Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/PTLPsTgRyp0RE66NSG8yQd083qw.roa
File:                     PTLPsTgRyp0RE66NSG8yQd083qw.roa (raw, json)
Hash identifier:          1Jmth7IPkRpx6KlgBtfQJFceOz5GfhEeQy5rnrMQ+lE=
Subject key identifier:   3D:32:CF:B1:38:11:CA:9D:11:13:AE:8D:48:6F:32:41:DD:3C:DE:AC
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0D19
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/PTLPsTgRyp0RE66NSG8yQd083qw.roa
Signing time:             Tue 01 Apr 2025 02:13:44 +0000
ROA not before:           Tue 01 Apr 2025 02:13:44 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     9605
IP address blocks:        49.103.20.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 20:45:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3353 (0xd19)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr  1 02:13:44 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=3D32CFB13811CA9D1113AE8D486F3241DD3CDEAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:36:b6:2d:37:f1:42:a0:63:4a:02:29:27:11:
                    a8:17:0d:6b:32:fe:11:b0:eb:d0:61:26:c7:cc:83:
                    91:95:05:f4:e3:e7:cb:e2:0e:02:1a:61:ab:62:80:
                    54:77:a7:4f:b5:fc:9e:8d:3f:e7:20:9c:4b:aa:77:
                    28:ca:40:3b:11:fb:a5:b4:1c:83:5e:28:0b:6a:48:
                    a4:e1:36:07:f1:32:fa:00:e7:b7:91:1b:aa:fd:46:
                    7a:b2:dc:96:20:03:e7:5a:31:cf:3b:ef:6c:18:2d:
                    9f:c4:00:cb:01:02:4d:e0:82:b6:51:fe:3c:56:5a:
                    26:4a:82:21:e9:b5:0e:37:a6:f2:1f:d6:a6:ce:2b:
                    bd:f9:f7:da:1f:ad:3e:4b:57:1b:57:f8:ff:a1:6e:
                    72:d1:7c:6c:68:fa:30:55:0a:75:1b:77:80:08:17:
                    5b:fc:36:61:1c:6b:cc:a4:13:50:8b:e0:b8:a4:f5:
                    53:2f:66:e4:49:df:ca:ee:da:7a:de:69:bc:79:28:
                    36:e8:33:1d:9d:ba:f7:13:bb:01:9c:3a:83:80:d7:
                    8b:e0:85:79:5f:79:e2:3d:fc:51:1e:4e:f2:ae:93:
                    3a:cd:3f:a3:f7:54:31:a6:27:9d:27:08:c6:30:31:
                    43:91:b2:ab:91:b2:a5:dd:fc:c6:c0:5f:68:2e:e9:
                    a3:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:32:CF:B1:38:11:CA:9D:11:13:AE:8D:48:6F:32:41:DD:3C:DE:AC
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/PTLPsTgRyp0RE66NSG8yQd083qw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.103.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         dc:a6:09:2c:9b:07:97:82:b6:ac:57:39:b8:a1:a5:0e:34:e7:
         a9:51:98:95:40:cd:df:24:1d:d3:32:0a:6e:98:15:cd:f0:9c:
         7c:00:24:59:0e:21:62:1a:f3:72:7a:2a:cc:6c:f8:3f:d6:e1:
         07:ac:37:fe:32:e7:ab:ea:c2:8d:1a:64:04:e9:26:ee:d0:af:
         27:9b:29:21:47:6b:d3:89:ce:cf:c0:7f:3f:93:54:b5:a2:bc:
         57:44:cb:05:86:36:9c:d2:3e:b4:38:4a:80:ad:ec:69:bb:57:
         f0:0f:78:a1:71:61:6d:13:17:3b:a3:33:5b:aa:d2:65:af:64:
         d6:07:b3:9a:1d:4e:75:d8:24:c4:9f:e4:dc:c2:b2:63:9d:21:
         5a:3b:de:88:d4:1c:61:14:85:53:c0:b0:e2:4f:23:80:9d:91:
         90:5f:63:33:d6:ad:2e:6e:66:54:2a:75:df:f6:b6:e3:ab:6f:
         a1:0d:78:8e:63:f8:ce:ea:60:cb:5e:68:fd:0c:89:bc:4a:02:
         64:af:93:c1:d8:f2:10:02:f3:ce:68:77:e4:38:f9:d0:a6:d4:
         e4:07:5a:35:5b:f0:09:1d:51:09:ef:f0:03:7b:ce:8d:87:c9:
         d3:82:bb:0a:8d:43:c3:c4:53:f3:4f:5d:6a:7f:61:ec:0d:2c:
         ce:9f:9c:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:51:49 2025 by rpki-client on console.sobornost.net