Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/9HRc-RbFcQvqfvu75P5ES0Xx4dI.roa
File:                     9HRc-RbFcQvqfvu75P5ES0Xx4dI.roa (raw, json)
Hash identifier:          8ru5Df090eZbb4zOIGRjIuZtXSWUOVty7wDS81rUITk=
Subject key identifier:   F4:74:5C:F9:16:C5:71:0B:EA:7E:FB:BB:E4:FE:44:4B:45:F1:E1:D2
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0D27
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/9HRc-RbFcQvqfvu75P5ES0Xx4dI.roa
Signing time:             Tue 01 Apr 2025 02:13:49 +0000
ROA not before:           Tue 01 Apr 2025 02:13:49 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     9605
IP address blocks:        1.73.238.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 20:45:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3367 (0xd27)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr  1 02:13:49 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=F4745CF916C5710BEA7EFBBBE4FE444B45F1E1D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b0:74:5f:ae:9c:61:b7:87:c4:ea:01:92:e2:
                    24:70:d4:2f:dc:d4:db:d6:b3:ef:ef:35:a8:5e:29:
                    c1:e2:00:3c:94:7c:28:9d:fb:4e:83:aa:0c:f6:43:
                    dc:6e:3e:2f:af:f9:fb:53:f2:2b:cd:d5:c7:2e:ff:
                    cd:8c:ad:9f:25:c3:ad:3a:d1:c0:4e:bc:c8:7e:b4:
                    2a:ff:fc:3b:cc:bf:5a:31:56:a0:cd:ed:37:52:14:
                    92:c0:bd:af:f8:5a:4c:06:0d:0f:cd:3c:c4:bc:d0:
                    5d:74:7b:ef:b2:df:49:9b:f5:17:e7:fd:0f:82:63:
                    44:41:41:0b:b8:14:e1:a4:c6:29:1c:cb:4b:d6:5d:
                    83:ed:79:a0:78:57:c5:1b:9e:0a:6a:a4:86:bc:14:
                    30:74:f9:ee:25:39:d4:d6:a5:0b:5f:0f:ce:67:f7:
                    be:b8:7b:98:30:4a:3f:8d:88:25:30:91:c8:0d:1d:
                    3a:65:ac:99:f1:17:4f:54:98:d6:7d:77:36:c7:a4:
                    48:a0:84:e5:09:ad:0e:a8:fa:45:2b:cc:6a:f8:43:
                    9f:2c:52:f9:5e:b1:b1:45:88:34:c7:11:6f:90:5d:
                    30:65:4e:64:fd:8f:37:6e:2d:99:1f:13:4c:9e:88:
                    30:d6:d1:9e:9c:ff:79:20:41:7a:c1:25:cb:38:0b:
                    2a:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:74:5C:F9:16:C5:71:0B:EA:7E:FB:BB:E4:FE:44:4B:45:F1:E1:D2
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/9HRc-RbFcQvqfvu75P5ES0Xx4dI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.73.238.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bc:e1:f3:1d:85:68:df:8e:9c:12:77:87:03:75:01:31:59:0c:
         70:6c:99:51:c5:48:40:7c:88:da:75:23:8a:08:d3:e7:8a:7b:
         33:52:b1:ab:bd:3a:90:4e:d1:be:5a:f8:37:de:9d:48:4e:bc:
         0c:5f:09:57:be:f2:de:bd:3a:9b:1f:75:8d:f1:c4:34:bb:41:
         23:b3:50:0a:b2:38:b4:d0:25:a7:95:5e:16:54:b7:e4:bd:13:
         34:7c:74:13:eb:10:2a:2e:1a:f0:1e:f0:d9:c2:ce:c5:f7:1f:
         96:9b:ef:23:be:f5:42:2d:6d:e9:87:be:c3:01:61:b6:29:ce:
         ed:9e:36:2a:bb:73:66:1c:75:46:6c:11:23:0b:f6:a6:ca:f1:
         1f:4f:80:43:8b:7a:92:e0:25:2e:f5:7b:e7:3f:2e:99:b5:e1:
         ea:1c:f6:55:82:fc:9a:0a:9a:b0:56:56:c8:2b:8b:5a:b4:be:
         49:e0:df:0e:12:bb:8e:95:ef:a2:64:cd:ac:f6:ce:ad:cf:2c:
         fe:ed:18:dd:22:2c:80:db:9f:60:52:8f:62:1d:14:77:73:94:
         6c:85:ad:4c:aa:a7:62:ae:54:83:72:2e:db:2d:87:f9:6b:cc:
         18:96:6f:c2:50:93:87:dc:b2:3d:4d:8d:b3:dc:e1:0c:fe:64:
         19:83:68:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:51:41 2025 by rpki-client on console.sobornost.net