Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/NgGgU3KcL4ynno9weA7_qXwMwg0.roa
File:                     NgGgU3KcL4ynno9weA7_qXwMwg0.roa (raw, json)
Hash identifier:          1CMdyEy879wiw6icklvbTC9thnW8EAO7zmaL3S63Ak8=
Subject key identifier:   36:01:A0:53:72:9C:2F:8C:A7:9E:8F:70:78:0E:FF:A9:7C:0C:C2:0D
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0DE0
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/NgGgU3KcL4ynno9weA7_qXwMwg0.roa
Signing time:             Tue 01 Apr 2025 02:27:28 +0000
ROA not before:           Tue 01 Apr 2025 02:27:28 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     9605
IP address blocks:        1.66.68.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 20:45:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3552 (0xde0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr  1 02:27:28 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=3601A053729C2F8CA79E8F70780EFFA97C0CC20D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:13:c2:15:1f:89:3a:bf:30:66:a3:21:66:a4:
                    72:e3:c1:66:5a:e7:ca:81:9a:c3:c6:4c:71:11:c1:
                    7b:ed:27:4c:80:7b:54:2b:f1:37:15:47:34:55:a3:
                    dd:97:f4:37:16:de:89:a3:f7:7d:8a:28:bc:13:ac:
                    ce:8d:db:5c:3b:bf:24:90:d0:5e:dd:7b:0c:03:4c:
                    97:de:90:c8:62:54:f5:c5:50:c6:81:8c:ac:1f:94:
                    d2:77:b9:4c:a1:90:6a:f0:c0:ae:9a:35:a2:2c:bb:
                    f2:35:61:2f:47:fd:fc:a5:52:1e:14:cb:9f:9f:ed:
                    e1:31:a0:8d:04:94:cb:10:8e:0a:0f:de:4f:e8:29:
                    9e:c8:8a:c9:05:e3:d2:8c:57:19:ef:e9:42:35:bc:
                    8d:45:c8:5b:ee:8e:05:3a:d5:34:08:ef:6c:9e:a3:
                    0d:5c:41:8d:f3:e5:4a:95:69:19:46:0a:b4:2c:0d:
                    aa:78:e5:12:3d:11:a0:94:44:29:23:bd:de:de:ea:
                    0d:e8:77:12:e7:20:80:a2:23:74:69:72:be:1f:ae:
                    d7:d1:14:53:41:41:36:3e:7a:92:04:4b:25:c4:dd:
                    b8:d9:f2:88:dd:89:09:48:ce:96:f4:29:f8:ec:c8:
                    37:49:a7:50:bb:99:a8:52:28:1c:35:ac:4d:46:4f:
                    45:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:01:A0:53:72:9C:2F:8C:A7:9E:8F:70:78:0E:FF:A9:7C:0C:C2:0D
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/NgGgU3KcL4ynno9weA7_qXwMwg0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.66.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d4:83:89:23:bb:af:a7:af:e6:a0:00:00:eb:78:32:6f:02:df:
         f6:7e:bd:ad:07:bd:5a:87:56:f9:62:94:ed:ff:cc:ab:2d:44:
         81:6b:8e:ea:ef:ce:fe:fa:26:a5:b8:a0:9f:ba:7a:ff:42:d1:
         07:09:e1:63:b1:85:49:a9:c7:6f:79:3a:9e:0c:f1:a3:d1:b1:
         4c:aa:9c:53:13:57:b1:46:56:ef:e2:ec:ba:b4:ee:25:9b:b4:
         28:d9:b9:eb:3f:1a:19:94:0b:cc:e6:92:73:a3:4f:f3:7e:f4:
         b7:96:54:cc:0a:19:2f:cc:92:8b:da:67:b6:ec:33:80:84:bb:
         44:02:72:65:50:07:0b:4f:a5:43:65:2e:be:d9:7e:94:32:8c:
         1f:e5:4f:21:1f:d1:93:4f:56:b9:3e:7d:5f:42:26:11:b3:a9:
         57:44:26:cf:26:a4:1e:1f:8c:7d:e2:33:98:06:f0:0f:14:5b:
         1b:df:3b:5b:26:cb:45:2a:5e:a2:4b:c1:be:fc:02:28:3f:6c:
         c5:29:a6:ad:fb:95:29:b3:9f:d5:ba:df:03:e7:fd:49:21:bf:
         ea:bd:8d:98:d7:2b:bb:15:4a:9e:18:ea:ae:4e:1c:d5:2d:3e:
         00:db:0f:90:1c:e8:7d:09:91:b3:e0:25:3e:2e:74:8f:36:c0:
         aa:a0:b6:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:51:48 2025 by rpki-client on console.sobornost.net