4:25:b6:aa:e3:51:bd:90:42:80:72:52:1b:b3:e5:67:
         a4:6e:f7:f5:3f:cd:a8:b4:b7:1d:1a:79:15:96:e1:0c:73:20:
         d0:d1:e2:0d:76:23:9d:3c:dd:9b:03:04:e7:7a:41:80:8e:74:
         57:70:46:96:8c:70:21:bc:d7:ad:97:63:33:2d:3a:fe:ed:fe:
         0c:c2:33:5a:bd:3d:17:3d:e9:ba:b4:ec:8b:1b:9d:cc:e2:4c:
         0c:4c:a7:56:b3:44:1b:5b:0a:20:4e:10:61:40:5d:2f:3d:c8:
         6d:17:14:68:1a:7a:6d:95:07:5c:e4:db:7a:21:26:e2:2d:a9:
         c1:18:cb:26:15:43:ed:f1:2f:92:11:7c:13:c1:3a:fa:2b:12:
         fc:95:63:90:c9:9c:94:9b:f7:72:63:4e:55:61:16:e9:ff:08:
         05:45:a6:f8:ee:2d:8f:4f:47:4c:b1:05:35:67:52:73:82:72:
         8f:4a:59:a4:a5:0f:e9:ec:3b:f5:d3:03:2c:fc:c2:ba:bf:9b:
         a2:20:bd:7a:5a:68:d2:e2:dc:cf:a4:62:35:47:9b:07:85:ed:
         bb:f3:f8:f2:81:8b:61:90:83:46:f8:c3:6f:a8:4e:e9:08:27:
         71:80:6e:df:92:20:7a:ea:10:ae:39:81:1d:46:b4:94:28:29:
         ee:69:ad:9b
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICC+0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw
MTQ3NDVaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEY5QUUwRUE1MjM5RkVD
NTZBM0VDREUyMTkwOTkzNTgxNTQxMkFFMjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCnScApn5XtvP86fUBOF/emHZVrRsBj//yuwRvFxOIntDWkobjE
fR2YIwp+06PJzy2634IRysdQFzZos/HnEOhOvY04qnmGg6cQpRqLnqERimv3pk14
gV8kxRSFKV32CtyHAnDM5JZ+MF4/ss0uu0hLK/uws4fXduw+SQOb1x1ZrgjAiW8R
ey6YEAXogRweqs4CwZX15VyefosXpgutJeLLhShg3nu7pb6AzeBBXd9nPTcVjyPF
IyUrNxZF34IESRolpVlSv/j1/6nx5riTFfH9dqcY1/BkJOngn9Tv6XuFHKOpVUh9
0GhbekkHdMY+LwDguQleDrnoq9tMN1fehavrAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQU+a4OpSOf7Faj7N4hkJk1gVQSriYwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5Ly1hNE9wU09mN0ZhajdONGhrSmsxZ1ZRU3JpWS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAEBSUgwDQYJKoZIhvcNAQELBQADggEBAFEMxCW2quNRvZBCgHJSG7PlZ6Ru
9/U/zai0tx0aeRWW4QxzINDR4g12I5083ZsDBOd6QYCOdFdwRpaMcCG8162XYzMt
Ov7t/gzCM1q9PRc96bq07IsbncziTAxMp1azRBtbCiBOEGFAXS89yG0XFGgaem2V
B1zk23ohJuItqcEYyyYVQ+3xL5IRfBPBOvorEvyVY5DJnJSb93JjTlVhFun/CAVF
pvjuLY9PR0yxBTVnUnOCco9KWaSlD+nsO/XTAyz8wrq/m6IgvXpaaNLi3M+kYjVH
mweF7bvz+PKBi2GQg0b4w2+oTukIJ3GAbt+SIHrqEK45gR1GtJQoKe5prZs=
-----END CERTIFICATE-----
Generated at Mon Apr 28 22:51:37 2025 by rpki-client on console.sobornost.net