Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/IBenXBwqmmMOglE9f38oN5UJDoE.roa
File:                     IBenXBwqmmMOglE9f38oN5UJDoE.roa (raw, json)
Hash identifier:          yhkv4ea3kyNLEmMVupAB63T125z9DVWoCdFSzWDAQJs=
Subject key identifier:   20:17:A7:5C:1C:2A:9A:63:0E:82:51:3D:7F:7F:28:37:95:09:0E:81
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0D37
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/IBenXBwqmmMOglE9f38oN5UJDoE.roa
Signing time:             Tue 01 Apr 2025 02:13:56 +0000
ROA not before:           Tue 01 Apr 2025 02:13:56 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     9605
IP address blocks:        27.230.95.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 20:45:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3383 (0xd37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr  1 02:13:56 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=2017A75C1C2A9A630E82513D7F7F283795090E81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:a1:ad:5e:54:3a:d5:48:34:27:6a:98:75:4a:
                    d4:1e:dd:f9:23:48:c9:09:3e:b1:e2:37:e2:93:8f:
                    68:bf:b1:f9:66:57:e5:63:17:03:93:b2:2b:92:fe:
                    ae:fb:53:9e:b3:b2:ba:83:5d:e1:a3:91:2b:3f:48:
                    83:a1:d4:7a:a2:2f:2b:2c:bc:7b:e2:3d:22:42:2f:
                    71:b0:fd:30:ab:ae:39:6b:27:9d:db:7e:14:3e:d4:
                    ed:8e:f5:5f:01:2c:85:7a:1d:f2:22:5e:c5:69:0c:
                    a8:ef:6e:a0:a2:be:5c:e8:03:ac:17:ee:f3:fd:21:
                    8c:b1:59:32:3f:dd:7c:82:28:7f:1c:f9:c3:c6:12:
                    76:da:37:43:df:ca:27:5a:75:4e:8b:41:93:5c:bb:
                    11:b6:8e:8d:7e:01:c2:49:64:2a:58:a5:b5:6a:f5:
                    db:12:00:51:ba:54:dc:3a:41:a5:59:34:7f:2a:16:
                    12:48:45:69:34:d1:b6:a1:2d:29:08:0c:07:78:e3:
                    4e:a7:15:89:c1:b3:df:40:d6:c6:b3:d8:7e:3b:c7:
                    68:46:93:fe:a3:04:7e:1f:6f:cf:2f:19:d7:bb:a5:
                    23:c4:4f:69:87:ef:39:bc:0d:e3:cc:30:13:2c:c1:
                    41:ba:61:31:86:73:cf:24:31:1d:eb:66:37:dd:69:
                    5a:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:17:A7:5C:1C:2A:9A:63:0E:82:51:3D:7F:7F:28:37:95:09:0E:81
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/IBenXBwqmmMOglE9f38oN5UJDoE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.230.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:9c:44:b2:dd:96:b0:c6:93:dd:d7:93:66:d3:11:92:cc:5e:
         07:ef:46:61:32:de:07:41:d9:17:8b:76:f9:2f:a6:56:04:30:
         d3:fa:c1:c7:b0:17:c9:6c:c5:f1:55:e5:ae:b8:b6:b9:01:ed:
         4c:2a:bb:a8:bb:ba:bd:c4:08:7c:87:f1:50:77:f8:83:7b:a3:
         5f:9d:4e:37:8a:75:7d:bb:ef:4f:17:75:ca:aa:02:da:13:d1:
         c7:18:df:3e:c4:a1:e3:9e:cb:77:32:60:4b:33:cd:48:fa:91:
         16:85:92:c8:02:5d:a3:27:f1:f9:23:64:a6:cc:cc:62:ea:a1:
         63:d2:79:19:82:b6:44:0f:f8:93:77:eb:a0:e5:70:bc:c0:35:
         ac:c7:22:3b:38:af:d6:e1:32:33:ce:7b:dc:06:b1:9c:42:2d:
         3c:d8:f5:20:4f:01:1e:cb:b2:fc:e4:63:6c:5a:d5:c0:0c:7e:
         a4:74:7f:0e:fc:6a:d1:03:1d:cb:80:b6:d7:8e:b9:f9:ea:3b:
         7b:53:61:8e:07:f6:4d:79:0e:67:3a:99:e0:6a:b9:75:18:be:
         38:c8:3b:70:75:06:85:9b:f8:f2:4c:ce:5d:98:06:a6:19:b5:
         98:43:7d:85:1c:24:0e:2d:f4:1c:22:ce:56:e2:0d:0b:07:e9:
         55:14:50:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:51:46 2025 by rpki-client on console.sobornost.net