Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/AgEW6niyWcoobSfoM9gsNxGjEQ4.roa
File:                     AgEW6niyWcoobSfoM9gsNxGjEQ4.roa (raw, json)
Hash identifier:          pp/SVSzbaN6kkk7BiLFwQInXlpkSX21H56KjL8set9k=
Subject key identifier:   02:01:16:EA:78:B2:59:CA:28:6D:27:E8:33:D8:2C:37:11:A3:11:0E
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0D83
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/AgEW6niyWcoobSfoM9gsNxGjEQ4.roa
Signing time:             Tue 01 Apr 2025 02:21:28 +0000
ROA not before:           Tue 01 Apr 2025 02:21:28 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     9605
IP address blocks:        49.108.238.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 20:45:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3459 (0xd83)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr  1 02:21:28 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=020116EA78B259CA286D27E833D82C3711A3110E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:fe:7d:4f:ba:81:1e:f6:cd:d9:c8:2d:84:6b:
                    d5:1d:be:6b:1f:e9:ec:f1:0f:3a:db:8d:07:7d:83:
                    11:52:33:3d:a0:1f:c5:21:75:32:e5:26:ce:35:b1:
                    e3:58:f3:35:34:90:13:e9:40:be:60:da:e4:9e:5f:
                    a6:6f:10:94:c1:81:b5:36:80:df:ab:64:35:57:03:
                    c5:1d:c6:cf:c6:ec:ec:d3:35:d5:2e:3c:42:34:9c:
                    44:0f:64:76:d8:d8:31:7a:50:71:3d:dc:ac:fb:c8:
                    87:62:a4:f8:75:90:b8:1e:2b:75:12:e6:11:f1:dc:
                    13:85:86:d4:18:78:98:27:0c:f2:2c:73:18:86:61:
                    ce:a4:17:4b:da:7f:95:e4:3f:79:ab:4c:72:e3:83:
                    c1:cf:a5:88:f9:75:69:e3:6f:f1:d9:78:78:44:d5:
                    ef:d4:5f:5c:52:53:64:2b:68:88:e2:e4:e5:e9:0e:
                    08:2c:57:77:1a:79:e6:81:22:37:aa:da:32:76:d8:
                    a1:a3:d9:89:b4:7c:62:c6:29:8b:24:48:57:2b:17:
                    cf:fb:77:bc:b7:4f:4b:45:d1:15:44:4b:73:1a:73:
                    c4:b4:62:03:51:7f:06:db:70:8e:48:4a:c8:a7:54:
                    99:7e:57:c9:1d:70:07:76:3a:76:a3:64:81:9e:2f:
                    e4:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:01:16:EA:78:B2:59:CA:28:6D:27:E8:33:D8:2C:37:11:A3:11:0E
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/AgEW6niyWcoobSfoM9gsNxGjEQ4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.108.238.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8e:4e:49:e5:cb:da:84:e8:fc:61:92:8d:a4:6f:bc:91:06:89:
         86:aa:a8:ad:ab:a0:dd:6b:2e:97:b3:8e:ee:a7:24:fa:0e:0e:
         88:c6:79:79:46:fb:67:95:e6:31:a0:b3:2f:21:02:62:7f:c6:
         0d:e6:9d:4e:d3:d9:9a:7d:8b:10:f0:07:7d:06:5e:35:7e:74:
         d1:f2:87:54:2f:fb:84:f1:8b:da:5c:8d:6a:e4:94:0a:b4:09:
         43:02:46:b4:99:6f:f3:d6:df:d0:f6:4c:6c:4c:bb:2a:50:95:
         0f:63:7a:c3:3e:8f:b3:ea:12:1a:57:fa:19:44:59:82:8c:51:
         c0:e4:36:3b:4e:36:fb:18:5f:ff:cf:00:29:57:60:fd:59:2c:
         e3:e7:92:00:6c:b3:8d:2b:86:56:fd:25:03:57:07:50:3c:23:
         b2:bb:56:c3:b2:31:d8:ac:66:9c:66:a7:43:20:02:32:ed:0e:
         e4:0c:c3:7b:1d:60:5d:1c:e9:f8:2b:f0:65:11:73:1b:b1:c6:
         84:87:c9:f1:4c:6a:60:9a:d0:d2:d9:7b:9e:54:25:19:ac:56:
         e4:bb:7b:7a:cb:61:3b:10:69:9d:a8:77:45:19:66:50:79:80:
         a6:2f:75:1e:80:3d:ee:a1:d3:3d:cf:00:c6:b5:26:ea:38:50:
         03:fa:b6:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:51:42 2025 by rpki-client on console.sobornost.net