Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/ShpmTWh6hblp0MXPEw3ndJ2Qbwk.roa
File:                     ShpmTWh6hblp0MXPEw3ndJ2Qbwk.roa (raw, json)
Hash identifier:          1LsHSGorrfmZXqTBKQt6YcW3nCBk74X/4nL9J7JSPjE=
Subject key identifier:   4A:1A:66:4D:68:7A:85:B9:69:D0:C5:CF:13:0D:E7:74:9D:90:6F:09
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0CD7
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ShpmTWh6hblp0MXPEw3ndJ2Qbwk.roa
Signing time:             Tue 01 Apr 2025 02:09:15 +0000
ROA not before:           Tue 01 Apr 2025 02:09:15 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     9605
IP address blocks:        183.75.230.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 20:45:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3287 (0xcd7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr  1 02:09:15 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=4A1A664D687A85B969D0C5CF130DE7749D906F09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:81:76:24:d5:72:66:74:f0:6e:b4:83:44:10:
                    31:0e:b6:42:89:cb:f3:f3:83:17:1f:b3:65:6e:19:
                    61:9e:bd:07:e5:cf:07:9f:b1:40:70:65:60:ea:39:
                    74:d9:45:01:16:da:2c:7d:40:8d:70:8d:67:03:c0:
                    27:31:9e:ed:a1:be:30:dd:60:38:08:ad:b6:35:74:
                    24:07:a2:16:5f:75:ad:1c:e5:63:71:c7:90:5e:5d:
                    42:9b:29:64:cb:f3:0b:14:a5:3f:28:c4:f9:1c:bb:
                    e0:f5:88:f3:5a:4f:29:49:a6:36:d0:ea:19:bd:c9:
                    56:8b:ec:26:77:f8:d9:66:17:19:cc:07:c2:ed:b3:
                    3b:6e:5d:b6:59:51:5c:9d:06:35:b2:95:3f:1d:8f:
                    ed:84:10:e2:a8:b7:7f:f8:38:71:6c:b7:08:1a:9e:
                    57:e2:6c:bf:7e:c3:7c:8b:0e:a2:37:8c:b4:a4:ec:
                    1f:0f:3d:70:df:14:ec:6d:dc:00:13:29:ac:fa:97:
                    de:26:75:4d:39:6a:a5:cb:42:ae:32:eb:84:27:69:
                    33:fb:7d:8d:92:55:d0:43:2e:0b:8e:65:38:3c:6b:
                    0a:8d:26:d8:f0:c1:4a:3f:3c:5c:8a:00:ca:88:a4:
                    59:a8:3e:c8:65:37:30:a6:28:34:31:17:d4:4d:0d:
                    7d:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:1A:66:4D:68:7A:85:B9:69:D0:C5:CF:13:0D:E7:74:9D:90:6F:09
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ShpmTWh6hblp0MXPEw3ndJ2Qbwk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.75.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:89:88:cd:6c:a6:f6:c1:f4:61:36:51:18:2e:9c:d1:57:ca:
         4d:36:c4:75:9c:77:94:32:61:95:51:5d:e2:32:dc:d6:0d:89:
         4d:43:b3:76:fa:31:ca:5b:4a:b8:fd:81:58:ba:cf:75:d8:6f:
         72:19:58:1c:99:59:58:f6:80:17:2b:fa:45:33:67:5f:4b:26:
         3b:8f:52:ff:8f:a3:91:d1:9d:d9:51:ae:fe:2a:04:fd:1b:d9:
         d6:ba:4f:3a:f3:fc:0c:5a:7e:15:89:aa:8c:47:e7:91:a2:60:
         0a:6a:13:57:65:c5:53:cf:14:45:68:44:28:8b:76:1b:fc:16:
         83:35:88:3f:10:27:97:48:c0:b8:4c:07:3d:71:67:31:9a:15:
         92:b3:34:76:c8:c4:f2:30:2c:48:0b:84:72:2b:0e:d9:32:26:
         a1:f1:0b:e0:b1:31:68:20:72:bc:9d:2e:b4:07:74:d2:6d:fb:
         52:44:74:4b:39:2f:00:42:a8:aa:87:98:c8:3a:ac:19:f5:13:
         59:9e:ea:98:0c:78:6b:e2:ff:43:37:a5:b4:d2:85:bc:3b:62:
         29:22:e2:a0:18:2e:47:40:86:11:63:95:f2:97:22:da:6a:0d:
         0c:d0:74:d0:df:9e:c8:1a:fb:e6:cf:01:2b:6c:f4:05:66:46:
         fd:f6:3e:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:51:51 2025 by rpki-client on console.sobornost.net