Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/94vvjfjZie97TPU8OmPaZk6pqbM.roa
File:                     94vvjfjZie97TPU8OmPaZk6pqbM.roa (raw, json)
Hash identifier:          LVCqdp5JYOebZA0y7voGW8tsYrFsPmM5DRl9CDYeoAs=
Subject key identifier:   F7:8B:EF:8D:F8:D9:89:EF:7B:4C:F5:3C:3A:63:DA:66:4E:A9:A9:B3
Certificate issuer:       /CN=F89E0F15C1E20E191AAF17288F6E30FF01869A6E
Certificate serial:       66
Authority key identifier: F8:9E:0F:15:C1:E2:0E:19:1A:AF:17:28:8F:6E:30:FF:01:86:9A:6E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/94vvjfjZie97TPU8OmPaZk6pqbM.roa
Signing time:             Tue 01 Apr 2025 02:11:35 +0000
ROA not before:           Tue 01 Apr 2025 02:11:35 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     9605
IP address blocks:        148.68.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 20:21:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 102 (0x66)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F89E0F15C1E20E191AAF17288F6E30FF01869A6E
        Validity
            Not Before: Apr  1 02:11:35 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=F78BEF8DF8D989EF7B4CF53C3A63DA664EA9A9B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:6c:7c:64:93:53:74:3e:f8:db:d7:15:88:0f:
                    a1:a5:8e:3e:d2:d4:52:2d:f4:64:f5:16:dc:51:b3:
                    d2:c8:bc:86:ae:b4:e7:2c:e5:43:84:7e:fe:52:0a:
                    95:9c:88:87:2b:38:e0:1a:e2:ef:47:f1:e3:9b:82:
                    39:e4:8f:f2:46:25:af:96:f0:38:bf:db:ee:81:fb:
                    14:0a:10:bf:bd:d2:71:ff:00:97:0b:11:e2:e5:64:
                    98:25:a4:3e:95:48:ed:61:67:9b:42:00:00:1f:2c:
                    f2:a3:65:f1:1a:de:e8:54:a7:7a:a0:6e:25:6b:5c:
                    49:94:51:13:b7:f3:e3:42:99:5a:08:f4:3a:97:ec:
                    1f:2a:9d:06:14:d8:0b:57:c1:1f:eb:b8:33:e2:3a:
                    10:52:dd:bb:01:01:8e:bc:8d:40:d0:22:10:ee:fb:
                    7f:04:c2:88:dd:0b:5e:a1:cd:b2:3c:69:1c:5c:6a:
                    d3:49:0e:45:f3:c5:ad:f3:0e:06:00:52:07:80:e2:
                    ad:5b:27:64:4e:6e:c7:5f:3e:14:96:39:80:ed:31:
                    4f:83:d5:cd:2c:10:0b:01:fd:6f:c4:bb:0b:cd:db:
                    12:2c:95:fa:4d:b4:cd:e3:98:f7:9e:20:df:1d:c2:
                    c7:7a:53:df:be:65:ce:4d:7b:d2:d5:98:15:ee:e1:
                    07:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:8B:EF:8D:F8:D9:89:EF:7B:4C:F5:3C:3A:63:DA:66:4E:A9:A9:B3
            X509v3 Authority Key Identifier:
                keyid:F8:9E:0F:15:C1:E2:0E:19:1A:AF:17:28:8F:6E:30:FF:01:86:9A:6E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/94vvjfjZie97TPU8OmPaZk6pqbM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.68.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         52:a9:2f:92:ff:33:29:64:93:a3:22:9c:b7:8f:1d:f0:af:2d:
         3b:c3:8d:12:d9:21:5c:b3:4d:61:ff:03:7d:95:d2:d2:fd:0d:
         2d:fe:11:18:f7:79:91:a3:0b:3c:de:93:e5:e1:28:fb:fb:e2:
         c6:d9:d6:ba:02:60:3b:6b:20:1b:ab:60:55:46:28:30:ca:e0:
         d4:16:42:5f:07:c6:0f:c0:6e:28:13:3d:67:00:72:06:5d:4f:
         d5:66:79:c2:18:55:05:88:5a:07:fe:c4:7e:8f:de:20:c5:e1:
         0c:3e:0a:b3:01:b3:21:00:7d:2f:c2:11:d3:c5:c5:ce:ed:33:
         19:1f:a1:80:33:f0:d3:cf:9d:e1:57:33:cf:4e:be:98:2c:7b:
         4a:84:f0:58:98:b0:16:9e:0f:d7:b1:c9:4c:8c:fd:ad:03:93:
         52:89:8e:e1:77:8f:c1:0c:ec:e5:ba:ab:99:1e:58:b5:2a:60:
         79:c5:05:32:06:01:24:f2:a9:a1:6e:15:cb:1a:e3:24:a3:82:
         b5:52:63:5c:8b:09:94:55:23:6a:8b:b8:f6:d1:dc:c5:88:3e:
         cd:db:6c:09:12:47:32:36:53:f2:1a:85:11:d4:2a:b1:9a:8d:
         84:7d:b8:74:63:81:ac:30:c6:11:48:c3:b5:cc:7a:0f:70:8f:
         1c:47:a5:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:51:41 2025 by rpki-client on console.sobornost.net